Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa
File: c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa (raw, json)
Hash identifier: XEle1d5uRaSpMrXPTgFG0vXFfLSDd/77TKrCLAS+P4k=
Subject key identifier: 2D:A2:A8:82:81:D5:6A:EF:C4:60:DC:0D:2A:AD:83:C4:2C:04:AE:8D
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285848E59BCABC0D96543AB25FF3C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 206092
IP address blocks: 173.239.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:ca:bc:0d:96:54:3a:b2:5f:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=bf30de21-f984-4cf6-86fb-23276beb3e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:98:1e:c6:2e:60:a3:1d:42:de:8c:e1:09:
a6:a5:1b:0b:76:7e:42:08:03:8e:24:86:72:09:e1:
5f:7c:10:6d:4a:f3:ec:f9:78:9e:2b:7f:e7:3c:33:
94:df:e9:f2:b5:b9:0c:9b:50:0d:0e:c2:16:82:f1:
5d:e6:c5:04:c7:9d:08:78:e8:64:40:df:c5:59:40:
64:95:12:74:a7:49:70:0d:c4:5b:f4:9c:b9:d9:c1:
e7:30:41:ac:be:36:cc:f3:0d:64:c7:a1:c7:cc:da:
ea:f2:d3:29:e4:9d:b8:97:9a:9a:4e:65:64:dc:4a:
9c:07:4a:c9:e6:c0:6b:f4:7f:7e:f2:04:cd:b7:69:
d8:dd:59:7e:73:e2:c9:34:94:92:d6:de:0e:d5:e6:
ed:18:c7:10:17:b4:92:24:4e:66:cb:d8:71:4b:81:
e8:9a:67:40:a8:a0:52:d3:b9:62:b9:d1:69:91:be:
af:9e:e4:46:aa:0a:1b:5d:a8:91:7b:4a:ba:6e:75:
00:8c:89:4a:52:47:c9:0b:19:6b:32:f5:ef:54:f7:
d0:16:7a:d4:69:9b:24:0d:1f:4c:85:95:29:ba:07:
99:27:fa:6c:ba:50:87:e4:fa:05:ed:9e:f2:be:91:
55:03:84:6a:35:03:76:dc:b5:83:81:2b:68:fc:06:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A2:A8:82:81:D5:6A:EF:C4:60:DC:0D:2A:AD:83:C4:2C:04:AE:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c6ebdb80-86f9-342d-88db-f0a12853e3b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:08:f9:62:fd:30:22:52:7d:61:d8:5e:db:01:1e:37:05:d4:
6b:21:96:aa:8b:d7:c6:27:91:f4:cc:84:f0:fe:d3:8c:4c:a4:
37:08:08:ac:bc:89:3b:98:c1:37:09:9e:46:82:a6:31:31:3f:
0a:ed:1e:8d:36:72:19:89:0c:e9:4d:d5:9f:9d:45:22:9b:db:
33:fa:98:80:41:65:5a:3b:b4:ed:39:1f:d7:2e:a6:df:22:fa:
42:b8:4b:13:30:5e:59:fb:53:3a:94:53:86:7f:83:9e:ca:0e:
99:c7:16:95:b9:cb:1b:98:62:73:a3:75:65:b3:b6:a4:46:a0:
d9:58:17:dd:34:9d:f1:bd:26:70:dc:b2:ad:4b:97:90:b4:82:
e5:97:6d:04:b8:26:ca:82:0b:c7:89:dd:ae:22:15:44:6d:dd:
78:f6:51:98:ea:49:2b:00:4f:23:34:93:ff:98:2d:c0:b4:41:
f7:1b:6b:4d:c8:90:b2:18:a8:e4:e5:a1:b4:de:a3:5a:a1:b3:
c7:a8:e8:83:b4:b9:e3:48:20:8a:dd:f3:56:5f:63:cd:28:78:
05:db:32:e6:fc:5b:ef:33:50:b7:f9:39:d9:55:9c:4e:f2:6a:
b9:fa:65:ea:3c:74:ba:c4:0b:e9:1c:c1:07:b3:c6:21:dd:96:
b0:e2:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:24 2025 by rpki-client