Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/cc2322a7-31da-3f60-ad6d-2c7904ffbf37.roa
File: cc2322a7-31da-3f60-ad6d-2c7904ffbf37.roa (raw, json)
Hash identifier: qvN9ErI+4iI7xDjP81S1Hy6MsOwwUtVr/B2YrOSZDak=
Subject key identifier: A1:03:6D:1F:F3:C9:11:37:B3:B1:98:16:E7:39:AC:2C:C4:C1:AE:96
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6C76344C2A1A462C6E640
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/cc2322a7-31da-3f60-ad6d-2c7904ffbf37.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 394708
IP address blocks: 216.255.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c7:63:44:c2:a1:a4:62:c6:e6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=a8828281-da1f-42b0-ad8b-fb649ba5d41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:51:9d:0e:5d:7a:53:f8:8f:a5:ec:1e:35:
b7:bf:a0:a5:2f:b7:50:2d:8f:88:4f:44:a2:fd:cc:
bb:01:61:28:f3:27:37:79:73:6e:85:5b:ad:2a:6b:
71:5e:b1:20:58:d0:e6:3e:76:52:3d:9d:ea:ad:ca:
2d:09:4e:f1:42:b8:bd:46:d6:d8:04:d4:34:0e:a3:
30:1f:a8:f5:14:6a:51:24:50:4a:a3:49:96:48:1d:
31:91:d6:01:92:6d:c4:33:0b:9a:9d:c1:68:ec:75:
98:96:b0:51:0f:76:63:59:60:2f:70:97:6b:cc:51:
78:6e:97:3d:4d:80:f9:6e:f1:4d:13:a8:a5:78:e1:
3c:5e:67:00:8b:f9:6a:79:6f:52:be:a5:98:7f:44:
5f:36:1b:af:18:c2:b2:a0:c2:df:7f:66:e7:e8:94:
3f:da:19:a7:17:cf:96:85:86:de:89:2d:58:66:ca:
0e:21:7e:07:25:4c:11:7f:40:ec:b4:b2:8a:93:dc:
c6:ff:28:61:32:ae:a6:98:c0:74:a1:df:37:4d:4b:
6a:3c:08:4d:1b:44:fa:ac:c2:8c:7b:96:9f:ca:fd:
fd:b1:72:78:96:5d:c5:27:4c:48:83:c7:11:be:b3:
39:2b:b2:ae:13:7a:53:e4:7e:d6:29:60:d5:0b:30:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:6D:1F:F3:C9:11:37:B3:B1:98:16:E7:39:AC:2C:C4:C1:AE:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/cc2322a7-31da-3f60-ad6d-2c7904ffbf37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.255.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:38:fe:69:49:c4:fe:57:77:10:e0:e2:25:cb:96:5e:05:d6:
08:91:9b:18:b2:c0:c8:ce:85:a7:67:46:7c:e4:53:92:cf:8b:
90:0c:bd:c2:e8:db:09:31:1c:67:b7:15:07:ef:80:32:e5:c8:
6d:1d:e5:42:b6:5e:9c:97:85:10:5b:4e:cf:ae:80:4e:56:d6:
4c:24:1d:da:29:4a:55:fe:6f:c4:a9:f8:2a:96:6c:46:0c:50:
a8:9e:80:96:34:b5:91:e6:e6:4b:53:cb:e5:4f:53:61:0e:28:
ba:85:50:db:74:61:ba:e8:79:65:98:99:d5:d3:d0:ef:5f:7b:
84:a0:54:33:01:ed:ae:ea:4a:70:83:f2:aa:c1:01:bc:c2:ef:
d2:4b:15:71:fd:b3:d3:72:44:56:cd:04:30:ef:e8:01:87:1d:
c1:7e:4a:a3:98:36:47:9d:08:60:92:52:1e:6e:f3:a1:da:c1:
04:95:ac:53:dc:93:78:65:14:1a:36:ef:4d:77:63:d3:e5:91:
b0:1a:b0:b1:ed:d8:a7:3b:d7:55:99:d1:81:d6:32:c2:cf:2c:
f0:b2:fd:21:7f:b5:7c:7c:b9:4b:57:04:28:21:b6:20:70:f3:
99:78:51:71:49:22:b3:91:24:7b:3b:bc:7c:8f:24:3d:7c:24:
f4:40:df:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:45:00 2025 by rpki-client