Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa
File: 3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa (raw, json)
Hash identifier: E5qi/mpWnNbuzpPAGy64ZEHsURLHOs2oVMXrsIh4X6o=
Subject key identifier: 24:A5:C4:F1:8F:22:37:42:62:9E:A2:E3:98:BF:74:8A:A6:F6:9E:60
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F43285848E0065B6C4EA7806B9222A400
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 216.24.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:5b:6c:4e:a7:80:6b:92:22:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=818cc069-ecee-4ce1-b2dd-3173b30f555c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:69:fb:19:ea:13:4f:1d:4c:a9:4d:e7:04:
e3:9c:d0:98:e7:85:14:7e:ec:92:c6:f3:dc:0a:bc:
67:bb:fe:f3:24:a8:e2:a4:af:2f:80:e8:1a:7c:19:
0a:b0:d5:6f:e9:b3:c0:05:84:70:bc:6b:5c:46:82:
cd:58:0e:a1:b5:d1:84:e2:4c:f0:21:bc:40:48:0f:
ed:65:b2:04:3b:57:87:f4:4b:a5:70:f1:3e:02:90:
9e:79:a3:30:83:42:a2:d7:58:7a:0a:18:b4:8b:dc:
18:0a:45:7f:01:2d:d3:b3:58:6b:e4:c4:ea:d4:fd:
42:b9:7d:f7:f4:22:b0:a4:fd:e3:75:4c:6d:3d:d9:
9b:11:d7:eb:5f:02:02:b4:23:8a:9d:d7:6e:42:af:
9b:a5:e9:a8:71:7e:ea:34:78:2a:e6:a0:4b:5b:98:
0a:a4:6c:70:0b:c6:b4:16:ce:f3:2e:3f:9f:ff:a1:
a2:76:d4:33:9c:f0:fe:e6:7d:0d:ca:c3:ed:56:67:
f0:60:dd:33:a0:bb:dc:aa:55:93:a7:79:d5:ea:59:
2a:6c:3e:3e:8b:07:f2:b9:7f:38:2c:93:7b:11:af:
c5:ca:f9:0f:3b:ac:20:7a:37:54:09:e0:a1:9a:42:
af:34:4f:da:42:f6:07:fd:95:fa:3d:0c:fb:6c:34:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:C4:F1:8F:22:37:42:62:9E:A2:E3:98:BF:74:8A:A6:F6:9E:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:c1:ce:01:8a:c9:d0:e0:d5:68:41:0f:70:f8:8d:a7:21:0c:
97:86:05:6e:0c:e9:32:fb:49:ae:03:99:66:84:fb:3e:f6:f8:
c6:38:6f:d5:b6:59:12:c6:22:2b:27:90:df:be:ae:11:a9:2b:
4b:d8:a9:a4:44:0d:d7:41:c1:ff:a3:5e:54:c7:ab:f9:33:9e:
82:b9:fc:8f:f6:0a:0c:6a:cd:75:e7:52:ba:69:69:b8:fb:93:
6a:e1:59:5e:40:21:af:92:ca:ed:ff:6f:27:26:66:f5:51:34:
46:ff:2c:67:26:88:39:48:39:66:b2:b2:fc:b8:3d:e2:ff:c4:
fd:d5:5c:f0:01:33:41:dd:12:1a:06:93:3b:98:7c:91:79:1f:
4a:4c:9b:51:d6:79:83:a1:e5:02:97:9f:e4:f4:d1:b6:b8:09:
e5:10:bf:d8:3f:a7:b6:e9:92:b3:24:c3:35:d3:82:77:ee:69:
13:17:19:07:0a:64:d2:42:7d:7e:f3:a4:b3:2e:61:54:46:35:
3f:1a:a0:7c:21:bd:41:22:22:79:80:12:de:d4:aa:1e:28:26:
c4:80:fa:d4:41:e4:7b:6a:d4:99:54:99:52:b3:ed:cb:06:fe:
11:d6:00:71:52:e5:ed:e6:29:e7:a0:1a:f9:e5:0e:90:f8:50:
32:29:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:16 2025 by rpki-client