Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03ae426a-e388-3578-8265-a92fb6f43e9c.roa
File: 03ae426a-e388-3578-8265-a92fb6f43e9c.roa (raw, json)
Hash identifier: Mj0aJlFB0sfsMslQw8Fb6H5oBwZtcMNYyJXEatfGdyI=
Subject key identifier: 5B:FF:4E:C4:19:BA:07:18:50:8C:2C:CC:A4:06:08:5D:3D:28:00:D1
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848CDE1042F75214279D5D18290
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03ae426a-e388-3578-8265-a92fb6f43e9c.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 396557
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:04:2f:75:21:42:79:d5:d1:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=eb9ec5e4-7aff-4905-bab8-44630afc66e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ed:9d:57:40:e6:98:d5:5c:b6:bd:8c:4b:94:
b1:47:8a:c7:a8:54:21:b9:15:0b:e9:ea:24:f4:54:
34:58:98:46:10:15:7d:38:d7:75:93:29:61:91:3f:
d0:31:08:26:7c:00:3b:94:d9:ff:9d:ce:75:8b:8d:
5d:21:dd:02:0c:7a:32:d7:09:6a:cf:a9:04:cd:68:
8e:cf:60:67:a3:ed:c7:26:e5:a7:43:a4:3e:76:2c:
b9:f9:53:37:22:96:f3:72:9f:6b:14:4a:da:96:c3:
3d:cf:49:e9:d0:c7:fc:33:71:70:02:54:f0:1f:e3:
50:85:41:b4:19:25:d0:c3:aa:39:fb:15:4c:cd:f4:
15:a2:fa:ab:cd:06:5a:05:18:62:2d:f8:5f:5f:4c:
d5:d9:82:c9:8a:6a:ed:4f:b3:7d:14:53:58:88:88:
98:8b:a6:b3:6b:01:a4:4f:6d:0a:6b:4c:a9:7b:0c:
10:5b:06:90:37:cb:26:cc:16:a1:56:5d:fb:aa:da:
ee:6f:a1:8f:29:e4:37:07:0e:69:07:00:a5:74:b8:
22:ed:87:1e:33:2d:19:6f:03:fc:28:5c:68:33:ce:
1b:06:a3:15:36:8e:29:10:32:e5:90:0c:9c:b8:be:
72:83:4d:2d:6e:98:74:44:58:53:62:03:a5:82:b8:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:4E:C4:19:BA:07:18:50:8C:2C:CC:A4:06:08:5D:3D:28:00:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/03ae426a-e388-3578-8265-a92fb6f43e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:9f:57:be:31:1d:d6:10:cc:e1:8c:20:d1:07:59:0c:db:43:
af:a6:a9:80:8e:84:87:4d:d8:6b:fe:3c:81:29:72:fe:4b:82:
11:50:fc:a4:f4:69:6a:b7:ce:c6:73:9c:42:26:90:01:7a:61:
dd:be:2a:9e:4a:7f:eb:8f:2d:e5:45:fe:d9:b3:a9:6b:b6:c6:
8a:a9:1f:8b:23:ff:73:a2:bd:2f:a7:f4:a1:5f:eb:37:f8:63:
cc:eb:19:14:a3:f0:66:ab:c9:4d:e2:3c:6e:e6:c3:1a:49:ea:
68:6d:f9:04:42:7a:e0:20:54:21:10:75:3a:d4:2d:0b:ab:2b:
48:00:aa:21:f1:89:ee:3c:49:55:45:6c:fd:72:be:ca:66:82:
49:82:dd:74:7a:b9:e6:33:06:29:72:9a:f6:ed:99:e5:b9:4f:
96:d0:7d:8a:4e:c3:59:06:b0:3a:86:7a:17:c0:28:ab:6c:35:
75:2b:c4:2b:13:9c:02:00:0b:42:08:ea:fa:9b:25:7a:87:ca:
2e:f6:81:d1:2a:db:49:32:42:52:67:10:53:4d:42:57:61:0d:
4a:71:2b:46:66:f9:c1:f9:17:53:8f:62:81:2e:dd:b6:cf:ce:
a7:bb:a4:05:a7:81:dc:51:c6:0c:24:eb:f6:59:a7:84:c9:16:
f8:aa:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:34 2025 by rpki-client