Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa
File: fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa (raw, json)
Hash identifier: WCsfr009FQScbTLVX3Lg2+rLbHmEbhiXi4zG53V1D+Y=
Subject key identifier: 23:68:20:B7:47:E2:AD:04:45:E4:39:15:0A:B0:80:4E:87:A6:53:D3
Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial: 010D0C9F43285848159FF1863661E49B42904790
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 32482
IP address blocks: 216.82.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f1:86:36:61:e4:9b:42:90:47:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=cbeac10d-1aeb-4638-8d6b-b96119fe3cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:1c:52:d0:62:4f:13:7b:6c:81:06:21:00:
2f:4a:b9:54:a2:09:9d:5e:2b:d9:bb:b8:4d:9a:ba:
9e:9b:c5:19:fb:32:ec:07:51:83:51:9f:94:33:a8:
53:d2:ab:66:90:ed:be:c2:c0:91:a3:16:7d:e4:db:
84:12:3c:68:66:6e:0c:1e:83:23:86:4b:3b:fe:12:
c3:fd:99:da:c5:b4:7a:03:cc:8d:23:04:7f:0b:12:
88:3c:58:d5:02:00:22:df:41:8e:05:41:0e:22:4b:
b4:53:c1:fb:95:c0:80:78:9f:92:5b:53:6c:e3:c0:
c9:12:d4:53:1d:7d:6d:fa:a2:65:26:00:99:8f:1a:
e5:82:37:30:eb:5a:ca:f9:3d:2c:a2:1c:ad:36:9a:
28:4b:10:10:05:86:18:bc:48:43:b1:1f:7f:68:48:
d4:a0:db:35:eb:15:bf:d4:5e:e6:07:6a:56:25:0b:
02:56:7e:6f:91:9d:b3:d9:50:f3:ed:8f:b6:cf:84:
83:c7:64:4b:44:c9:15:e8:79:f8:83:44:3b:d5:fe:
85:3a:94:4f:16:04:3b:b8:2b:8b:36:3e:d4:b0:84:
e9:48:a0:1b:ee:ad:db:cf:90:cb:a1:76:b8:ce:47:
4f:ac:f6:d2:95:07:2e:01:fb:95:eb:b0:26:ec:cf:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:68:20:B7:47:E2:AD:04:45:E4:39:15:0A:B0:80:4E:87:A6:53:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
X509v3 Authority Key Identifier:
keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
sbgp-ipAddrBlock: critical
IPv4:
216.82.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:dc:e6:4e:9f:0b:5c:7f:0b:dd:e6:32:14:40:f9:50:d2:ae:
7e:4b:df:77:32:a8:32:44:5f:bc:15:78:ca:95:bb:74:06:83:
1e:61:7c:d4:5e:4b:60:a9:0c:d7:65:32:94:d1:db:51:19:62:
c3:37:a9:ca:bd:6c:76:2e:0c:7c:a6:62:6f:a5:dd:93:9c:e4:
ab:9b:74:67:c0:4e:e1:97:bb:75:b2:4c:b3:da:66:1e:02:3f:
01:4c:1c:f8:56:bd:a0:bb:88:f3:71:d8:23:10:88:7d:ab:8a:
33:ab:9a:26:5e:ff:04:94:e7:c8:53:51:3b:81:44:e8:40:3d:
a6:53:cb:3a:3d:ea:1e:21:9a:28:6e:ff:1b:bb:9d:80:6b:09:
2e:15:8f:a8:53:e9:28:33:53:e7:94:b0:ef:3f:b7:42:58:9f:
5b:0d:44:c8:0c:7c:65:1f:30:3e:2f:06:59:6b:b8:7b:cf:fa:
07:c7:0b:3e:66:f1:aa:2a:f6:17:60:3f:c8:ca:7b:cb:5c:78:
61:84:86:3c:e5:9e:5c:8d:0b:c8:1a:88:a6:12:ca:c0:d9:50:
32:70:9a:ee:ab:32:74:b5:22:45:97:24:9e:be:73:f0:2f:80:
45:c1:30:fa:81:16:a6:c6:22:4c:c7:2a:a7:b6:d8:91:ea:ad:
33:00:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:09:54 2025 by rpki-client