Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2cebf233-7f0b-38fd-a86c-3c930d8427fd.roa
File: 2cebf233-7f0b-38fd-a86c-3c930d8427fd.roa (raw, json)
Hash identifier: OrZSjhC3OHstsvHuRf0SacGUiOGxiEqmcbKb/QaJutM=
Subject key identifier: 60:5B:A6:8B:8C:9D:C7:D4:85:0C:B1:80:DD:6B:52:FA:D8:FE:69:CE
Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial: 010D0C9F43285848143A7EC268A48C6457361680
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2cebf233-7f0b-38fd-a86c-3c930d8427fd.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 14618
IP address blocks: 216.99.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7e:c2:68:a4:8c:64:57:36:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=921f4c77-2cf5-4f25-8069-e1f2d91fe404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:28:e1:1b:60:76:0b:02:61:dd:0f:d7:59:08:
44:0f:24:97:7e:72:1b:48:c5:68:01:5d:09:e9:11:
2d:68:2c:5e:d5:9e:75:0e:d5:1b:c7:3e:80:66:d8:
19:ae:7f:c2:81:6c:ed:3a:50:4c:29:68:e3:59:55:
2c:53:f2:c0:8b:99:ed:fd:ba:20:d9:8f:f6:a4:66:
51:c6:cd:2f:e4:5e:7f:2c:af:6e:f1:60:8c:7c:da:
92:ba:df:ad:ca:d2:68:71:01:d8:77:9d:9c:37:15:
82:e1:b1:ac:c0:4f:84:52:d2:e1:19:ac:e5:48:fc:
70:6a:eb:30:2f:28:05:e7:37:fa:2d:1f:3c:1f:1e:
60:2f:32:ad:4b:49:76:92:ed:be:5b:83:93:41:28:
c6:fa:33:e1:ff:5f:bb:7b:5a:bf:70:d3:17:85:a5:
e5:2d:14:1d:ee:6c:f8:4f:cd:b7:a5:aa:f6:3d:62:
80:03:30:ff:d2:cc:d0:f1:33:98:96:6e:84:b0:05:
b4:2d:75:b0:97:41:40:89:b5:a2:e3:5a:78:99:e1:
30:1c:b6:dc:50:46:01:03:60:f8:bd:54:d0:4a:5a:
4a:d6:e4:1e:e2:99:6c:12:a9:94:c2:00:52:26:5a:
39:f5:61:e5:b6:c6:e9:3c:b3:5e:40:2d:3a:78:8a:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5B:A6:8B:8C:9D:C7:D4:85:0C:B1:80:DD:6B:52:FA:D8:FE:69:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/2cebf233-7f0b-38fd-a86c-3c930d8427fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
X509v3 Authority Key Identifier:
keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.99.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:7b:7c:65:94:11:82:d4:71:1b:1b:41:f9:bb:d6:b7:ba:f4:
ab:46:b8:89:9e:23:35:49:71:8a:54:9e:71:d7:06:bb:1a:81:
7d:79:3c:73:d6:ef:a5:cf:a6:c6:3f:cd:52:9e:d7:7f:a7:40:
cf:42:5c:9d:eb:73:57:14:2a:8e:e3:98:e2:3c:82:97:42:b5:
cf:fd:29:61:53:ff:22:0c:73:32:28:66:fe:7b:19:e5:2f:4f:
3d:c3:84:63:b1:a1:9d:eb:87:88:58:6f:b2:21:4b:6d:96:f9:
5b:bd:82:69:5b:0c:1e:6d:58:b9:21:d0:eb:1a:34:93:cf:ab:
0c:4a:1b:be:a6:fd:83:cc:ac:08:b0:d2:e1:d1:da:a6:81:76:
c4:53:8b:41:0f:71:e5:4c:a2:c8:97:c4:6d:b2:be:9e:c1:a7:
64:ae:aa:2d:64:04:ee:5f:6e:71:9f:bb:97:9e:c9:08:77:82:
ca:8a:bd:fc:d7:9e:3a:5c:bf:56:bc:f8:f2:d1:4a:9c:f6:b7:
6a:42:43:19:48:18:94:58:b3:3f:11:1c:0a:4c:e8:f8:85:15:
04:f1:f3:ca:2a:66:04:0d:70:ca:5a:2f:e4:9e:38:06:6d:24:
2e:8b:91:59:83:b8:0a:99:bb:47:ee:c0:54:ba:91:ce:ab:66:
85:8c:3a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:31 2025 by rpki-client