Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa
File: 7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa (raw, json)
Hash identifier: 6z+w+dJ3zQ04vI4PyhgjD4L9MBUHbJWH7fFcAfN/qT4=
Subject key identifier: FA:A0:13:5D:17:06:47:2F:9F:BB:C4:2E:E0:D3:27:27:FB:DE:07:AF
Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial: 010D0C9F4328584812D538D8457D9694E2389400
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 36421
IP address blocks: 216.99.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:38:d8:45:7d:96:94:e2:38:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=d29852f8-4a89-4148-ac88-7b86cd473add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:36:14:90:56:28:f3:a8:65:d9:02:86:3b:
01:a8:df:94:d9:1a:5f:89:5f:03:65:cd:4d:3c:5a:
44:2c:9d:25:e9:b4:db:22:81:be:5c:c9:19:a0:82:
e1:7f:0b:6d:28:a1:04:2f:e0:d8:36:9a:b5:09:99:
4c:b6:49:39:d0:83:26:19:eb:20:c4:ee:98:4e:48:
90:65:8d:28:8c:b5:56:4b:3e:57:b2:03:55:9b:09:
36:38:67:ac:6c:c0:b4:b6:3d:59:57:a4:c1:b8:7b:
ba:8b:cf:fe:85:00:ec:6e:8a:57:23:61:cd:92:94:
72:d8:67:2e:72:c5:d5:84:a3:4f:43:d5:b9:ca:c0:
8a:82:cf:8e:05:62:51:09:98:47:e8:6f:c0:3f:f9:
bc:a0:e3:2f:cd:5c:05:58:d5:ca:c5:6b:c0:0c:75:
b7:f8:01:e2:2b:08:84:f9:cd:ab:35:1f:46:11:55:
97:1c:37:ff:b7:e9:9b:ad:7b:f7:96:e8:82:96:06:
9e:ce:91:dd:67:1a:06:e9:6e:6b:1b:d5:64:63:e8:
bf:45:f5:a5:df:00:31:c8:ca:41:a9:61:07:c3:cf:
ff:41:79:56:83:0b:f4:bc:65:22:34:2a:cf:ab:92:
9a:d9:ac:80:93:4f:5c:0f:f7:af:f3:b3:64:d9:a0:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A0:13:5D:17:06:47:2F:9F:BB:C4:2E:E0:D3:27:27:FB:DE:07:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/7804d6d8-e8c4-3c3e-b06b-61f591887b21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
X509v3 Authority Key Identifier:
keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.99.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:69:c5:af:8c:85:77:e7:d1:fb:7f:d0:93:4a:47:1e:12:18:
53:19:36:4c:5b:6c:39:a6:24:58:ca:3a:f0:ed:57:88:d8:7d:
33:87:2c:d2:61:6c:5d:b4:9e:4a:78:d5:f1:f6:0d:2f:ec:1f:
70:e8:ef:1b:45:21:c9:d7:b6:90:ac:f0:16:82:f4:52:40:1f:
c1:7d:4c:22:bf:cb:ca:b4:95:72:f0:06:4f:18:32:ca:9b:ce:
cf:07:8c:96:a1:bf:aa:24:98:b0:3b:b3:98:0e:85:0c:8d:2b:
fe:6d:53:56:25:43:f1:d1:0c:ed:3a:72:0f:0f:a8:2f:af:03:
ac:40:a6:fb:8f:1d:ce:a9:4a:8f:29:92:4f:96:ea:b1:59:7f:
b9:20:d5:a9:e7:00:45:28:13:92:76:ad:87:57:61:7a:10:54:
18:29:c3:fe:fd:54:0e:e7:a6:fd:06:7c:73:49:4e:3c:99:27:
52:81:29:17:73:c5:fc:b6:2f:c2:1e:4e:10:95:75:7b:24:88:
59:d0:ee:7d:c6:7f:a7:c1:30:0d:3a:f2:b6:cc:a4:68:7b:f4:
3a:50:18:0b:bf:aa:c8:f6:1e:fc:42:e7:0f:2d:c3:cf:21:fb:
d9:6c:e1:a8:43:b0:dd:9f:e7:3c:af:6f:b2:fd:2a:29:dd:f6:
4c:5d:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:24:26 2025 by rpki-client