Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f6c18a8c-0293-3242-b55f-6b6735184743.roa
File: f6c18a8c-0293-3242-b55f-6b6735184743.roa (raw, json)
Hash identifier: PhMsrbIXAHyPYaF4AV0zrIXxFynYcFhxthOhbSNUwZs=
Subject key identifier: BA:B8:BE:EA:EB:73:E0:62:B3:46:F9:5A:FF:6F:EB:5D:C3:20:EB:4D
Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial: 010D0C9F43285848159FF293A68C5FBF050F4580
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f6c18a8c-0293-3242-b55f-6b6735184743.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 12130
IP address blocks: 67.231.0.0/20 maxlen: 24
208.94.156.0/22 maxlen: 24
216.82.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f2:93:a6:8c:5f:bf:05:0f:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=5593e278-a523-4b2f-8b80-bbc5ae41f2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0c:c1:fc:09:10:f4:64:c6:65:18:85:c1:2e:
92:2e:68:6a:ad:c9:c6:a7:49:d3:60:a7:a8:3e:f0:
30:ff:3c:bd:35:82:39:e4:89:95:2a:79:fc:71:3e:
7d:52:ca:05:a8:52:69:4f:12:b5:ec:cf:b1:6b:58:
c4:b1:00:a8:07:86:1d:7d:45:4c:ed:3e:d3:55:4f:
87:27:4d:0a:51:a7:89:c3:7b:dc:60:ab:8a:ef:a7:
87:bf:10:a6:4c:91:5d:8a:ad:a4:28:d0:ee:2f:e9:
77:9e:98:74:8e:69:d6:cf:17:33:b4:ec:5d:55:d3:
4c:3f:17:f1:43:c0:7c:68:d8:d9:4a:fb:87:15:04:
48:8c:97:68:ed:d9:0d:f9:63:f0:51:8a:8b:98:28:
5d:19:16:0c:86:f7:fe:ff:34:61:81:56:94:8d:7d:
03:e5:27:0f:89:be:2c:45:6a:e1:51:30:4b:4d:41:
b0:11:d9:a9:7e:67:8f:c7:c3:b2:fc:4d:5f:28:e1:
cc:d0:42:bc:2e:3b:1b:21:7b:7f:5e:42:3e:2e:fb:
df:bc:44:9b:1a:e0:61:6a:99:ad:f6:7a:92:61:4b:
ac:34:db:e0:02:d6:ea:27:66:f3:96:46:e6:1a:d4:
cd:a9:3d:b1:90:3d:88:21:5d:78:5e:5d:68:2b:43:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:BE:EA:EB:73:E0:62:B3:46:F9:5A:FF:6F:EB:5D:C3:20:EB:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/f6c18a8c-0293-3242-b55f-6b6735184743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
X509v3 Authority Key Identifier:
keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
sbgp-ipAddrBlock: critical
IPv4:
67.231.0.0/20
208.94.156.0/22
216.82.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:03:97:b0:00:1c:c9:fe:33:35:a6:ec:3c:f1:ac:f8:7a:6a:
3c:72:7e:9c:41:3e:40:56:20:10:a5:e0:7d:35:36:2b:ed:37:
9e:6d:cb:57:28:f7:c1:90:c4:71:54:b2:2c:28:23:b2:4c:8e:
af:67:1c:ff:f5:db:a9:b9:39:66:0a:b3:55:a6:06:f6:4c:bb:
55:b6:5d:b9:15:8b:c9:b0:15:5a:ce:ef:2d:b0:88:8b:fa:33:
9f:15:25:24:f5:ce:0b:6b:a4:aa:ec:7f:b3:09:9a:b1:bc:45:
f4:65:28:7b:df:51:a3:01:c4:22:2c:ca:b0:c8:d7:5b:a7:bf:
dd:a1:2a:86:d7:cb:39:22:9f:0a:83:d5:74:bd:91:d3:2e:6e:
40:d3:bc:68:86:d7:de:5f:47:71:53:ba:71:59:92:62:7f:8e:
e1:4d:2d:f0:a4:43:e7:70:11:9e:01:b7:6a:1e:15:4f:d5:65:
d8:f1:48:53:87:99:51:65:16:99:9a:56:5d:28:10:fc:28:e8:
ea:fe:6b:82:72:a9:de:f5:c7:ae:5b:e1:6b:10:fd:6e:61:00:
0e:a4:89:46:ee:06:07:90:0e:5b:6b:c2:b3:67:53:54:a8:d7:
e5:19:66:b9:5a:51:71:dd:0a:31:f8:3d:1c:9b:13:99:b6:74:
08:ae:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:44 2025 by rpki-client