Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/8f9c043e-1eeb-365c-bc45-01f3aac37d20.roa
File: 8f9c043e-1eeb-365c-bc45-01f3aac37d20.roa (raw, json)
Hash identifier: dm8niqpIZhKRbjrbK+mj/D2NjG3lYp4N4BNZXEKQmeE=
Subject key identifier: 2F:E1:DF:23:E9:3B:8D:D6:1C:CE:27:4E:36:32:4C:57:00:4E:9A:FD
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F43285848B62620A5056C5E57C6687F00
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/8f9c043e-1eeb-365c-bc45-01f3aac37d20.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 9009
IP address blocks: 216.158.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:20:a5:05:6c:5e:57:c6:68:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=8bc821b4-3e24-4711-a035-8af11ebaa904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:02:4f:6b:f9:a0:3c:a5:2b:fe:1d:2b:0a:
fe:36:e4:02:38:c5:0c:8e:df:f8:49:af:db:f2:ae:
f8:ba:b9:cc:f8:5e:bc:c8:1f:a5:8f:23:7e:9b:70:
54:91:77:f9:c4:55:28:ad:74:e2:81:b2:f8:76:00:
c8:71:c4:08:f7:1c:d3:e6:b7:1e:30:f1:0f:ef:79:
09:9b:ce:74:f8:5f:fc:d5:f0:ad:1f:6f:a1:a4:3d:
b8:fa:47:22:f4:b3:6e:99:f3:22:07:ca:ae:22:d0:
35:9f:f8:84:b1:67:73:4b:8d:ba:95:72:95:d9:df:
3f:f8:8d:0b:89:db:35:f8:82:18:0b:21:ad:ff:f2:
12:07:7b:5d:43:e3:b4:15:02:fa:82:3f:ba:52:be:
4d:1e:da:40:6f:79:25:bb:24:50:93:f4:43:66:9b:
8e:7a:7c:ab:aa:98:91:ca:2b:33:18:09:02:0e:9b:
3a:d1:e1:65:69:b2:31:04:a6:fb:f3:9e:68:9c:b2:
70:3f:07:20:ad:ff:ee:26:29:b8:c2:65:85:7a:c1:
96:69:c0:61:95:8b:16:f0:6f:ef:68:04:5a:91:40:
56:56:41:47:6c:de:52:7d:b2:27:46:cc:f3:04:a2:
97:36:df:fc:0b:84:66:ea:db:e5:88:b0:16:d6:3b:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E1:DF:23:E9:3B:8D:D6:1C:CE:27:4E:36:32:4C:57:00:4E:9A:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/8f9c043e-1eeb-365c-bc45-01f3aac37d20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.158.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:47:25:aa:f1:18:8f:6e:70:70:9c:20:7a:d5:37:df:71:a8:
5e:97:4b:92:af:8d:c0:3b:34:69:cf:15:c1:65:2a:82:2f:41:
7c:10:e3:7c:9a:83:bb:a8:21:60:ac:69:41:d8:1c:e7:34:2c:
5b:07:7a:b0:0b:e2:8b:05:0a:87:ca:a9:3e:68:91:fa:1c:61:
d7:df:d1:20:20:ad:c6:28:55:f3:ec:8d:0f:80:e5:30:70:43:
e8:4a:0d:82:e9:87:f3:5b:6a:55:06:b3:4d:9f:ed:be:d1:da:
76:af:97:80:3d:64:61:2b:3f:d7:ef:8e:a8:f7:30:3f:81:82:
65:6a:d0:a7:bb:12:7b:26:88:9e:3f:19:87:a7:1f:da:a5:a6:
2d:80:6f:91:5f:d6:93:9c:f4:d5:b5:ab:0f:60:6c:04:a6:bb:
c2:d3:ab:9a:85:3a:f5:4a:8a:ee:8f:ec:e8:0e:c3:92:dd:ef:
41:82:19:10:0c:42:9d:38:df:23:a0:db:d0:66:f5:9c:4b:f8:
4e:31:2f:c9:b0:0d:13:71:07:bf:d1:af:7c:7c:1c:a8:39:45:
1c:11:23:65:68:ee:bf:25:06:38:dd:b9:e7:b1:42:09:c0:80:
4b:8b:9c:4b:4c:4d:f3:3e:34:97:a0:7c:c7:c9:4e:f7:80:56:
47:f4:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:24:36 2025 by rpki-client