Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa
File: b9395f62-c1cf-3e94-8786-53a487982b1e.roa (raw, json)
Hash identifier: HNXEpVDGF7NKl0wq5QoNvtmzeudt6zbdAGzSHcVcZfM=
Subject key identifier: C3:41:7C:D2:12:0B:BC:B5:04:BC:94:49:8D:D8:A0:0B:79:F8:DA:26
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F432858489E6B6EBC4555EB999BF06020
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 13536
IP address blocks: 216.238.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:6e:bc:45:55:eb:99:9b:f0:60:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=78a93d87-a635-4d0a-8ccf-b78f21a23885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:85:44:9e:a4:32:93:99:b5:1e:cf:d1:25:
93:bb:50:a2:d2:9f:b4:4e:1b:c9:c1:fa:b8:79:c2:
c0:7c:23:9c:ff:8d:89:63:45:c3:38:f0:91:7e:9d:
72:45:dd:96:32:09:f7:b2:7a:56:44:2d:2c:47:93:
0f:e6:34:db:e5:17:c6:77:f5:cb:73:e0:af:f0:27:
6e:63:cc:a9:4d:26:85:66:32:17:03:3f:f4:14:18:
2b:8d:29:91:82:fd:26:d0:cc:61:41:bb:f7:55:ca:
e0:a5:da:e5:1c:da:9a:76:1e:20:83:95:0b:fb:a1:
5b:b0:34:cb:59:ca:cf:61:2e:92:72:87:41:74:12:
64:c1:21:15:26:a3:fd:d5:24:53:ed:be:13:09:3c:
03:9f:f3:dc:cb:11:f5:e5:e5:d9:03:0a:96:b8:24:
95:f6:eb:6a:ff:91:5c:b9:5c:8c:ff:55:8f:3b:43:
a1:78:2e:06:8e:8c:f5:cd:2a:20:fc:a7:d4:3d:3c:
f0:c4:0d:a2:16:d4:cb:a2:61:92:59:c9:38:68:c7:
29:ee:4c:d2:f9:9c:97:0c:bf:9e:94:9b:12:2b:83:
0b:35:64:c2:89:a2:0f:5e:56:8b:37:c4:c9:36:cf:
66:bb:1c:e5:d8:1a:e0:11:56:a1:89:ec:60:3f:b0:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:41:7C:D2:12:0B:BC:B5:04:BC:94:49:8D:D8:A0:0B:79:F8:DA:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b9395f62-c1cf-3e94-8786-53a487982b1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.238.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:57:7a:b6:b1:f7:93:44:16:10:37:36:2a:cb:d6:be:74:d9:
17:fc:3a:15:8c:ef:52:81:b7:8c:f3:9b:4e:70:1c:7c:58:1f:
7d:42:21:30:85:af:0d:1a:a1:4b:74:5e:62:78:d3:6f:e8:9f:
a4:2c:43:8b:ff:6c:7d:b3:bc:bd:a9:5b:8a:e4:8c:92:7e:49:
b2:32:3c:e2:b9:d0:45:e2:71:27:68:28:ec:3e:93:74:51:ec:
88:6d:fc:73:ee:5e:12:1b:37:f4:d7:f7:53:86:9b:f1:43:f9:
e7:52:a1:f2:a5:e0:32:90:dd:1f:02:29:38:95:a2:cd:cf:b7:
d4:db:45:32:cc:ae:cc:04:5a:ba:fa:e1:6c:63:f7:9e:98:de:
cd:e7:06:24:f7:63:6c:74:52:7d:99:f6:8e:d3:ac:c4:cb:59:
61:3e:76:2b:07:cf:b4:a3:a1:21:c6:10:d7:01:bc:b3:92:4d:
81:e3:a4:b4:37:d9:96:84:b9:d0:ae:f4:7b:ed:83:59:d0:5e:
2d:32:b2:0b:98:f9:24:f8:bf:8a:04:63:0e:ca:d7:75:75:35:
b3:9b:26:d1:4c:e8:b8:77:5b:66:1f:7c:88:b8:30:cd:fd:29:
60:53:4c:c8:7c:bd:91:82:9c:1f:ea:e2:7f:f7:1e:30:62:14:
6d:82:f9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:20:47 2025 by rpki-client