Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa
File: 8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa (raw, json)
Hash identifier: S/YW1QCfUMMlLZOGqLTqTOw5YtieUEiTqoY2VlQ19xA=
Subject key identifier: A9:09:AC:92:F2:D1:8A:91:D7:15:2F:A3:4B:41:DF:68:0F:EE:1C:62
Certificate issuer: /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85
Certificate serial: 010D0C9F432858480644FACA50203E25A7A35A80
Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 6327
IP address blocks: 24.244.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fa:ca:50:20:3e:25:a7:a3:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=287be700-452f-43b2-8ad6-1c5e04fa90a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:3e:2a:9b:42:8f:73:1e:91:41:1d:f0:7f:
1e:64:06:bb:ba:b9:81:62:a7:dc:11:ac:a7:67:cc:
7c:7e:6b:8c:72:de:d0:90:bd:f2:fa:76:0d:b4:78:
3f:da:2d:bd:49:c8:67:e3:03:c1:34:03:ff:80:d9:
62:d6:2c:10:9e:74:03:1d:a9:89:8b:a7:b4:80:7b:
8d:ad:6a:d1:67:2d:2e:bf:de:11:40:d0:e5:65:61:
f3:f9:a6:d9:ff:00:3c:c1:e9:a6:39:0b:cc:0c:ae:
94:a6:e0:5b:0c:bf:58:c8:b0:88:18:00:bf:14:fd:
0a:41:be:23:28:c7:b2:c9:05:79:35:6d:87:81:3f:
16:45:db:00:ae:1f:8e:6f:27:2e:35:dc:17:b8:6a:
c1:13:7f:65:24:dd:3f:29:a4:de:38:f5:6f:55:73:
33:8d:d0:9e:4f:fa:b7:29:b6:72:f5:e4:8a:d9:3a:
0f:da:12:10:97:b7:17:64:bf:89:fc:ad:1f:4b:c1:
3c:2e:8b:59:d2:db:a9:29:71:30:c8:48:27:f1:97:
d9:8c:93:05:b5:3a:26:cb:d5:ca:c1:71:f5:df:29:
f9:61:7b:d4:1a:29:03:97:62:af:4a:91:77:17:d9:
92:12:ed:bd:f3:f3:d7:e3:67:29:e2:d4:2f:51:51:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:AC:92:F2:D1:8A:91:D7:15:2F:A3:4B:41:DF:68:0F:EE:1C:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl
X509v3 Authority Key Identifier:
keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer
sbgp-ipAddrBlock: critical
IPv4:
24.244.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:bb:2d:b6:85:80:6f:a0:b4:b2:0d:aa:c2:f0:6d:f7:de:38:
70:89:07:ff:e7:dd:10:91:14:9d:73:19:cf:5c:ba:af:1c:c7:
1f:7a:61:bc:b4:9e:3a:f1:3f:8e:33:c3:a3:15:e4:48:88:32:
76:1d:0e:46:e6:e9:02:29:c0:35:d1:fc:9d:d3:ea:4c:f3:61:
36:68:df:50:ac:42:6d:88:65:e0:25:c8:71:f1:bd:8e:08:41:
e1:58:88:80:40:5f:ae:05:f4:29:4d:cc:1a:07:09:73:b7:48:
4a:76:6f:69:e0:34:32:7e:84:12:90:6d:19:d6:5e:8e:42:46:
3d:3a:53:da:77:b4:61:a4:36:bc:fb:b9:d3:49:a7:cf:39:a2:
a5:8c:05:d8:ee:fd:1b:93:1b:ae:84:20:04:e1:d8:b6:89:96:
2b:34:19:3d:8b:99:2e:48:9b:c6:67:ab:15:82:79:cc:15:a0:
8b:f7:6e:f5:11:9f:08:35:b3:d6:82:bc:fb:da:0a:e2:7a:ce:
73:15:e8:95:78:cb:ba:7f:64:e4:3f:a4:67:cd:48:0b:2f:02:
6e:fe:fc:56:ad:00:b8:b6:bb:41:c6:f7:ac:2c:d7:fa:16:7b:
5a:e0:f8:d6:49:98:48:e8:f4:61:67:c5:46:7b:13:61:3a:82:
a0:a8:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:17 2025 by rpki-client