Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f2448d66-3778-3ed1-b934-5bbf9e19a859.roa
File: f2448d66-3778-3ed1-b934-5bbf9e19a859.roa (raw, json)
Hash identifier: ENlqjOCG5GPwvEUa2LLXit72mUfhr7rCJMbvXtMAoyg=
Subject key identifier: 65:3F:5A:D6:66:2F:8B:96:A2:4D:3F:17:92:C9:4F:CF:84:C8:C8:4D
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858462D2BA9107FC0883FB5EBFD00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f2448d66-3778-3ed1-b934-5bbf9e19a859.roa
Signing time: Mon 10 Jun 2024 12:00:00 +0000
ROA not before: Mon 10 Jun 2024 12:00:00 +0000
ROA not after: Tue 10 Sep 2024 04:00:00 +0000
asID: 577
IP address blocks: 216.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:2d:2b:a9:10:7f:c0:88:3f:b5:eb:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Jun 10 12:00:00 2024 GMT
Not After : Sep 10 04:00:00 2024 GMT
Subject: CN=8461ebbe-3fd9-43ce-a47e-603e43acf9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:b6:fe:33:79:8e:bc:4b:6a:a1:b6:89:a7:
38:b1:4b:8e:4f:3a:89:d4:71:8e:b8:61:7a:51:64:
69:b5:1a:7f:71:42:1b:77:2c:63:d2:4b:d9:35:f8:
a8:2a:d0:35:67:3f:47:73:bb:20:2d:44:1d:81:5b:
33:90:21:82:8c:1c:49:20:36:25:a3:bb:ba:24:eb:
c2:77:e1:f6:a9:dd:fd:df:bf:01:4e:39:f3:f3:1d:
d7:86:c2:fe:45:c5:c8:ee:e2:18:e9:94:7b:40:6c:
69:be:36:c4:bc:cd:52:fc:d5:a1:0f:fc:46:b0:7b:
f2:88:6b:91:2d:37:a5:38:9c:31:83:39:fa:ff:63:
cd:9b:dd:85:58:a3:f1:b3:80:15:c2:3d:33:d6:49:
38:4e:51:bb:c0:97:6e:2b:b5:42:17:15:78:71:7a:
5e:d5:41:96:1a:8b:55:26:c3:d0:7b:71:05:05:19:
3b:8b:5d:8f:ba:7c:ec:68:f3:d8:0a:30:b0:bf:6d:
28:d4:1a:ee:20:dd:6d:60:69:ca:c7:51:03:02:83:
1a:4b:80:6c:0b:9e:62:85:f3:24:80:c3:29:6d:5a:
62:d9:8b:6b:f5:09:c7:76:27:d7:68:8a:f6:bf:d1:
33:5a:2b:ee:68:a1:98:a7:29:c9:a4:cc:56:45:4f:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3F:5A:D6:66:2F:8B:96:A2:4D:3F:17:92:C9:4F:CF:84:C8:C8:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f2448d66-3778-3ed1-b934-5bbf9e19a859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:8e:36:7b:0d:03:ec:3c:1c:2c:b1:51:a8:d7:fc:f4:df:0f:
dc:90:36:02:27:33:52:ee:e9:e5:3a:63:09:fe:c2:5b:7c:1a:
06:b3:7d:36:42:1b:7f:a8:af:7c:b4:02:18:5a:f3:ef:e4:e1:
b1:8d:e7:d4:2f:ca:76:07:fc:a7:30:a5:25:4c:38:16:5d:56:
9a:02:0d:f3:58:da:15:2f:e8:83:03:1a:38:6d:1f:38:37:7c:
c8:92:3e:b9:86:61:76:af:86:0a:d0:1c:cd:23:61:53:d6:85:
7d:b8:ab:65:f1:ea:16:ab:00:fc:c0:5f:89:7d:49:78:06:e8:
09:ba:ff:b8:81:18:df:aa:e2:33:d4:b3:ad:c5:e0:aa:61:1f:
f1:aa:1a:0c:d9:ee:eb:c5:2e:98:6a:15:9e:b9:d6:ec:48:8d:
4e:5d:f8:6b:71:c4:bc:70:8a:fc:e6:fd:c0:03:0e:f4:c1:56:
4a:b4:9a:56:6c:7f:e9:15:61:53:9c:b2:23:51:9a:5f:18:ef:
72:ec:e1:c3:5f:59:05:c7:ae:8b:2e:09:9c:aa:c6:d4:dc:3c:
ae:f1:ea:54:22:28:c3:33:68:c9:09:17:31:75:5f:17:82:44:
ae:5b:db:1a:f3:9c:45:76:a8:12:91:dd:ed:b5:1a:32:e6:19:
bd:a5:13:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:26 2025 by rpki-client