Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa
File: bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa (raw, json)
Hash identifier: DLzIfZJyCdQClGZQdSV+CrFUJ9vYJ8C9HwmJe025lA4=
Subject key identifier: 99:BA:D7:64:E4:3E:75:FA:AF:3D:63:D2:75:F4:33:53:38:2B:F8:5A
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848EF614D0C20DF118E92BAFF40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 7342
IP address blocks: 216.87.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:4d:0c:20:df:11:8e:92:ba:ff:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=be728a5d-0192-43f0-8cc1-2dff36e26820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:69:73:d7:ce:73:b1:d4:e9:74:65:c8:4d:a8:
13:d5:60:59:4f:a3:25:08:f3:7a:00:da:2b:96:d0:
d1:ee:2f:a6:28:b8:ea:71:56:9b:f5:20:bb:73:c1:
56:78:69:06:51:65:f3:ac:f7:7b:30:3f:4e:0d:45:
bb:ea:d1:58:10:a1:8f:69:7f:73:dc:9e:aa:51:15:
39:a6:09:ff:bf:30:74:1f:ca:66:92:fd:f5:93:55:
68:ee:55:cc:44:14:4d:13:4a:4e:79:fb:cd:4e:1f:
fb:a9:0d:f8:1f:34:6d:82:88:d9:f4:0b:1e:3f:3b:
7f:ad:40:b3:64:f8:03:04:eb:e9:4c:a3:9e:ca:13:
59:71:d8:92:9c:75:e5:e3:c6:bc:50:ba:b1:84:f1:
fc:1b:5f:18:83:98:e5:4b:0c:a3:d8:5b:c2:08:eb:
81:41:24:ee:5b:1f:d2:60:b9:84:92:f1:0d:a0:b4:
76:90:4c:ad:dd:6c:b1:15:9a:f5:cb:62:52:95:e3:
fb:4c:0d:b8:b4:db:97:39:bf:fa:33:d6:70:03:f2:
a0:09:a3:11:1f:20:95:97:99:b0:a0:62:72:e5:31:
a1:c5:dd:30:23:bf:1e:86:d2:d1:9d:87:f7:75:a4:
2b:72:b8:6a:fa:4f:b9:a5:ee:71:4f:d4:ec:65:98:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:D7:64:E4:3E:75:FA:AF:3D:63:D2:75:F4:33:53:38:2B:F8:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:9b:7b:b8:f2:16:50:07:7e:c7:6b:52:dd:82:28:8e:13:4f:
f4:9f:b6:ef:d2:66:c1:04:bf:97:4e:f3:90:67:72:31:03:bb:
c4:00:5e:a5:b2:b4:e6:0b:8b:88:f5:a3:5d:b4:5c:5b:1c:74:
80:69:9b:73:37:3e:a0:a9:0d:26:0e:aa:b7:c1:5d:fd:d1:3f:
b2:0a:b7:2e:24:28:7a:57:d3:b6:8a:cd:c6:2f:55:7b:dc:9d:
a5:c1:6f:c7:35:56:3c:41:0e:27:89:49:22:92:29:eb:5d:7c:
2b:ec:48:af:34:a8:be:74:fc:ca:79:12:e9:04:b2:64:d3:25:
d2:82:71:29:e1:05:68:e2:23:77:24:38:da:23:a1:81:7d:60:
c3:d1:9c:9e:6a:62:c2:62:e1:bc:d8:cc:ed:03:70:a7:5b:cf:
21:a7:c1:7c:dd:0d:3c:9c:72:bb:08:8b:37:f4:a6:dc:5d:1f:
35:05:1c:f1:d0:37:7d:e6:92:c5:df:3d:50:2a:6e:9f:bb:a6:
82:e0:63:3a:e7:90:44:09:e0:40:fd:3d:e6:44:1a:b1:1b:a6:
eb:f6:e9:0f:6b:61:b7:3e:b8:b0:09:db:ca:da:5a:ed:32:7d:
4b:8d:1e:57:e5:86:f3:8c:68:fd:6f:31:34:e4:cd:13:fb:e6:
79:9d:72:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:09:50 2025 by rpki-client