Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f414d228-f9bf-3526-a389-922c58e5e423.roa
File: f414d228-f9bf-3526-a389-922c58e5e423.roa (raw, json)
Hash identifier: SFdNosE7sllhDntji72L7bmtby3gAhW4rsP/hplBd4s=
Subject key identifier: 2F:31:D8:8D:7D:EE:1D:F3:D1:92:D0:A5:33:67:0F:DE:03:2D:C6:42
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F4328584924C2B0FDF6ECAFAB1A711480
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f414d228-f9bf-3526-a389-922c58e5e423.roa
Signing time: Mon 10 Mar 2025 16:55:12 +0000
ROA not before: Mon 10 Mar 2025 16:55:12 +0000
ROA not after: Sun 08 Jun 2025 16:55:12 +0000
asID: 209
IP address blocks: 216.219.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:c2:b0:fd:f6:ec:af:ab:1a:71:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Mar 10 16:55:12 2025 GMT
Not After : Jun 8 16:55:12 2025 GMT
Subject: CN=e6338892-91b2-4286-9a9b-32ecf27822ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:85:2a:f2:8b:03:8e:91:4a:13:70:a4:2a:
76:68:ee:35:e3:52:b9:ef:02:06:2f:91:90:cf:6d:
4e:ef:24:09:aa:30:c2:b0:de:1a:c0:f9:78:01:0e:
4e:eb:d0:17:63:cb:14:ee:bf:f3:8e:b3:45:ce:0f:
bc:bd:b2:f9:17:f0:53:51:52:64:35:69:a7:e5:e7:
bb:a0:cb:ae:f8:fe:b5:43:4c:1c:08:9c:d5:a3:2b:
0c:20:1c:24:86:ef:f1:c8:2f:3d:a0:47:04:94:69:
1f:27:0d:15:83:a6:50:c8:48:c0:a1:ff:d6:43:06:
05:dd:1b:b3:b0:c9:49:2a:39:91:6d:f7:82:23:06:
79:17:e8:fd:7c:1a:7e:68:d6:bd:7b:4c:63:4e:4c:
cb:59:ab:37:6a:b6:0d:61:88:fe:aa:5e:de:9d:ac:
59:c2:f1:3f:9a:48:f7:a4:b0:67:6f:6a:ad:16:0b:
97:c5:9c:2c:97:96:5b:0f:c7:ba:96:ba:ae:94:ce:
63:8a:f6:6f:b3:54:99:7e:d6:74:3f:f1:6a:00:63:
7d:10:d1:99:c2:96:f3:a2:e6:5e:3d:3a:fc:df:1b:
ba:6b:13:9d:a1:25:17:5b:db:3e:c1:e3:03:c4:65:
cc:f5:7e:7b:70:8b:29:6e:f7:5e:33:a1:eb:56:d7:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:31:D8:8D:7D:EE:1D:F3:D1:92:D0:A5:33:67:0F:DE:03:2D:C6:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f414d228-f9bf-3526-a389-922c58e5e423.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
216.219.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:79:f4:80:cf:8e:4d:eb:16:c3:e6:7d:e5:c8:54:66:a3:fa:
0e:8d:82:ae:02:44:66:30:39:fc:c2:63:44:3e:92:36:35:de:
6f:e7:de:8b:2c:de:cd:30:92:da:f0:a6:10:f9:0c:ae:88:78:
ad:39:87:13:a6:21:03:e4:a9:f7:6a:35:27:d3:b0:7a:04:08:
b1:ab:fb:94:d3:88:68:a3:5a:37:e8:a5:36:70:ae:30:d8:09:
2c:7b:06:4b:20:b4:e4:4f:c0:c4:d6:eb:c9:72:6a:be:f5:46:
3b:9e:7a:4b:34:be:3e:59:9b:3f:1d:7e:fa:7e:52:45:60:3c:
92:e5:f7:a8:a1:6f:86:67:d7:27:e6:52:94:48:74:d9:83:c2:
6d:cd:81:25:7d:32:49:d2:a4:f3:8e:1f:c4:bc:35:d0:cc:07:
bf:dd:06:88:e5:ac:3f:59:3d:ae:98:3f:fb:eb:48:b5:9e:41:
91:28:5c:73:be:39:32:01:77:5b:7e:52:e9:91:72:79:f3:42:
e9:a8:a9:81:3f:72:42:c5:49:f0:fe:8b:70:ab:50:36:80:f3:
24:f9:8e:3d:f8:7b:98:1c:53:31:6c:90:05:ef:fe:3d:41:60:
e2:1a:8a:28:ae:aa:d4:6c:7c:42:de:f1:ea:b8:98:47:67:bb:
69:15:17:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:22:07 2025 by rpki-client