Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/baff8d84-b104-358b-982d-5d770c0aa824.roa
File: baff8d84-b104-358b-982d-5d770c0aa824.roa (raw, json)
Hash identifier: WcN5m00g+13SAXQn7FysamCUMBr1TjGuNN9iUQChYm4=
Subject key identifier: A9:E0:3B:72:CB:CE:F9:FD:24:5C:91:96:17:61:EE:F6:B8:74:57:43
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858491AA6C2A5012BD10CEBA3F400
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/baff8d84-b104-358b-982d-5d770c0aa824.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 15290
IP address blocks: 216.13.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c2:a5:01:2b:d1:0c:eb:a3:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=814bc8d6-02d3-4d55-89ce-3fd74befc368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a2:a4:94:7a:7a:cb:04:83:bd:09:03:bc:de:
41:ab:fa:4c:b1:c9:59:3b:ea:f6:43:7f:ba:0e:fa:
f0:43:a1:9b:2e:0b:a8:8e:ad:35:ba:b8:96:1b:20:
fb:02:fd:e3:74:87:65:4a:b1:34:a9:14:99:cd:e8:
d0:5d:44:91:d4:37:b3:32:d2:e9:3b:af:23:4c:38:
df:96:f7:77:26:0a:64:1c:2c:5d:e0:f6:93:01:a9:
be:29:5e:7d:07:26:61:27:e7:4c:0f:47:1d:c8:bc:
ec:d4:ab:cd:76:d7:37:04:f1:61:2b:8c:bf:0d:12:
f4:de:e5:0b:28:62:86:ad:69:2b:3c:93:1c:26:11:
12:4e:b5:57:bd:89:f2:77:19:e5:d8:1c:df:3c:90:
4a:68:d6:d5:c3:5c:50:2e:23:dc:2a:d6:2d:99:94:
6f:b8:24:04:e0:fa:75:cb:7d:96:95:fb:3a:89:22:
9d:f9:d3:45:a3:3b:13:5b:03:ac:a5:43:1e:39:46:
72:a9:22:ee:99:85:f3:d3:94:01:03:0d:37:5e:4b:
f9:c7:c8:41:5c:1e:84:d7:eb:81:83:f7:9f:c6:98:
3d:d2:f1:15:49:23:80:de:3c:f3:29:09:19:13:23:
c7:d3:42:05:15:86:b3:29:1c:64:64:f6:58:9d:3c:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:3B:72:CB:CE:F9:FD:24:5C:91:96:17:61:EE:F6:B8:74:57:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/baff8d84-b104-358b-982d-5d770c0aa824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
216.13.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:13:85:c3:34:58:58:0a:9e:0e:0e:c6:d1:76:d1:10:de:f1:
f4:05:ce:1b:12:21:d9:46:bc:b5:19:3e:c6:c5:df:5f:3f:68:
2c:14:23:a5:0e:e3:ec:ab:c9:75:dd:fd:1f:d1:47:80:24:06:
a9:55:24:0a:58:4c:d6:6b:45:e3:78:f8:b6:e6:3c:6a:a0:3c:
fe:74:8a:2a:b5:15:1c:e8:47:03:2c:70:9b:99:ff:5b:23:31:
07:17:06:e5:97:41:83:b6:0a:59:e2:eb:f8:75:0e:9b:42:c7:
11:ae:1d:93:4b:f6:ef:67:88:41:d7:55:92:29:47:da:00:27:
c1:64:13:0f:18:f2:17:32:26:dd:64:75:27:29:e1:b2:9f:0f:
3d:6c:78:5c:0b:22:e1:e9:d7:b7:8c:1f:dc:5f:ca:4f:27:f4:
c3:29:a2:81:11:b3:f8:44:31:6b:4b:20:bc:93:f8:04:cd:a6:
1a:bc:e4:e5:42:23:e4:9d:c2:02:22:1b:cf:a2:82:f5:13:3a:
50:19:09:4a:89:98:6e:fd:ca:d6:84:97:19:f6:96:b0:69:e1:
51:bd:1b:38:55:00:07:88:f8:33:bf:ff:53:e8:5b:a4:25:46:
46:c2:80:82:fe:3e:aa:34:6f:36:c3:f4:cc:e0:fd:02:b8:0f:
d3:e6:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:06 2025 by rpki-client