Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
File: fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa (raw, json)
Hash identifier: stKXSlHBuCew1CZFtuRdhSZJnDz21rLDsgijtQk7WMc=
Subject key identifier: 12:C6:0F:4D:04:E9:36:D4:5A:A8:33:03:D2:92:19:D1:B6:F2:24:04
Certificate issuer: /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Certificate serial: 010D0C9F43285849287E63FF819FAE0094BB0440
Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 13959
IP address blocks: 216.150.43.0/24 maxlen: 24
216.150.44.0/24 maxlen: 24
216.150.45.0/24 maxlen: 24
216.150.46.0/24 maxlen: 24
216.150.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:63:ff:81:9f:ae:00:94:bb:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=43f13956-8d0e-426a-9ba8-54c5166188f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:b5:fa:a4:0f:3c:ed:48:f7:20:9c:51:10:
2a:34:29:7e:a6:a9:3d:89:63:de:5e:f5:ce:2c:d3:
4b:90:d8:c3:9a:46:31:66:af:1f:c5:20:74:7c:6f:
db:79:fb:ce:94:b0:d2:e0:e5:c7:9a:5e:e2:2f:2c:
3b:0c:75:ff:d7:94:57:82:f5:dc:bc:eb:2b:e6:bf:
51:64:67:2a:a0:3d:e7:e9:d1:f7:f9:e8:ca:a2:87:
8d:f8:69:1d:4f:df:97:03:62:4d:c1:ba:86:a2:97:
ac:e1:ec:0b:1a:ca:6a:0f:82:3c:10:78:e2:aa:57:
32:f1:43:eb:e5:ea:83:2e:72:89:a6:40:c5:76:ff:
d3:7e:43:1e:8b:ce:89:99:37:5a:50:80:f8:22:e6:
2b:1f:7a:6f:10:d1:2b:2f:03:89:0e:f8:8f:6f:94:
2f:b2:bc:4d:0d:44:55:91:0d:9a:32:15:23:75:ee:
e3:25:4d:e6:06:15:9c:2f:99:9b:d0:da:97:e8:46:
93:b2:69:3e:4d:3d:33:1e:ff:35:f5:c8:3a:6e:b8:
4f:ff:d1:f3:56:44:a1:19:4d:48:c6:03:e6:82:c0:
5f:98:4d:b1:3c:7f:b4:dc:ee:f2:71:3c:a7:de:7d:
5d:e4:66:72:1b:cb:72:9f:11:50:d4:c1:94:8a:17:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C6:0F:4D:04:E9:36:D4:5A:A8:33:03:D2:92:19:D1:B6:F2:24:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl
X509v3 Authority Key Identifier:
keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
sbgp-ipAddrBlock: critical
IPv4:
216.150.43.0-216.150.47.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:0a:72:df:e7:fa:fa:6d:e7:3f:f7:7d:a5:0d:6b:31:28:8f:
3d:e2:9c:f6:59:cd:0d:98:31:ef:d6:c1:5b:05:84:e1:f3:7c:
c6:82:c3:dc:13:a9:f9:35:72:ca:cd:2e:b4:d0:f3:96:42:87:
47:ce:af:a8:98:f3:3b:14:05:52:11:d5:29:34:a7:65:8e:1e:
29:c2:41:80:90:52:52:9b:48:a7:3f:11:6c:8a:2e:72:54:07:
79:b8:a1:c0:a8:ff:69:70:29:aa:a9:e5:b2:10:7a:4e:fd:1f:
bf:8d:78:37:84:f6:0f:ff:f6:ea:6e:80:44:87:fd:38:69:24:
55:15:20:6e:b5:33:e3:80:9b:25:92:87:35:06:81:7f:f8:72:
f5:51:55:33:b8:3d:d5:21:42:e8:8f:97:f3:1c:29:f8:d7:be:
d1:94:4e:8e:48:47:32:8b:41:dc:89:a3:2c:0b:69:9e:04:e2:
5f:13:f1:6b:d4:d9:cb:c2:e7:e8:5b:71:19:4f:19:96:f1:f0:
19:38:9e:df:4f:09:fe:17:58:43:f6:aa:ef:34:6d:74:43:2b:
63:23:d7:33:35:26:35:57:45:45:a5:37:65:61:33:12:d7:45:
d6:97:29:97:ff:20:f8:5c:89:be:bb:ef:fb:a7:5b:47:00:ad:
1c:70:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:41 2025 by rpki-client