Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef83dae0-919b-3c68-8186-373eab1ba0bb.roa
File: ef83dae0-919b-3c68-8186-373eab1ba0bb.roa (raw, json)
Hash identifier: rNrf1Y+dDWjrkrkjxErpZmw7ebVn426qIjkMePpixPI=
Subject key identifier: E9:B8:47:04:60:27:B3:26:18:F5:B1:F1:4F:B2:02:33:B5:68:E1:57
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E16BCDFDBA8AF0E061BA6E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef83dae0-919b-3c68-8186-373eab1ba0bb.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 397210
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:cd:fd:ba:8a:f0:e0:61:ba:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=ea71d5f4-8580-42aa-a731-7e26a938b4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c9:54:7d:4b:84:76:63:53:70:4e:4e:0e:57:
53:39:d7:80:58:fb:dc:e1:35:a4:c3:6d:b1:b9:cc:
51:57:7b:1f:98:48:02:27:83:5d:d6:5c:75:ef:37:
91:36:09:53:5a:86:5a:87:a9:de:6c:e6:54:15:c7:
36:cb:76:ef:a7:d6:c1:51:53:84:9a:49:8d:f3:52:
07:7b:ab:79:cd:cd:37:21:d6:32:c0:5a:d2:f7:55:
a3:0d:e9:64:d3:3f:71:c6:9a:13:e5:07:e2:79:b8:
27:2d:5a:b2:81:b7:83:1f:fa:14:11:17:b7:26:b5:
68:60:47:e0:4e:0d:f3:fe:f4:ee:8e:79:be:d4:69:
bc:29:ab:24:58:bc:5c:1d:55:fb:d3:19:32:ff:02:
2c:60:db:cd:16:f0:45:30:ca:1e:d4:79:bd:1d:da:
a1:dc:fa:55:28:a5:2d:8c:a7:31:42:30:34:79:8e:
33:31:9a:10:65:1d:95:49:4d:47:5d:a9:d5:36:84:
df:9a:ec:7c:cc:71:ed:0a:03:e4:b9:ff:ce:70:8e:
27:f2:62:25:2e:a2:cc:c9:29:d4:f7:e3:d2:6a:20:
f1:cd:4b:8c:91:b7:98:05:e6:80:a5:58:bc:93:85:
5f:fc:59:3c:ab:c9:7a:7e:cb:71:c9:71:14:36:86:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:47:04:60:27:B3:26:18:F5:B1:F1:4F:B2:02:33:B5:68:E1:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef83dae0-919b-3c68-8186-373eab1ba0bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:82:e1:82:fe:8a:64:12:42:34:6a:55:1e:fa:46:d6:41:c5:
e2:f4:b5:64:c0:94:b7:fe:24:15:bf:0f:8a:fa:d0:cc:1c:60:
02:48:66:dc:8d:68:ba:a5:56:74:6d:95:89:19:36:0e:59:49:
8a:d9:54:d8:c5:28:ab:b9:83:eb:ac:a3:1f:30:c4:81:a3:10:
82:31:d2:66:18:c5:ae:9a:40:00:c4:cf:0b:79:19:76:88:c8:
ca:6b:64:d1:6e:81:21:ee:f2:46:1e:02:d9:ad:84:c7:a2:77:
f2:0f:10:59:9f:e0:36:6d:f8:f2:5e:e3:3f:32:07:8a:6c:4f:
93:4f:b3:8f:e1:15:61:e4:8f:b8:d5:b7:c1:e5:c1:ac:41:a3:
2d:dd:4c:8a:43:f7:44:6a:97:b4:57:d5:22:0e:55:e0:71:8c:
a9:bc:a7:69:59:e9:9d:2d:7f:84:cc:54:80:4f:fe:bf:98:0b:
02:6e:3a:92:c5:e5:5b:04:df:80:de:53:c0:44:f3:36:44:00:
f2:bb:12:86:36:39:92:61:e4:28:e0:3f:23:5c:b1:9e:81:48:
af:a8:4d:99:4c:1f:f6:3e:fc:a3:19:bf:91:84:b9:b6:46:7f:
5d:9a:25:0f:44:3e:4c:57:93:35:ca:cf:f6:46:20:cc:6f:9d:
8a:23:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:38 2025 by rpki-client