Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa
File: fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa (raw, json)
Hash identifier: +b9NxMBlPYIMwam6eDk/knZ6qVJOYFtIeVlnWw8fvcM=
Subject key identifier: A8:27:AC:BB:40:5C:A2:B7:BC:6A:3D:33:2C:1D:FF:E0:F2:D6:7C:E5
Certificate issuer: /CN=0f420918-35e5-40cb-b0bd-59d73276fa1e
Certificate serial: 010D0C9F432858493243E142B1C50F490C0571C0
Authority key identifier: CE:14:8A:A5:94:96:10:E8:87:9B:1A:BC:34:C7:E1:CB:01:F3:24:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 398146
IP address blocks: 216.24.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:e1:42:b1:c5:0f:49:0c:05:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f420918-35e5-40cb-b0bd-59d73276fa1e
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=0a3cfb81-3a73-4e12-91da-dcd3578c15de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:83:0b:48:e5:cb:48:32:fc:cb:d6:18:7f:
a0:5e:5e:d6:4f:8a:d4:7d:21:81:36:3c:fb:da:21:
a7:99:9a:e0:b3:ed:f0:b5:73:33:cc:6d:0c:6a:77:
5d:c8:03:d3:08:45:7f:e0:33:cc:96:19:48:fe:76:
04:82:ba:0c:72:01:ec:d8:ff:5e:a8:73:1c:3e:d9:
cb:1b:8a:b5:1c:8e:e5:51:0b:d6:82:87:41:f6:76:
a1:f2:d1:2c:ad:6a:fd:e4:9e:97:1f:37:fc:68:2d:
09:2f:cb:00:6b:fc:e5:29:e1:5f:af:60:e4:c4:3a:
48:fd:a7:9a:02:7f:21:66:80:db:bd:44:56:ed:97:
c5:ff:93:75:39:68:5d:41:75:42:75:6a:e9:8d:5f:
81:fe:72:8a:0f:f9:4f:b0:3b:8d:a4:07:c6:ef:4d:
6c:e1:ea:4f:d5:53:3d:1d:1e:4d:7b:c9:c8:a6:4e:
08:84:fc:a9:13:09:c0:f2:e1:a0:18:f6:84:72:e6:
da:88:24:90:9b:96:14:b7:c8:4b:8e:1a:d1:ae:25:
65:12:7b:42:c7:8b:ef:aa:18:99:fa:20:6b:15:a4:
16:ac:79:31:56:dd:4c:a3:92:38:7d:f7:65:02:59:
1f:94:29:e7:0f:52:36:c8:f7:bf:32:2f:96:82:b7:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:AC:BB:40:5C:A2:B7:BC:6A:3D:33:2C:1D:FF:E0:F2:D6:7C:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/fa1c6b6a-b00d-3519-8d4f-3e24681f6178.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e/0f420918-35e5-40cb-b0bd-59d73276fa1e.crl
X509v3 Authority Key Identifier:
keyid:CE:14:8A:A5:94:96:10:E8:87:9B:1A:BC:34:C7:E1:CB:01:F3:24:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0f420918-35e5-40cb-b0bd-59d73276fa1e.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:d4:35:78:f1:9a:53:70:e9:92:5a:ae:fb:00:80:77:ef:50:
9e:77:f4:2d:f3:44:cc:b7:3b:e5:86:c9:df:fc:c2:90:59:93:
fb:d5:7a:2a:fd:e7:ac:41:3d:26:c3:f6:c8:34:b6:32:4e:ff:
c6:49:df:d1:b4:67:b5:c5:02:36:94:65:b3:c2:e6:86:c2:3e:
bb:76:7e:e4:01:00:98:80:8b:62:de:2c:1f:f9:15:89:fc:a2:
d1:4a:22:7d:74:e1:f1:23:c3:6b:0b:f4:02:ae:e8:4c:81:72:
7e:d1:74:7c:f7:cd:b9:09:53:ec:fc:de:75:f5:32:58:f0:aa:
25:92:47:b5:c2:3e:37:c9:fe:b7:6e:46:df:02:08:24:20:56:
96:32:c1:01:60:b2:cc:3c:63:6d:5c:c3:01:00:d9:80:2a:71:
bc:45:d9:d7:61:b5:56:1e:9b:d4:3e:55:9f:a2:59:07:ed:cc:
9d:cf:d8:d1:bc:aa:f3:ae:57:83:76:92:fa:28:98:4b:9d:6b:
fc:b2:ff:ae:25:23:4f:a9:5c:3b:89:33:17:15:31:0c:9f:3a:
30:e4:1d:af:2c:f1:1f:0c:07:9b:e7:46:62:a7:c4:0f:5b:49:
fa:68:5e:46:62:7e:b6:d2:ce:c2:b4:c1:6a:c2:fa:b7:27:54:
cc:bc:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:31 2025 by rpki-client