Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/88b572e3-3413-3a6e-9ae2-b3954c61ccc1.roa
File: 88b572e3-3413-3a6e-9ae2-b3954c61ccc1.roa (raw, json)
Hash identifier: 1rxW7wiKxnC18+mmszmYyLensIzRhiC9JlRpbdP7ZEQ=
Subject key identifier: 19:38:45:63:69:BF:6B:CB:85:B7:3A:46:79:54:0D:DE:FD:06:D2:E1
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F43285848E2D104D1622B9C002B3EDD60
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/88b572e3-3413-3a6e-9ae2-b3954c61ccc1.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 13768
IP address blocks: 216.187.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:04:d1:62:2b:9c:00:2b:3e:dd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=a699b6b6-b45b-4cfd-b811-2966e76a3b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:e8:66:52:01:ca:c8:af:63:14:fd:8e:52:
ec:e9:c2:cb:74:fd:78:30:1f:cf:45:a1:5b:2b:c9:
07:0e:82:62:6b:b2:21:58:46:a2:46:da:c7:f6:64:
a3:ae:2f:6d:0d:44:09:30:48:fb:76:73:b6:32:ce:
3c:6c:02:a0:15:7f:03:a7:85:97:27:92:77:3d:6c:
f2:ed:7f:e8:67:88:24:47:d0:1c:f4:94:28:99:b6:
c0:9a:3c:4e:db:75:99:3c:43:94:4f:76:66:61:ba:
2e:ba:e2:5e:48:5b:cf:16:f4:48:be:a4:3c:f7:3e:
4d:c4:2f:f0:c5:2e:74:51:1b:5e:e0:b5:f8:23:c1:
6b:11:82:c2:6b:21:fa:ef:e7:3a:d9:00:a9:05:48:
4e:80:55:32:7f:aa:68:e6:7c:3a:b4:ce:80:6f:ae:
8d:ef:99:31:c0:3a:06:e4:0d:20:f0:25:3b:66:a5:
8c:c4:92:3d:b6:90:ba:08:b4:80:23:57:37:90:af:
fb:57:2d:c2:56:a0:12:76:9d:7b:68:96:a6:46:a3:
8b:b1:ef:4f:ff:c7:b2:65:73:4b:68:71:02:f2:4e:
69:dc:7f:48:5b:e4:37:59:f3:3c:7a:7d:4a:f1:4d:
57:b1:4c:53:89:5e:de:1b:14:7b:03:77:c4:1b:69:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:45:63:69:BF:6B:CB:85:B7:3A:46:79:54:0D:DE:FD:06:D2:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/88b572e3-3413-3a6e-9ae2-b3954c61ccc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
216.187.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d4:b6:be:c0:6e:9a:72:c9:81:c7:da:a4:c6:00:0f:94:6e:
56:c5:fa:90:82:34:ca:2e:70:33:96:30:86:11:ee:b0:72:7f:
3d:bc:fe:bf:66:07:da:be:a0:70:66:71:e8:64:56:32:c2:63:
86:c6:aa:ef:c9:34:e2:83:b2:74:71:1b:86:96:b2:50:24:72:
ad:b3:b6:b2:a5:0f:89:fb:07:f5:58:88:91:4a:85:22:e5:e2:
5b:20:91:f2:14:6f:41:1c:a5:06:2f:9b:4b:db:e0:77:a8:c1:
65:6a:5b:2d:04:59:48:df:85:19:dd:75:93:fd:ec:c9:7c:c8:
df:ae:55:1f:30:59:44:e6:e1:1e:71:8e:d1:47:c5:a7:31:55:
35:65:6b:08:e8:a6:e4:9f:de:a2:9a:77:59:1a:07:31:67:d2:
f8:3a:1c:1f:75:77:7c:c9:d2:7f:1e:bf:a1:0a:88:22:6f:df:
45:ea:0b:e0:c5:75:5c:31:e5:3e:8b:57:de:c2:a4:0d:a4:08:
90:74:9c:ae:42:50:ca:79:bc:f2:df:d1:90:3a:4f:38:f0:7d:
62:0e:ed:7a:b7:23:6d:5d:47:47:b8:68:e0:ad:d0:ee:b0:ec:
9e:25:c4:76:39:fd:32:87:e9:81:c8:73:95:48:09:56:11:84:
c0:6d:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:48:21 2025 by rpki-client