Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81ad973b-62d0-3929-85ee-f79af1ed213d.roa
File: 81ad973b-62d0-3929-85ee-f79af1ed213d.roa (raw, json)
Hash identifier: pdD3oanvdg0/FnqRT9FMUux/1DXDIcVJPYK/rq+lV7s=
Subject key identifier: 66:1C:88:A5:03:DD:72:07:B3:02:E2:F4:A0:1F:3C:67:24:9B:FD:88
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E16BCD5CBD73A6F73C3F6F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81ad973b-62d0-3929-85ee-f79af1ed213d.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 396570
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:cd:5c:bd:73:a6:f7:3c:3f:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=d6ccd906-ae11-4912-a165-7c10f4bfce6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2c:df:4b:9e:9b:fd:5a:28:cb:1c:dd:7d:48:
a5:ba:5f:83:a1:4e:1d:55:b5:18:09:e1:31:81:99:
c1:16:5d:4a:e9:06:92:47:31:33:97:73:f3:e1:47:
26:82:24:84:f7:20:c7:62:b4:2b:84:0c:03:b5:89:
45:9d:83:9b:51:2a:33:c8:aa:74:b3:44:26:3f:89:
64:60:41:79:9c:c1:0e:91:df:df:4e:28:16:4f:8b:
f0:23:7f:e0:b4:ab:2e:83:68:db:bd:85:14:bf:b3:
15:87:54:d4:0e:ae:0f:0c:de:66:dd:63:47:13:1f:
11:57:44:25:ed:cd:f9:fd:82:6f:a0:4d:67:c0:0e:
2e:47:86:c8:c7:07:9f:f2:c5:c2:f1:67:c8:01:02:
11:16:0a:3b:0f:c3:ae:7c:31:a5:c3:a1:3d:96:7f:
ac:f3:9e:68:d1:37:e4:b1:4e:7a:6d:d1:0c:f2:9a:
ea:96:6c:4a:30:f9:dd:d6:7f:93:23:84:24:2b:8d:
a4:b3:f1:22:c7:16:2a:cf:0b:f1:9c:56:71:8c:7e:
6e:24:73:ff:63:fc:34:5d:84:35:7b:92:5a:ab:2b:
73:6b:bd:1f:58:69:57:16:c1:0d:88:c2:eb:7a:61:
b7:dd:80:5f:ac:68:97:89:b9:1f:68:31:49:0a:72:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1C:88:A5:03:DD:72:07:B3:02:E2:F4:A0:1F:3C:67:24:9B:FD:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81ad973b-62d0-3929-85ee-f79af1ed213d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:26:3d:65:c5:5e:53:ac:01:30:b3:65:29:78:73:8a:28:46:
3d:83:22:e9:4f:eb:8d:1e:4c:a2:43:a5:3f:b7:19:e7:df:6b:
f0:96:c3:3a:1b:5c:51:b2:d3:ab:fb:e0:f3:91:1d:88:a6:1a:
bf:d8:09:3a:3e:ab:d0:47:da:cd:4b:4e:c3:46:f0:f6:bb:0a:
75:14:64:66:c1:20:9d:20:76:ae:df:13:6d:4a:d4:61:f4:11:
92:f4:aa:d0:33:fb:8e:90:b1:c7:0d:8c:73:2e:15:c6:91:60:
3e:82:f6:0b:de:77:3b:bc:64:eb:a7:13:53:5f:7e:d7:63:ab:
3d:7b:0d:d5:38:43:ae:d2:fe:67:0e:63:2e:00:16:fa:3a:e4:
2f:c9:e8:a9:58:1b:93:b3:ce:52:45:d5:a4:35:1a:c8:21:6f:
55:a9:28:46:9e:7b:c9:50:fe:51:17:79:68:5f:c4:d2:ca:ec:
73:e6:9b:07:86:2a:ec:5c:07:dd:fe:90:86:91:2d:26:0b:ec:
46:19:fe:86:33:7d:ef:4f:56:5b:61:b7:8d:a7:41:60:70:c0:
0f:a2:a2:79:09:fc:c4:fd:69:df:2b:d8:ae:6d:cf:2a:9e:e7:
9f:78:52:76:07:f8:6c:49:37:22:f6:cf:12:a0:22:63:2a:fc:
4f:33:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:21 2025 by rpki-client