Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa
File: f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa (raw, json)
Hash identifier: g2zyEOkKoDdMyEINSmH9Hf9BTafEWHZ4L2uZsWQ527s=
Subject key identifier: 81:BC:53:D1:12:4A:44:31:6F:79:09:06:B8:D8:4A:FB:81:74:6E:D5
Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
Certificate serial: 010D0C9F432858487A2086D9C08A9D7443CC7D00
Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 15100
IP address blocks: 216.38.32.0/20 maxlen: 20
216.38.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:86:d9:c0:8a:9d:74:43:cc:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=89b06961-dd1b-452f-b9b0-eddcf087ecfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:08:91:c0:e5:f0:a2:2b:5b:09:8e:a4:f0:68:
b4:60:f2:8b:c0:9e:7a:72:0a:a1:1a:45:5d:98:39:
3b:43:c3:f3:19:b2:8b:0f:51:a9:c9:cc:0f:10:a3:
8a:fd:c4:6c:ad:a6:59:57:37:fc:d4:d5:ac:ce:93:
f9:1a:96:02:65:fb:f8:b2:1f:11:b7:5e:f4:8f:7b:
d4:4e:1d:d4:c9:5b:46:b3:f9:9c:4f:0c:ea:de:95:
11:7a:da:5f:ed:6f:29:9e:b4:aa:a5:e6:d9:19:cd:
ad:a3:a0:95:89:ce:71:bb:de:f0:56:6b:34:8e:e1:
75:df:c4:8b:9b:42:4d:39:3c:5a:c3:fd:b1:67:fb:
f3:66:c9:e1:a7:38:ff:40:f9:42:28:15:99:18:b7:
13:51:f7:6c:8d:ba:c8:20:8b:cd:63:35:b2:fc:06:
cd:19:73:71:f4:fa:d7:7a:a7:14:53:6a:15:87:9b:
ea:ac:3d:62:60:90:5e:75:41:4c:d8:7a:bd:df:04:
fb:06:ed:6c:25:86:d4:64:35:04:2f:04:89:1c:f0:
ae:76:40:5b:8a:48:35:6e:97:a6:5b:6a:d7:f0:a8:
0e:a4:18:44:13:4e:a9:85:5e:6c:7c:09:c0:db:52:
f4:79:31:57:0c:c8:b3:f2:1a:c7:e7:0a:68:f9:4d:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BC:53:D1:12:4A:44:31:6F:79:09:06:B8:D8:4A:FB:81:74:6E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/f924133a-b5ad-36f1-8a45-c86dbeb1db1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl
X509v3 Authority Key Identifier:
keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.38.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:12:8e:6f:71:e9:8c:20:af:c9:d5:b1:72:96:7f:73:74:01:
b5:18:3a:d4:08:47:ff:11:77:74:2f:05:a9:3a:d5:be:68:92:
ef:2f:ef:93:9e:96:d9:fe:52:94:60:b4:bf:91:f5:c6:79:f1:
68:d7:48:b1:ef:32:de:5e:87:ef:ce:b2:c7:2b:21:85:3c:49:
73:b0:0f:d2:56:39:9f:9a:6a:9f:d2:2e:75:16:7c:d1:f7:49:
99:2c:15:6b:72:83:76:e4:c6:5a:d1:6a:9e:af:72:87:04:6a:
9c:a2:a6:6d:01:33:3d:8f:e4:52:f0:cb:14:64:d6:5c:c6:19:
af:c4:fd:9c:ca:87:48:ff:52:08:c7:0d:88:fd:aa:73:38:fc:
9c:d3:de:ab:f4:b0:20:f4:e7:92:67:9e:f2:2b:ab:87:15:4d:
dc:d2:14:24:ff:93:ef:ca:00:75:3d:d9:f6:cc:9b:bc:df:a1:
bf:c2:ac:28:a1:16:ca:72:05:95:36:81:c4:c1:89:58:46:13:
7c:43:b8:29:37:1f:ac:63:af:0e:17:88:e6:6d:f1:22:c3:a2:
9f:15:fe:7b:01:1f:b9:64:f9:d2:e3:e5:9c:33:75:ec:70:93:
ed:df:bc:3d:df:49:3a:12:71:8b:de:a0:fe:ac:f8:20:b6:70:
18:19:14:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:28 2025 by rpki-client