Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/ed041596-6375-3f2b-bd7b-323afc0a0f85.roa
File: ed041596-6375-3f2b-bd7b-323afc0a0f85.roa (raw, json)
Hash identifier: WxDUQt7nE45N8bsF3ecFIEfqsHzxbSw5OojmqRzoHvY=
Subject key identifier: AD:FC:F6:1F:0C:2B:FE:03:42:7D:4F:6D:B8:28:BC:57:BE:C5:A8:57
Certificate issuer: /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Certificate serial: 010D0C9F432858489FD09A43D29FE51044FBC2D0
Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/ed041596-6375-3f2b-bd7b-323afc0a0f85.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 399806
IP address blocks: 216.230.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:9a:43:d2:9f:e5:10:44:fb:c2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=b7ff67f3-07d0-4ee5-895b-d143f3ead459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:72:7c:87:b5:fb:9d:00:d4:b3:8f:b1:6b:
94:42:15:3c:60:0d:14:af:98:e8:b6:56:8e:81:73:
40:8b:d6:e2:0f:ac:9d:03:00:ed:2f:25:4c:40:84:
9e:0c:77:96:71:29:6d:53:cd:a7:3d:24:95:5a:a4:
b8:72:2e:8e:f6:86:14:fc:4d:ac:bd:1a:85:de:b2:
00:27:b1:6d:46:a3:73:6e:60:a0:e6:04:86:dc:d7:
72:e9:b7:84:2c:0c:5f:2a:6b:fd:a6:29:43:ea:e7:
81:4d:79:d2:04:80:49:91:f8:eb:06:3d:e7:2a:fe:
81:bd:14:5d:71:55:59:3a:cf:85:b1:14:62:b5:20:
3f:f7:88:53:69:fd:03:cb:a4:f0:0e:91:c5:b6:80:
36:4a:cb:2e:1e:25:fe:92:d4:ad:26:f4:cd:d8:a8:
20:5b:ea:ed:23:cd:b9:0c:24:a9:c3:c7:7f:11:0f:
07:af:3d:38:27:b0:15:85:03:ef:15:ef:9f:8e:5e:
54:e3:47:1b:5c:c6:ba:c9:e3:90:25:bc:7d:80:20:
b7:87:23:52:89:6b:0c:dd:94:e9:68:51:a8:42:96:
3e:d4:f0:76:45:8e:ae:cb:10:a6:72:ba:51:90:b7:
64:8c:35:bf:87:40:76:ee:17:dd:94:d4:35:9f:39:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:F6:1F:0C:2B:FE:03:42:7D:4F:6D:B8:28:BC:57:BE:C5:A8:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/ed041596-6375-3f2b-bd7b-323afc0a0f85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl
X509v3 Authority Key Identifier:
keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
sbgp-ipAddrBlock: critical
IPv4:
216.230.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:d4:3d:3d:54:e3:3c:8d:c2:dd:ce:1d:68:db:8d:e8:97:5c:
bb:ac:a1:af:46:c3:1b:00:25:c0:d6:3a:db:2e:97:73:5a:63:
f0:26:e6:ea:43:57:d4:10:34:c8:af:37:9e:c5:e5:32:bb:aa:
1f:60:84:fe:10:c8:f9:93:99:25:eb:da:ee:01:43:63:4f:43:
f3:dd:02:c4:75:d7:60:f2:df:ea:20:78:5a:5d:ff:e5:41:d1:
7f:51:aa:f2:54:b9:ff:f5:90:8c:f4:27:41:66:e7:ef:62:5f:
e6:46:af:47:59:9a:a2:b0:91:b9:94:d8:1a:e5:bf:b8:af:d6:
44:ae:72:c4:09:84:8d:40:08:b1:87:c2:8f:81:3e:4f:6f:b8:
a1:47:af:23:fa:75:e1:3e:53:38:98:75:6f:4f:6f:34:f0:8a:
7d:f0:dc:6d:53:a3:6c:19:7f:1a:90:9b:2b:9b:81:a8:14:48:
9a:8c:e4:6d:ce:95:5e:37:35:99:52:1d:a2:18:31:f0:84:dc:
d2:4e:d5:67:d6:f0:12:b3:e0:21:c3:bc:b3:5d:7f:a6:23:89:
16:12:7b:38:d7:24:ef:bd:f1:bd:47:11:70:eb:e9:c8:55:13:
75:20:49:f7:28:89:b9:91:cb:d9:21:af:df:59:e2:7c:21:6b:
a9:00:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:22 2025 by rpki-client