Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64b1200e-657f-3fa8-ad12-259a8027b9d0.roa
File: 64b1200e-657f-3fa8-ad12-259a8027b9d0.roa (raw, json)
Hash identifier: hlKlVEaRvUeIF8dOcOde18vVyLFrpHXFuZIP895HGZU=
Subject key identifier: F1:99:6A:91:9D:36:79:B1:21:C5:90:63:51:46:E2:37:5B:5A:28:D9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7FD04657B5C11EAC0B540
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64b1200e-657f-3fa8-ad12-259a8027b9d0.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 3848
IP address blocks: 216.208.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:fd:04:65:7b:5c:11:ea:c0:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=a543f504-361a-4753-afeb-cc8a3851c1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:7c:52:27:f5:7c:60:1f:36:ff:da:a7:31:
74:84:ae:6b:b0:ec:2c:b3:20:72:8c:ad:8e:0f:f0:
50:a0:5c:bd:28:ec:db:9a:94:5c:23:df:16:5c:a2:
46:7e:74:4f:60:79:c0:72:3a:e5:cc:aa:8f:5f:e0:
9e:74:c9:61:65:bd:56:03:b7:ae:76:52:5e:f9:d5:
77:5e:4c:5a:6c:8d:46:4b:3d:c7:3d:21:2e:ea:c9:
f2:36:24:14:d1:52:37:ce:52:da:60:79:76:3b:1c:
51:ae:43:4f:0f:2c:45:01:30:64:91:5c:9a:94:46:
bc:c2:7f:d4:ce:7d:60:e5:48:f3:de:66:2d:da:fe:
e0:96:3d:55:dc:7e:6b:e1:2a:d8:ea:11:b8:b7:4f:
29:2c:be:b6:56:55:24:e6:42:84:e0:7b:29:b8:66:
a4:20:02:68:1c:92:8f:69:41:ce:69:c9:ba:f3:24:
33:5b:d7:5d:de:13:d1:73:9d:ad:d9:e3:0d:87:87:
ae:ef:65:38:37:4e:04:63:92:ef:15:91:5d:ab:b9:
18:d2:8f:77:c4:67:da:72:ed:39:2f:ba:ba:f7:ca:
af:03:6a:09:ed:fd:bf:6e:fe:22:2a:3d:83:5b:58:
3c:1b:e3:47:53:cb:06:ef:b5:d8:81:30:14:82:bb:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:6A:91:9D:36:79:B1:21:C5:90:63:51:46:E2:37:5B:5A:28:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64b1200e-657f-3fa8-ad12-259a8027b9d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.208.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:08:80:2c:e8:a4:26:ec:73:a5:77:c7:6a:38:56:1a:67:81:
b5:f5:73:54:e8:72:b8:e4:f1:86:9f:c7:3c:25:47:f9:a2:2c:
54:92:d8:35:6c:38:55:7d:c0:bc:e8:35:f2:e5:95:74:3d:05:
7f:ef:d4:10:2c:8f:67:49:b4:cf:75:67:5d:aa:ef:67:da:58:
99:4a:4c:5c:f4:17:98:fb:c9:c9:d2:81:a1:df:8a:61:78:67:
55:94:4a:45:65:3b:69:1e:76:36:5b:44:28:5f:fa:44:b8:d3:
e1:71:13:80:85:cd:24:56:3d:4b:c2:1a:e3:f5:f7:7c:11:0a:
4e:3e:31:89:2e:07:7d:bd:4a:11:84:62:57:97:ad:fa:73:53:
27:84:f4:f1:0a:86:de:4e:2e:d7:f1:f0:6a:e9:f6:f6:96:66:
ff:87:8d:be:3c:90:a2:aa:3d:d3:ee:69:1d:b5:b0:40:04:3d:
43:ca:3e:79:9f:c0:78:43:6b:f0:78:22:88:fb:ca:3c:3f:3e:
e6:e4:6e:17:5c:aa:61:1b:24:94:3a:6d:36:8f:ba:ce:61:c5:
d8:96:2d:e2:a5:0d:f2:da:ce:4b:4e:19:49:4c:c8:64:d4:ec:
0a:be:f7:50:2c:77:71:86:3c:ac:52:80:ac:62:81:a6:37:a1:
94:13:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:27 2025 by rpki-client