Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/71e4a434-dda3-31de-b234-78167e9e4c57.roa
File: 71e4a434-dda3-31de-b234-78167e9e4c57.roa (raw, json)
Hash identifier: Zpeuxy47sJalXI5fNfHwxJjD1PzPr7z7iSnsxDYI+A0=
Subject key identifier: 81:1D:3E:47:0E:0E:D7:BF:9E:7A:02:E4:8B:F2:5D:87:7B:B6:D5:77
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F432858489A3B4855389B784704FCAC00
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/71e4a434-dda3-31de-b234-78167e9e4c57.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 13536
IP address blocks: 216.107.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:48:55:38:9b:78:47:04:fc:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=e91da9bf-ef10-43ff-9f98-e2a95045d240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:4b:59:37:2c:c0:3e:82:58:8d:28:69:6b:
47:e2:04:0c:57:3f:3e:99:45:b9:a4:f1:a4:b6:da:
d1:40:72:3c:1f:7c:a5:d8:7f:dd:8b:a3:db:69:06:
95:e0:0b:47:37:38:02:6e:b3:1e:a2:85:5e:95:aa:
5b:ee:83:79:84:04:00:22:2a:c4:86:57:ca:44:07:
49:99:d2:16:93:21:1a:d6:02:6c:e4:5f:ab:72:6f:
6a:68:36:a0:da:f2:70:23:ec:01:46:7d:75:c2:a5:
62:ff:30:b6:26:95:f3:80:28:ab:c5:f5:f3:a1:af:
ef:6a:f7:59:02:16:70:4c:e0:ba:f5:c2:08:cd:e5:
5b:da:0a:2d:b6:40:02:4f:21:e1:70:5c:4d:82:f7:
4b:df:27:c9:20:15:28:b5:3c:91:76:b9:d0:64:6e:
37:a7:06:d1:b1:b7:b6:ae:4f:0c:eb:94:14:a6:82:
c8:b2:17:90:b7:93:ba:7b:c2:98:43:41:9f:e5:c3:
14:06:ba:5b:fc:3c:3f:54:0f:fa:48:3d:6b:a7:7b:
f3:17:9c:4e:55:3d:23:51:71:88:a6:9f:81:92:92:
c1:2c:2d:6f:5a:e4:58:a4:3c:cf:f0:cc:c5:2d:7d:
d8:01:45:e1:d1:5a:2e:0c:b1:cc:6d:f2:c8:6f:fe:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1D:3E:47:0E:0E:D7:BF:9E:7A:02:E4:8B:F2:5D:87:7B:B6:D5:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/71e4a434-dda3-31de-b234-78167e9e4c57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.107.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:7e:df:c9:f7:ff:11:61:a1:b8:eb:ee:7b:bf:6c:0b:67:98:
31:a5:01:35:3f:e2:dd:77:3e:ff:04:87:e1:02:07:46:93:52:
75:27:19:40:f9:60:01:8d:6d:cf:81:08:39:4b:74:a3:d9:b6:
03:bc:be:c7:c9:32:e2:b2:27:b1:e8:1f:45:1f:c3:53:a6:af:
3e:f2:13:60:fe:05:e7:cc:4d:00:c8:77:a3:05:d9:a5:02:8e:
06:6e:03:f5:80:43:78:67:0c:81:85:b2:9f:7e:5e:e9:23:fc:
58:50:3c:ba:6a:81:e2:9f:84:92:db:4c:f7:85:44:73:a5:35:
fc:8e:57:c8:3e:32:50:f1:a7:c2:9f:a4:05:e7:64:33:bd:ba:
99:e5:4e:8b:ac:db:50:82:d2:20:3c:b1:32:c2:df:c9:d2:52:
2e:31:64:f7:eb:e6:57:d0:8e:bf:cd:be:61:d4:e5:ab:63:ef:
f4:b1:a7:d0:17:fd:53:b6:5e:a4:c1:f3:f4:4f:00:2c:c0:10:
2f:f6:fc:8d:e2:66:95:60:00:d4:fa:0a:77:67:77:97:01:5c:
86:96:63:af:67:44:e9:9f:e6:d7:a7:7c:69:50:97:99:8f:40:
6e:9e:a7:cb:3c:9a:c7:91:05:bf:8c:15:f2:3b:cd:01:29:d0:
0d:29:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:25:58 2025 by rpki-client