Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/806d23d8-c66d-37f4-8690-3d333fee3c39.roa
File: 806d23d8-c66d-37f4-8690-3d333fee3c39.roa (raw, json)
Hash identifier: x5o8tCaJG72l64+dwPZmnF3zL2QPw5Xf8U1lxEXeMRY=
Subject key identifier: 3A:F0:D1:E8:E4:4B:0E:E5:B2:35:B7:3D:EE:D7:5C:EE:D9:57:0C:14
Certificate issuer: /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial: 010D0C9F43285848C150CD34B478D0FF08699B00
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/806d23d8-c66d-37f4-8690-3d333fee3c39.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 396982
IP address blocks: 216.71.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:cd:34:b4:78:d0:ff:08:69:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=7c93d716-ab46-423f-a2a7-83603ff4ab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fa:8a:e7:1a:bc:fc:f7:94:eb:db:6e:0c:fd:
06:57:87:02:49:e1:35:a3:81:23:48:df:9e:80:93:
fe:e4:b7:c9:2c:39:c2:47:87:b8:d2:18:81:d9:8d:
82:e8:07:34:67:b3:03:48:04:40:31:47:c6:a6:ae:
03:8d:08:50:b5:55:c7:17:3c:77:ee:82:4c:4a:bc:
00:63:de:0f:e9:f8:53:7e:3a:d4:b2:37:ff:1e:de:
e3:7d:e4:ed:cb:8f:cf:f0:9e:2b:2e:89:09:02:6a:
e5:fe:b1:5a:15:01:24:3f:51:fe:41:40:a9:88:c2:
42:33:3d:b3:ed:d9:65:9e:39:31:07:ac:f7:f4:0d:
00:51:69:8c:87:f2:0a:d6:4e:8f:ee:f6:0d:f1:b8:
b6:f5:f4:24:4f:72:96:07:fe:e6:5d:d8:c7:10:30:
3e:be:4f:1c:31:7e:5f:ed:d1:6b:c1:ae:66:45:10:
ca:84:46:6c:1e:e1:31:19:7c:8d:7e:f6:b1:67:11:
71:f7:b6:f7:b1:d8:d2:73:f0:54:39:4a:5d:18:35:
a2:ad:52:57:2e:ba:2f:dd:88:48:02:9e:c8:b2:ab:
aa:0b:b8:04:93:bf:30:ee:4d:ff:1d:ee:c0:cd:0f:
c8:eb:36:54:07:e9:d6:9f:3a:8a:38:ae:22:fd:4d:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F0:D1:E8:E4:4B:0E:E5:B2:35:B7:3D:EE:D7:5C:EE:D9:57:0C:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/806d23d8-c66d-37f4-8690-3d333fee3c39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
X509v3 Authority Key Identifier:
keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
sbgp-ipAddrBlock: critical
IPv4:
216.71.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:f6:a7:0e:ce:6e:f2:fe:5e:e9:cd:32:2d:e1:ab:3f:7f:7e:
e4:79:72:2f:44:da:21:e3:70:9c:e7:ba:6b:6e:05:0c:10:b1:
52:e4:c6:32:83:ce:0f:da:6e:04:59:ef:6f:d1:49:a7:81:c6:
8c:eb:c0:76:cc:a1:a0:4f:57:05:72:c1:fc:24:87:92:02:1a:
37:1b:cb:41:15:84:18:18:17:b2:87:46:40:a1:4a:21:db:5a:
40:b1:27:be:0c:58:92:9c:bb:a6:2a:00:ab:19:5e:2e:f6:e1:
67:85:24:2d:03:d7:36:09:52:a4:dc:72:21:19:64:f6:5a:98:
fa:09:e7:82:04:df:3d:9b:68:c1:7d:fa:08:27:00:33:0c:37:
d0:03:b8:b9:1e:fc:fa:50:a8:32:d6:58:ce:ad:8d:bd:03:d3:
df:71:db:ef:93:f0:00:c9:1d:b5:54:f4:74:eb:e0:a2:5f:49:
72:5f:be:15:50:9a:e2:26:94:87:04:5b:58:17:90:e5:b5:2a:
2b:ae:85:9c:61:e4:24:d9:0e:94:8e:bc:a3:25:48:4d:77:b8:
30:63:9a:b6:fb:2e:1b:72:7d:a3:72:10:51:35:52:b0:da:e5:
9f:95:b5:69:79:02:fd:d3:fd:d8:ae:e1:dd:60:ae:bb:24:cc:
03:4b:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:10 2025 by rpki-client