Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa
File: f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa (raw, json)
Hash identifier: XC9Y0x4xPtjG544yvAzukvOsaic99WNngaQ+9hrxrMs=
Subject key identifier: 5E:39:1A:93:8F:FA:A4:70:63:71:D3:01:6B:B9:D5:22:66:C8:BE:D0
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E16BCEA284C6768A10231F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 396610
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:ce:a2:84:c6:76:8a:10:23:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=25718fcd-174b-41ce-b804-7136bfd605fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:99:e1:3c:1b:8e:6d:4e:3b:d3:41:eb:ee:
75:40:09:73:01:5d:b3:e2:8a:d3:98:c5:34:54:10:
ad:4b:f6:ac:4e:44:5e:49:fd:b5:39:fc:e1:99:e3:
ed:25:a8:f3:24:66:0a:bb:f4:0e:0f:b4:a8:50:4f:
2d:78:0e:ab:18:01:8d:95:82:03:45:fe:1b:a0:67:
e7:64:8f:a1:1e:1a:ef:3d:3d:90:a1:0e:8a:9a:d7:
37:04:c5:35:ff:44:b7:68:26:91:e2:a8:7b:fb:e7:
48:37:2a:9c:9a:39:54:3c:66:73:70:37:7c:0f:ce:
0c:52:7d:12:b3:5f:56:9f:65:84:78:f0:22:3d:ac:
91:85:49:4d:48:d4:21:7e:51:4c:70:25:56:7f:89:
88:78:c6:3f:a4:34:c6:00:10:74:19:f9:99:a4:ff:
6e:3e:57:1a:ce:24:b6:f4:a2:73:6f:a3:fb:eb:46:
2b:94:4e:44:7a:35:a3:40:60:fe:b0:38:e3:c4:9d:
4d:b4:d7:52:62:8d:dd:0f:7f:dc:1f:69:50:52:58:
f9:e9:28:75:62:5f:36:36:6f:f4:f7:36:79:14:71:
49:92:8c:f7:6d:4f:7c:7d:f2:98:94:2c:6a:c2:44:
fa:ca:47:df:a6:5f:95:53:b1:c3:22:ba:99:bb:58:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:39:1A:93:8F:FA:A4:70:63:71:D3:01:6B:B9:D5:22:66:C8:BE:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f166d33e-0be8-387d-8a90-ec9a5d24a4c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:3d:cd:26:13:d7:62:7c:7b:2f:99:41:88:5c:ad:b1:a8:8e:
33:38:3a:02:f8:31:5d:f0:82:1f:44:1d:07:62:89:1c:06:a2:
c9:8d:a6:c2:11:07:e1:9b:b3:55:47:88:0d:99:0a:9b:10:0f:
ca:b7:c8:1b:d7:d2:9a:6e:f9:5c:09:4f:00:20:8f:0f:ee:7f:
9a:a3:68:d4:32:04:8f:41:41:0a:6c:e5:2c:28:f9:0a:b4:a2:
b0:b1:a7:93:09:0d:99:78:f8:30:17:3f:02:15:06:54:d2:1b:
89:6d:1b:cd:cb:49:d9:23:de:25:8c:43:5b:0f:a8:36:73:c6:
1f:76:1f:f5:2f:f3:68:66:b2:6c:f8:13:ed:a5:66:e0:da:91:
71:5f:50:8c:03:fa:b2:c8:2e:f6:92:78:5f:37:8b:92:0f:67:
a3:dd:d5:5f:4a:0c:df:c0:bf:52:9e:b2:75:e4:e6:d9:b4:3b:
5d:a9:5a:29:e2:59:06:41:4f:af:5b:30:35:e3:c1:1e:97:98:
6c:2d:7b:75:c3:35:ca:5d:78:c7:5a:53:db:37:2a:49:70:5e:
67:12:c1:ef:9d:b6:59:0f:ef:9f:04:78:4b:bd:9d:25:4f:90:
f6:a5:52:4b:2b:2a:2f:e9:94:3b:90:25:96:ba:51:86:41:e2:
7d:2a:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:39 2025 by rpki-client