Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa
File: 33b86f0f-9676-3652-945f-0423095a5069.roa (raw, json)
Hash identifier: i6BFeaH7srcwmTSW8Gykj4yYaGcSUg9oPUjT2Kj3/Yc=
Subject key identifier: BB:5E:E1:D0:77:B3:BB:B2:4D:00:7B:1C:1E:A4:A7:45:87:86:85:4C
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848CDE10A564191B33D74704C00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 25485
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:0a:56:41:91:b3:3d:74:70:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=c26bd629-5e16-4f57-9453-bad0d86a12ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:3b:c9:76:58:dc:8e:61:66:ff:58:e5:f5:
68:7a:43:7a:a5:5b:be:41:5e:d0:c0:fe:1e:15:05:
81:fd:7b:09:53:7c:f6:16:0b:f0:d5:46:01:a9:f0:
dd:8b:9e:fa:27:ec:50:5e:46:45:c6:5e:d8:64:e6:
a4:2e:47:ee:9f:8b:cb:28:c9:17:64:a3:7a:ea:92:
2a:6f:51:48:7b:99:52:91:3e:a0:05:81:8f:91:86:
2c:71:d8:78:65:5f:84:59:53:1f:05:81:9c:70:58:
da:21:02:5b:16:97:a8:bb:78:41:9b:59:18:c3:b5:
14:00:1b:9e:6a:b0:9d:ca:21:44:c5:20:5e:b3:18:
47:ad:cd:2a:dd:50:58:96:61:24:75:7b:e7:0d:2b:
2f:25:3f:41:52:b5:24:d0:66:41:7a:cb:fa:a6:20:
9c:e2:d2:c4:cc:e1:88:f0:85:c2:23:db:94:01:9f:
a6:5b:99:0b:9f:1b:82:3f:bc:22:7f:f4:55:18:06:
40:0c:0a:48:dc:e8:2e:d6:0e:de:38:b6:17:ab:8f:
98:60:6f:2b:cd:c5:70:60:72:93:64:e4:ff:3c:0d:
35:cf:3c:fd:02:89:be:41:69:36:71:7d:79:b4:c6:
c5:c7:65:4c:9a:6a:2a:0d:4d:91:be:a1:d1:9f:2a:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5E:E1:D0:77:B3:BB:B2:4D:00:7B:1C:1E:A4:A7:45:87:86:85:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/33b86f0f-9676-3652-945f-0423095a5069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:dd:b0:54:c6:13:02:fc:ea:8e:80:91:b5:ee:be:78:57:f9:
f4:40:4b:0a:4e:4b:5d:d1:64:18:79:4c:23:8c:42:e8:ff:98:
e4:f8:3d:54:45:7c:8c:8b:9a:72:e9:5a:7d:4c:f1:4f:2c:12:
cf:69:87:65:8e:8a:a8:ad:45:ac:5c:c2:f4:36:d5:35:3b:09:
6a:e9:29:e3:e2:3c:2a:57:5c:35:04:68:32:29:a9:ec:56:46:
cf:ca:6a:55:78:ad:c2:d9:3b:c3:08:5e:a6:1b:95:00:bf:17:
d8:dc:ae:c4:02:70:da:3b:f5:82:00:90:39:13:88:23:83:40:
b1:42:74:b5:2e:3d:7b:ce:a7:5a:40:b1:72:30:ba:58:37:2d:
89:d2:06:c0:60:7f:56:03:6e:ab:b4:8e:24:d9:0a:40:a6:6b:
ff:29:3c:e7:7b:2d:ac:ff:4e:c6:bd:c1:3a:45:97:f0:0f:02:
4d:a7:fd:60:ef:23:bb:6c:1c:cd:c2:c8:67:e3:ba:ac:3e:3c:
c3:85:59:ad:f2:55:fc:03:23:68:6e:0b:94:6d:61:c7:8f:a7:
a2:90:1d:ef:51:cd:cd:01:e9:e7:c1:d3:a1:00:e1:d3:2f:63:
4d:24:d0:73:f2:a9:7e:72:11:53:6c:32:0e:89:17:e7:89:31:
d6:de:d9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:59 2025 by rpki-client