Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a34e8751-aef8-3899-a3e5-7cb0ed375def.roa
File: a34e8751-aef8-3899-a3e5-7cb0ed375def.roa (raw, json)
Hash identifier: aIylDWD5mnp0QHjXUTmIVcsWJdufanMg6mR1wgueTjA=
Subject key identifier: E6:FD:F8:57:65:C3:1F:2A:3C:D2:27:27:44:BD:E9:95:DB:24:6F:8D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848CDE1037D1F5D1F5EBA230DC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a34e8751-aef8-3899-a3e5-7cb0ed375def.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 396552
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:03:7d:1f:5d:1f:5e:ba:23:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=9004e605-e7a2-4717-8674-8a87d7c6c2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:af:2d:83:d8:1f:cc:6c:01:6c:15:c4:c8:
f3:a6:9d:60:86:01:0f:2d:e1:87:63:6a:21:1b:15:
ef:df:d8:f9:9e:63:45:e0:18:f3:ac:b4:58:98:fd:
02:42:20:cb:c5:9a:c8:9d:e9:c4:4d:7b:01:23:2c:
0b:8b:4d:ad:dc:59:73:d9:f8:3f:28:7c:54:89:fe:
78:1e:67:73:3e:ed:a3:59:b8:f9:71:69:36:38:46:
3f:a7:8f:03:da:82:f5:75:a1:d1:34:a5:ae:55:10:
a5:fb:d8:68:94:1b:08:68:d8:c2:34:e3:3b:a0:9e:
ce:1a:54:d5:89:f2:2c:b4:30:eb:c4:4d:e4:e6:b4:
0b:c2:8d:3c:5d:e0:83:0a:bc:44:2c:7e:da:7a:99:
5f:92:02:60:3e:1f:a2:68:6f:27:58:ed:27:7a:29:
d3:aa:39:80:b0:56:9f:42:04:26:5e:3f:dc:8e:a9:
74:22:ba:6c:ab:ef:8c:c2:37:df:72:81:e5:5c:05:
df:4c:47:fa:6b:10:70:c6:9d:77:28:94:88:ca:12:
3d:c9:d3:27:07:8f:76:8c:dc:3a:5c:3b:3b:10:8f:
32:a8:bf:02:10:6a:2a:78:5e:ea:54:ae:28:0f:dc:
ff:b9:6c:5d:5a:57:e7:93:c9:f6:99:c1:72:46:5d:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FD:F8:57:65:C3:1F:2A:3C:D2:27:27:44:BD:E9:95:DB:24:6F:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a34e8751-aef8-3899-a3e5-7cb0ed375def.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:74:a2:0d:cc:04:21:54:ab:ce:d6:74:41:44:31:3d:32:55:
8f:88:f8:8a:b5:7a:f3:86:c0:64:b8:bb:56:a1:cb:c5:8d:4e:
8f:85:80:af:44:b4:2b:71:7e:a5:aa:32:15:10:f9:be:99:7f:
3e:6c:12:a2:c0:79:0e:63:ec:cd:c7:78:ea:aa:c8:d8:d5:3f:
1d:38:47:ed:2e:dc:5b:84:ff:f0:5c:b6:38:c9:82:cb:3b:98:
fd:28:0f:28:79:15:e2:1c:a8:b6:cd:d3:2f:14:d3:00:66:cf:
1f:bc:8c:a6:90:80:40:fb:1b:03:87:a8:7e:b8:bf:06:d5:39:
4f:2c:33:05:58:f5:e3:50:24:b7:65:b2:34:e9:0c:a0:44:5a:
f8:c5:e7:09:bc:de:32:93:1b:2e:91:b0:e8:35:74:16:80:1d:
db:3c:83:c3:c8:90:8a:02:ae:25:2f:b4:c5:29:02:b2:a8:27:
5f:83:fb:6b:e5:70:96:9a:7e:4c:7e:75:1b:81:e7:0e:ea:df:
da:f6:c7:09:70:f7:e2:8b:fa:be:e3:fb:ff:23:b9:dc:ac:26:
ef:d0:a5:e5:39:6a:29:b8:b6:d4:4a:da:ec:27:bf:a6:de:7d:
4d:a2:56:36:b2:7e:e8:13:74:8e:5d:dd:49:a1:66:da:92:1f:
01:df:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:07 2025 by rpki-client