Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa
File: d2408c5f-d225-32f4-9f6c-82686c9fa438.roa (raw, json)
Hash identifier: Z9Q64y7lUbZKKbdVG7Bq6TmqORiQPbtc9rbTFtBvJYM=
Subject key identifier: B8:71:A4:88:42:A3:63:12:A9:43:C5:54:7F:FB:DD:66:D9:75:B9:AA
Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial: 010D0C9F432858487E5060A64C2270407E7AA100
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 32058
IP address blocks: 216.147.192.0/20 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:60:a6:4c:22:70:40:7e:7a:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=b4e1b9c6-ac35-4851-a9be-ba864f32fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:33:e2:35:27:9c:07:54:aa:ed:b2:f2:cc:
9c:72:0d:5d:50:fc:b6:3e:b2:c5:8b:31:d5:6b:f0:
b1:06:fb:b7:8b:69:e1:2b:83:87:3a:f2:23:01:f2:
f3:d4:cc:69:17:0b:92:fa:85:d4:46:5b:55:dc:00:
eb:a4:67:eb:5e:a5:7b:a4:60:1d:c4:af:2c:b8:8c:
c9:46:e8:66:d4:dc:d8:95:e7:8b:ad:ae:8f:b6:83:
ed:95:88:ed:04:25:00:84:f0:69:88:59:bc:96:08:
82:66:f6:35:5a:d3:d9:88:bf:c4:6d:b0:bb:da:3d:
e4:b5:7e:c2:8d:2c:87:ba:79:fe:21:be:ad:8e:5a:
fc:11:c6:9d:d1:91:8d:50:30:33:7d:b0:ca:07:8a:
d9:3d:18:0d:4b:c0:2b:f3:c5:fa:fb:b1:a8:e1:1e:
a1:a7:93:1c:0e:6d:0b:4d:da:58:cc:ca:85:fb:b8:
b6:a8:8b:f2:04:07:7d:b1:79:0f:1e:fc:58:e8:aa:
a8:85:d2:80:47:f2:ee:23:64:cc:ee:8e:aa:3e:3a:
f8:0b:9a:e3:c1:06:c6:31:06:dc:e3:2d:41:63:e0:
aa:d9:aa:c6:54:6d:4a:d7:d2:27:14:00:e0:68:db:
2f:c6:f4:58:c2:4f:48:9c:c2:ed:68:ad:d8:5a:fb:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:71:A4:88:42:A3:63:12:A9:43:C5:54:7F:FB:DD:66:D9:75:B9:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
X509v3 Authority Key Identifier:
keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.147.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:64:4d:5d:b6:8b:a7:ee:04:9c:35:00:34:e1:94:d1:3f:fe:
52:84:41:0c:2a:1e:65:81:f8:dd:a0:30:14:c7:a5:5e:a7:cf:
09:94:94:14:4a:d3:08:61:a8:1a:77:1f:93:5d:49:87:55:49:
08:87:d2:9e:24:2a:63:24:0c:48:1f:90:8a:8c:2c:c9:08:dd:
f1:8b:87:aa:ab:5f:d4:67:a9:cc:40:f7:13:a8:08:0d:ca:1f:
3f:48:8a:a5:c7:31:9e:1a:02:3a:1f:e3:a7:e2:42:26:ce:be:
0f:43:72:e0:b4:a8:7d:48:4d:a5:6b:c8:c8:70:ab:b6:f2:16:
6a:d5:b0:e1:fe:b7:ab:8b:42:e8:0c:47:1c:b1:45:58:82:10:
25:15:24:08:fc:bc:d2:39:2a:07:31:b3:b6:96:00:f8:97:29:
34:47:8d:ad:21:b3:5e:2d:ea:d4:8f:47:0b:f0:71:00:f9:b7:
58:23:06:8c:8b:e4:d4:2c:ed:96:d7:78:c5:4f:c0:f6:5b:d7:
93:a1:ab:20:5c:4b:e4:b6:41:44:76:94:02:d2:57:bd:9b:48:
9f:f1:ed:ef:80:de:28:85:ee:f3:8d:16:f3:44:73:28:c3:26:
8e:d4:97:a9:6a:3e:cf:50:66:d1:4d:63:3e:a0:0f:8d:c0:aa:
2d:63:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:24 2025 by rpki-client