Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa
File: de977a80-b422-3e83-bc77-25aec313c480.roa (raw, json)
Hash identifier: wYGLyXFb038STgpXfbdVHq0gQZcdpNcpj6sCpnEfYUE=
Subject key identifier: 68:91:6C:9A:48:79:D9:51:2A:D4:9E:DB:0B:C8:47:C6:9E:85:10:64
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F432858493ED3D9872CC21126E6422A00
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 8635
IP address blocks: 16.1.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d9:87:2c:c2:11:26:e6:42:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=5189f83e-6d6c-4368-ac40-f4fa0fb9574c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:16:8b:9a:0d:87:b3:65:5b:dc:2c:5a:ea:
51:97:c6:16:06:ab:ab:06:96:a3:23:49:9a:f9:f5:
d5:06:b3:32:e2:4b:b1:f0:80:c1:6d:6d:31:b0:45:
51:dd:73:44:ce:44:b9:58:80:8a:1a:e5:41:7e:f1:
01:b4:03:68:22:68:76:96:5d:a8:ef:3d:1d:01:4f:
55:81:e0:cf:96:b7:7a:1c:18:e6:76:90:29:57:55:
c2:2b:4c:be:a2:5a:16:02:d8:42:99:bc:b3:6c:35:
ac:3c:9a:ff:a3:f8:dc:ed:15:1a:b0:33:43:e5:2d:
e1:58:10:57:f9:44:1d:e3:a3:a8:8a:d7:4b:cb:42:
2a:30:ed:b9:dc:63:b0:d7:78:51:1f:ea:50:04:f1:
a3:64:74:51:80:22:6b:6c:ca:10:f0:7d:98:24:9d:
65:37:8d:82:4f:ea:8a:b5:9f:3c:dc:d2:3a:6c:7c:
34:d3:9e:3d:8e:2d:fc:10:60:ca:ab:34:e1:e8:07:
47:85:29:fb:52:33:00:09:9a:c5:72:a0:9c:2a:96:
1d:82:63:37:b2:4d:5f:77:09:05:12:53:84:a0:e0:
c4:81:5f:f6:1e:26:50:22:3f:a6:24:52:34:6f:7e:
92:cb:af:a2:87:e3:04:09:f9:de:56:3d:1a:b8:51:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:91:6C:9A:48:79:D9:51:2A:D4:9E:DB:0B:C8:47:C6:9E:85:10:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.1.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:9a:fe:7f:a0:c0:cd:53:28:e9:f8:02:7a:c1:85:16:ee:50:
6c:3d:2f:fe:84:c8:02:d4:c0:4a:3f:39:b0:e3:d0:22:a4:0a:
98:65:47:3f:5c:4d:98:da:9f:c4:c2:5e:24:f6:fb:5d:a7:7f:
1c:e0:f9:b0:cc:20:b8:9d:77:48:1a:c5:e5:fe:95:ad:ec:23:
ab:37:62:4c:22:d6:01:0f:62:9f:d0:25:44:68:b0:69:f2:6c:
3a:47:7c:75:c1:c3:2d:c9:46:5e:df:6d:90:9b:ae:a2:e6:de:
04:6c:9c:9c:79:14:12:ca:98:6c:c3:30:66:22:e4:06:a5:24:
0a:99:0d:ee:36:1a:e8:1e:a4:0a:bb:25:69:03:f7:f3:75:75:
ee:4d:23:75:a3:64:88:a5:c0:69:20:85:f7:fb:22:39:ae:1a:
fd:87:78:a7:9d:0e:97:92:9c:6d:eb:9b:85:f9:8c:57:a1:a2:
a3:84:cd:5e:7c:90:fd:f8:2e:ea:c4:5e:41:01:8e:89:a4:69:
b3:37:a1:2c:b4:89:09:d0:9c:7a:65:dc:8e:4c:8e:33:47:44:
9c:f8:c4:a0:17:75:c7:d7:57:82:0b:cb:bb:0f:ab:67:59:b0:
0d:8f:69:ab:70:2b:d8:c4:10:36:d7:4d:87:f7:d4:e8:18:27:
8f:55:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:04 2025 by rpki-client