Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e06c5365-af4f-330e-a33d-af74fa17f92d.roa
File: e06c5365-af4f-330e-a33d-af74fa17f92d.roa (raw, json)
Hash identifier: DB/GZCN4r4AlCYioZ+hc7xufwWiMaMlr51WJSTW+NfE=
Subject key identifier: C9:EE:B2:12:38:93:AD:63:50:0D:2A:D6:FA:F7:73:2F:79:6F:F9:EC
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819CFF506F61C0E019FD88480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e06c5365-af4f-330e-a33d-af74fa17f92d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 397550
IP address blocks: 216.66.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:f5:06:f6:1c:0e:01:9f:d8:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=d1bb73a2-89f5-492f-b00f-4c66dba35994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:52:2f:cb:0d:1b:5f:c1:d5:0a:ec:68:a5:
be:81:28:ac:ff:4e:30:72:b4:a8:2d:f8:d0:bd:4e:
9c:38:f8:97:23:8e:85:1b:13:02:f7:4f:27:06:f5:
f9:6a:b5:cc:ac:92:35:d1:e7:4e:fd:dc:e6:c2:1b:
b4:e7:63:38:39:ef:57:f1:68:a4:67:18:95:c6:c6:
d7:62:d6:e8:a9:24:f6:c1:23:79:cb:84:45:ba:84:
02:ec:dc:24:b1:d2:ba:b1:97:b0:8c:f3:52:58:bb:
c7:0a:68:95:cb:7a:40:34:b1:53:04:b1:39:f5:2c:
0d:e7:2a:e4:78:1e:5a:39:1c:b1:a2:d7:46:1f:ea:
f8:c7:25:2a:fc:32:bd:ca:0e:f2:12:cd:75:13:1d:
bc:53:80:ad:fa:31:30:bf:e8:c2:13:88:1a:5e:d5:
78:1f:62:77:ca:aa:70:4e:59:db:57:49:44:66:f8:
ff:b1:63:aa:70:8d:8f:5b:30:a0:5e:ef:fd:7a:fd:
a2:a9:1b:6f:10:d0:71:69:a5:ec:b0:16:c2:91:2c:
e8:21:83:f9:f8:8d:ad:0f:d3:cc:e3:70:b9:e8:5d:
dd:14:1f:56:4c:d4:36:35:e2:95:64:40:8e:b5:12:
e5:df:6d:48:9d:c5:7c:28:c0:3a:21:25:8d:23:62:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:B2:12:38:93:AD:63:50:0D:2A:D6:FA:F7:73:2F:79:6F:F9:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e06c5365-af4f-330e-a33d-af74fa17f92d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:2a:25:8c:ee:c8:2d:89:18:7a:75:86:84:48:f0:7a:33:a3:
97:35:0e:ae:3e:1b:d6:6f:c8:8d:f6:4d:c6:cd:07:22:2d:ec:
32:29:e9:f9:95:e3:5a:99:70:4a:7b:00:37:2f:c1:ca:b9:6c:
e6:80:01:ff:68:79:2e:9a:83:15:b1:13:1e:6a:8e:12:1c:6e:
84:f6:b6:7f:cd:00:ec:42:3d:41:6e:90:32:38:51:00:1f:c2:
4f:57:ea:2a:ef:07:aa:23:60:28:bc:05:da:c4:c8:8f:a7:55:
99:17:3f:68:39:1f:30:73:68:00:b4:70:8f:73:4a:0b:38:44:
ed:07:bd:83:5c:01:3a:6e:0d:04:8f:05:48:2c:ad:d3:ec:52:
5d:74:65:c0:69:22:03:d3:a9:fe:8c:72:5f:d5:17:14:93:c4:
e2:15:e6:06:ce:b3:7c:3b:20:f9:98:44:ee:f9:ca:46:89:a2:
c3:c1:d3:43:7d:42:f9:c0:e8:30:90:35:16:7d:e1:de:43:38:
1c:20:22:5f:54:65:92:87:1a:43:21:98:cf:85:ba:18:d3:34:
cb:76:ac:ca:f2:1e:80:e7:0b:e3:b1:a3:bc:8e:49:3b:ae:37:
57:ea:ea:8d:bc:70:eb:f6:50:78:b0:61:fc:e9:6a:8c:0a:f4:
77:c7:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:11 2025 by rpki-client