Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa
File: 44fa7203-10fb-3394-93c5-802539bacbc6.roa (raw, json)
Hash identifier: vXZgU7wk9HAL6tqBJT5I0HjPLX0mLiioe4l3j4YyCC0=
Subject key identifier: 10:D5:88:E8:81:0E:56:17:72:C2:46:87:94:93:00:96:CF:D4:E0:A3
Certificate issuer: /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial: 010D0C9F43285848BFEBA190ECDE469C1C794D00
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 16509
IP address blocks: 216.31.33.0/24 maxlen: 24
216.31.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a1:90:ec:de:46:9c:1c:79:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=99348dd0-5519-429c-b3d0-f3ab05cbd730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:a5:b4:74:13:84:16:31:ef:fe:19:ed:63:
6a:d7:c7:ba:81:16:8c:f8:bf:12:d2:1a:77:e9:00:
b7:f4:91:e8:cb:d0:77:0e:54:e7:10:26:b2:0c:ff:
eb:f1:d7:b4:4e:0c:14:39:7f:d0:98:ef:a6:af:56:
1d:f8:6e:2d:bb:53:11:be:27:fe:c7:01:ea:87:a4:
84:69:93:c9:3a:84:30:5f:ec:44:97:61:eb:54:85:
a5:3e:ad:8f:b0:65:7e:79:cc:16:d4:2e:7b:6f:a5:
2a:f7:87:58:e1:a7:4d:fa:df:91:d7:53:26:58:b8:
5c:2e:9c:73:5e:49:60:be:e2:75:14:0f:00:23:a3:
8b:17:74:c0:02:31:1a:15:0e:44:a3:be:ea:0b:ff:
35:33:8c:b1:41:f6:c0:9f:07:e8:a5:42:fc:61:6c:
b0:15:5b:b8:02:d8:9b:c8:fa:0d:1e:77:76:e2:bd:
19:0e:50:18:ba:d6:5d:c9:36:af:91:a8:98:01:cb:
c5:1f:7b:20:9e:fe:a1:8c:94:be:05:de:c8:4b:47:
18:fa:43:7f:65:7e:b2:19:14:39:75:23:63:1b:f5:
9f:b8:5c:c2:c8:43:73:54:4f:b5:de:39:81:ab:59:
fe:88:55:65:56:43:a7:43:55:8b:78:e9:e3:65:76:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D5:88:E8:81:0E:56:17:72:C2:46:87:94:93:00:96:CF:D4:E0:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/44fa7203-10fb-3394-93c5-802539bacbc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
X509v3 Authority Key Identifier:
keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.31.33.0-216.31.35.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:9b:7e:78:63:70:3f:bb:50:9b:88:c9:79:fb:cb:0c:44:67:
71:57:dc:2c:9a:48:4f:f8:4f:53:dd:cc:87:d2:16:fc:a5:5b:
b0:02:3e:28:91:5e:50:b2:4f:61:0a:35:1b:17:22:53:7d:b8:
c7:35:8b:71:a8:bd:f9:e4:d6:26:04:66:fd:3c:2c:45:92:ae:
a5:f6:b0:1e:77:47:7e:4d:b2:41:8a:c2:4d:26:79:fa:ac:dc:
30:7a:2c:46:e8:9a:60:54:62:39:46:ae:80:28:8a:91:25:95:
9b:ff:96:07:ce:04:a0:fa:bc:4d:c2:c6:d7:db:af:58:c5:75:
39:fe:37:5f:d2:c6:ca:25:3e:1d:d9:0f:cd:d0:65:84:f6:37:
ac:cd:53:5e:0a:7a:7a:a0:bb:56:42:48:2d:0a:53:d6:11:ca:
8b:0c:38:f4:4a:82:0d:6b:ea:25:c6:be:a2:d5:e0:f9:84:89:
3a:12:b5:a2:c7:e7:82:8a:64:38:11:09:bc:ae:ec:e4:db:d0:
45:93:a0:57:5c:13:b7:09:e8:c1:ee:a3:98:e8:42:4f:cb:98:
17:fe:af:98:7f:95:be:a6:92:75:91:0f:b9:03:76:3a:9b:2c:
2a:05:8f:49:0e:27:f4:17:79:04:fd:11:97:8f:f5:e9:8e:16:
ce:47:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:29:43 2025 by rpki-client