Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa
File: 8213878d-35dd-30b6-ac09-e612e049057a.roa (raw, json)
Hash identifier: 4W1RsBbfve/HhSXYd+mycef1hF+iLCjAT3t7wl/LDAE=
Subject key identifier: 38:EF:78:04:46:2C:DF:C1:F8:02:0A:67:A7:40:E8:3D:D9:3C:6D:33
Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial: 010D0C9F432858491D717BACED9EF90A8B0E2260
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 31875
IP address blocks: 216.21.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:7b:ac:ed:9e:f9:0a:8b:0e:22:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=fb7ffd59-c5c8-4667-bd82-3dd5fc96a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:95:89:6a:8f:de:1a:30:3e:62:74:62:5a:
5d:3c:0d:c7:aa:c0:73:98:26:91:f9:a2:5b:b8:aa:
de:30:76:af:d3:f8:4b:ba:42:0c:0e:ed:13:24:5f:
0e:37:61:05:f8:e7:ed:09:c7:45:ab:a1:e3:f2:ad:
e2:26:1a:6b:59:bb:b7:7f:ef:e4:b7:ab:e0:6c:61:
99:1d:1d:40:c6:8f:74:bc:10:5a:a9:38:34:dc:8f:
b3:21:4f:45:da:ca:40:e9:cd:a7:d8:3c:4e:c8:17:
b0:58:eb:5b:7d:f1:bc:df:6d:17:89:69:6a:6d:aa:
dc:29:10:dd:03:fd:6d:ed:29:87:6a:e7:06:ea:38:
a8:e0:96:7c:61:ef:33:6f:10:d0:60:55:5d:e1:5d:
be:f7:62:4f:0c:7c:fc:be:e8:7c:2a:af:0d:99:3f:
f6:c1:0f:1f:eb:fe:08:7a:28:65:dc:f9:82:f2:bf:
7c:3b:ff:87:c0:ec:bc:dc:71:10:2e:34:db:ea:6a:
77:5a:fd:29:b9:d4:17:30:c4:3a:15:72:f3:3d:94:
ee:46:ee:f5:2e:53:b5:dc:94:76:a0:30:96:61:5d:
46:dd:19:97:cb:51:9c:4d:28:d2:dd:30:15:3c:d7:
26:78:3c:79:d4:74:2b:c8:cf:d4:61:2c:15:81:c6:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EF:78:04:46:2C:DF:C1:F8:02:0A:67:A7:40:E8:3D:D9:3C:6D:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/8213878d-35dd-30b6-ac09-e612e049057a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
X509v3 Authority Key Identifier:
keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.21.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:fd:7f:cf:6e:7b:88:5c:99:86:71:7b:2c:24:54:cb:44:c7:
5b:a1:bf:61:12:24:8d:a4:71:c1:ae:80:48:8d:34:88:4a:b6:
b0:e5:67:4a:34:f5:26:19:ec:8f:33:c2:58:d0:c8:9b:e0:5d:
7e:25:ee:7e:03:4a:6a:52:6e:ba:75:01:4f:f6:6f:40:24:01:
f7:11:d7:73:c7:4d:b3:6b:00:0c:2e:d5:13:56:40:89:87:4f:
a9:93:a2:f2:5e:49:ef:a8:0e:13:7c:be:48:ec:c8:6e:13:5d:
dc:e5:5e:3c:21:af:76:9e:2d:8e:de:f8:3b:ef:f9:5b:f0:51:
fb:27:94:d7:2a:38:76:29:54:9e:ca:9f:1c:58:dd:49:85:71:
b4:24:77:72:81:19:ed:05:25:8a:21:ea:50:16:2f:38:af:e5:
c9:c8:3f:35:81:8d:40:35:77:eb:df:76:ce:13:a0:cb:75:81:
88:a4:3e:1f:4d:0a:7d:db:3e:d2:1a:c8:f6:41:e4:c9:01:d8:
d5:0e:82:24:9e:a2:d0:1c:3e:aa:d1:ae:7f:84:30:35:85:f7:
ff:a0:c5:41:e0:21:91:d8:93:e3:92:77:e2:94:c2:48:26:2f:
65:71:a3:f0:c0:ea:50:e9:79:b4:af:59:d1:98:04:22:54:81:
e5:8a:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:39 2025 by rpki-client