Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f5391ad-06b1-31d5-8a01-1923e0d28015.roa
File: 7f5391ad-06b1-31d5-8a01-1923e0d28015.roa (raw, json)
Hash identifier: pINWNzWbycDPhHmQZiq27DyMddChmZapqDLDzfwfeLg=
Subject key identifier: 70:32:B5:10:D8:9D:E9:3E:79:13:37:89:46:1F:DA:BE:C6:9D:BD:6B
Certificate issuer: /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial: 010D0C9F43285848AF2B870E9D965444A9532580
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f5391ad-06b1-31d5-8a01-1923e0d28015.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 216.52.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:87:0e:9d:96:54:44:a9:53:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=a73b3dfa-a6b9-46af-9ea4-d4387b0adf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:aa:81:71:1f:ae:42:48:a7:68:b7:b1:c7:96:
60:d5:d0:3a:ff:40:ba:4f:fb:c8:f6:b0:7e:f1:45:
41:09:4b:9e:c1:4b:84:b0:46:0b:a3:7c:a3:5f:06:
0d:ad:82:c4:ab:c1:54:f0:1b:1b:46:37:2a:5e:22:
a7:d4:66:40:b0:cf:90:ed:9f:93:33:a9:81:64:3a:
d5:18:3a:78:8f:94:d6:c2:c0:5c:27:31:3f:dc:bd:
50:63:2f:86:4c:ca:3c:b5:3b:d0:b4:79:7c:02:dc:
e1:fd:8f:76:d2:b9:3e:ee:7e:89:34:ee:d6:d6:e8:
84:cf:3f:52:08:a2:18:be:77:4a:7c:ce:98:6d:66:
ae:0a:e9:35:27:b4:0b:11:9b:53:ce:f3:99:51:f0:
1c:98:0b:fe:2d:cc:9e:80:06:33:92:97:e9:b1:6b:
ac:e5:6a:b5:e1:72:18:52:98:4a:15:8a:ad:8f:ad:
be:30:36:58:42:d5:4d:76:35:6a:e5:1e:87:e5:1e:
9c:d7:68:74:6c:9b:e3:e7:49:6f:08:dd:0d:d3:fa:
d1:15:1b:09:2c:d9:1e:ce:0a:55:15:63:1f:b0:89:
1e:7a:a2:0d:e4:0f:da:18:c0:02:08:07:43:53:83:
22:d4:27:30:6d:2a:43:9b:e6:f8:11:4f:f8:06:4b:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:B5:10:D8:9D:E9:3E:79:13:37:89:46:1F:DA:BE:C6:9D:BD:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/7f5391ad-06b1-31d5-8a01-1923e0d28015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
X509v3 Authority Key Identifier:
keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
sbgp-ipAddrBlock: critical
IPv4:
216.52.17.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:c3:b6:71:8e:82:84:30:85:c7:f9:2b:e6:aa:1e:3a:56:dc:
27:ce:23:09:69:5d:47:09:46:43:af:a0:ab:09:eb:65:d5:99:
1d:c5:c3:ac:07:87:85:36:58:36:a2:68:99:fd:b7:3a:45:7c:
9f:3e:19:78:e4:19:fe:82:f2:28:14:f4:6b:19:f6:0a:9d:34:
1d:47:53:39:8c:10:91:44:7d:00:92:ec:53:c1:a2:1d:a5:d8:
c4:79:dc:70:f0:bd:e0:e3:b0:1d:c1:f2:29:f1:ed:a2:b7:19:
8e:57:2c:ac:3b:ea:d7:df:2c:69:80:65:eb:c1:09:66:6a:b3:
f9:d3:6a:fb:28:44:5b:f4:25:94:c2:63:f3:24:15:bb:b6:73:
1e:13:b6:4f:11:eb:b1:6d:e8:1f:89:a2:1d:50:7e:eb:0b:20:
43:67:c9:48:4b:7d:e9:db:ee:a6:9f:63:0a:d4:78:37:44:57:
fc:74:4f:6a:c5:66:5b:2d:44:eb:1e:d4:fc:8b:85:85:e2:16:
2b:a2:d9:1f:3e:17:1e:ef:f9:df:b9:c8:90:14:a0:95:ed:eb:
9f:1e:08:39:96:47:c2:c9:22:20:50:b6:34:0b:4d:fb:ec:d8:
7e:34:22:ee:ff:81:ed:14:02:b8:92:97:45:bc:8a:53:f9:62:
2f:f3:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:11 2025 by rpki-client