Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/df9352b2-9b57-3ba5-92a7-7c5d2eb28c47.roa
File: df9352b2-9b57-3ba5-92a7-7c5d2eb28c47.roa (raw, json)
Hash identifier: FKitrIunWuOEjGAB2bLpBaRshVO7s4LKEK34uYoaASs=
Subject key identifier: 53:EC:96:D2:88:2E:29:69:3F:EB:19:49:D5:F4:65:AE:22:9F:40:5B
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F432858489E6B6B4D0579772CB9891480
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/df9352b2-9b57-3ba5-92a7-7c5d2eb28c47.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 11524
IP address blocks: 216.107.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:6b:4d:05:79:77:2c:b9:89:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=cb99c28d-a98f-48ea-a25c-4bdf9c6fdd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:39:d3:f6:50:61:c0:72:da:99:29:21:d3:
49:03:58:cf:6a:85:4b:6b:cf:12:15:64:9f:e2:72:
96:ff:52:6a:ad:72:f8:9f:07:7f:6f:d0:c6:3f:9c:
80:1a:66:c1:de:42:9f:92:09:27:b3:08:4d:6f:b7:
71:e6:81:63:bd:3b:5a:97:49:c2:04:f1:c9:fe:49:
16:f9:8f:71:2f:00:4a:da:9c:fc:64:56:21:45:fa:
e0:45:26:38:0a:85:f8:46:c2:97:41:ae:b5:43:e1:
8f:bb:4a:a8:6b:8a:d7:1e:57:fe:19:ad:f7:a6:37:
ab:b9:ec:ac:dd:21:0b:01:40:64:a0:4f:9c:fa:22:
2c:8b:fa:44:4a:66:2d:7b:fe:6d:50:be:26:33:fa:
05:2e:84:e9:cc:73:c6:93:76:47:c7:b0:ed:94:a9:
e6:c6:81:cc:44:41:db:64:5d:db:57:69:73:c3:62:
74:5f:ec:67:63:34:b4:25:d9:13:c4:32:57:1f:d6:
51:d1:db:a6:5f:48:59:54:f4:5e:12:0f:1e:23:48:
e7:4a:50:e0:72:07:76:8e:a1:bd:78:45:49:7f:e8:
c4:d6:04:71:43:37:31:cd:6a:36:6c:81:c1:56:34:
bb:70:1a:a8:ae:5f:13:84:e1:d6:ba:9b:e1:d3:b9:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EC:96:D2:88:2E:29:69:3F:EB:19:49:D5:F4:65:AE:22:9F:40:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/df9352b2-9b57-3ba5-92a7-7c5d2eb28c47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.107.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:af:71:f9:29:4d:00:4a:4d:d4:a0:a3:28:ab:9f:28:a5:50:
64:7e:a2:fe:49:3d:fd:75:96:2e:ca:f3:1f:b0:7e:02:a7:77:
d9:49:75:c7:b6:d0:c6:1a:8e:4c:b9:04:08:1d:b9:92:6f:47:
9d:e8:41:e2:b2:48:b2:77:78:b3:a1:1a:4f:32:ab:c8:97:75:
da:f6:52:3a:fc:ed:33:68:1a:86:8a:2c:d2:e6:fa:9d:a8:09:
30:49:f1:42:b2:d9:66:1a:4d:8c:47:92:4e:f2:fd:9e:d7:67:
63:26:1b:f9:92:f9:fe:a0:2c:43:36:fe:24:d2:0a:e6:8f:38:
55:64:0a:78:74:2b:26:7b:b2:87:16:29:a8:de:98:1e:43:69:
19:d6:ce:45:d4:7f:f4:e6:9c:dc:99:4d:35:71:ab:c8:ff:b7:
dc:4e:8b:52:db:19:51:20:b9:f3:73:d9:88:a8:e4:b2:ce:85:
b5:60:6b:47:d8:ef:91:b0:ca:25:31:57:5e:b0:0e:a7:b2:4a:
d2:4c:64:9e:a0:c8:3a:8c:09:fe:84:54:7f:3e:f6:ed:f6:bb:
ec:38:f7:28:45:eb:08:57:f7:6b:e0:2a:d1:0a:91:5d:5b:6d:
40:31:c3:74:c6:92:99:43:31:e4:4d:2f:c8:51:21:47:f0:be:
09:67:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:04 2025 by rpki-client