Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
File: 1b166864-6f5a-3661-9e33-e8fbcebda55e.roa (raw, json)
Hash identifier: 0VhAO0HViqok37lqmsGo0MfYVzFyPrDwU7GkB/LQBds=
Subject key identifier: 2E:33:9F:30:B7:34:FB:B8:51:4F:26:24:FD:EE:4E:70:70:B7:EB:D0
Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial: 010D0C9F43285848E9CBE9C8F40854985F44BF40
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 62533
IP address blocks: 216.68.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e9:c8:f4:08:54:98:5f:44:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=4f4aec7f-03d7-4d79-bbb3-3fa1d22a6c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:52:e2:27:2b:d7:64:f6:0d:9e:c7:f1:30:
db:a8:d2:a6:7a:ad:bc:38:db:6c:17:de:51:dd:fd:
c7:05:c0:e2:06:0e:a0:64:b2:2a:df:c2:9c:f9:0b:
ad:80:72:c9:ff:ca:47:6d:c4:0d:f0:68:b9:6c:97:
9a:e2:01:a6:72:fb:09:af:a7:b8:e7:66:13:89:98:
0b:31:6f:4f:c0:e4:1c:3e:29:bc:a9:28:62:c5:55:
bd:27:f7:42:2a:23:9f:ee:cf:79:ab:f6:e6:72:eb:
4c:21:34:92:9f:fb:e9:5f:bb:73:32:5f:db:4f:1d:
7f:4c:14:92:36:cd:2f:25:94:f4:c7:fb:f2:8f:81:
b7:37:c9:8f:d4:55:4f:86:e7:4d:a1:41:58:a9:fc:
33:34:df:4d:bb:65:d1:dd:6c:55:75:f0:02:25:ca:
ba:8b:31:83:18:55:36:b0:d3:a1:4f:d3:a8:fe:59:
00:ac:5a:ef:d3:74:a2:db:69:7d:8f:63:88:17:6b:
10:7c:51:6a:89:e3:cc:54:c8:28:2d:e5:f7:9e:88:
f3:b9:3c:e5:67:eb:95:49:72:51:60:55:1d:51:c3:
84:e9:08:a4:9c:55:8f:00:c2:5b:1d:a4:36:f7:64:
7c:d6:fa:10:25:42:46:67:fa:fd:c0:6a:cb:9f:9f:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:33:9F:30:B7:34:FB:B8:51:4F:26:24:FD:EE:4E:70:70:B7:EB:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
X509v3 Authority Key Identifier:
keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
sbgp-ipAddrBlock: critical
IPv4:
216.68.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:af:fa:e1:ba:96:d4:79:a7:88:43:da:79:36:43:bc:be:fd:
18:81:33:61:3f:76:ed:8e:44:43:8d:55:26:25:bc:cb:e7:07:
02:2b:d1:b0:d7:d4:d7:3a:a4:58:72:4c:6a:13:85:dc:70:45:
af:50:2f:c9:35:f1:20:02:16:ab:18:26:14:e5:25:b8:6c:fc:
a8:cb:47:05:4e:76:c8:03:48:06:bf:22:5b:f0:8a:10:16:19:
31:60:6f:00:f7:93:4d:52:49:d5:84:f9:c7:d7:83:e0:7d:51:
21:80:b9:75:88:70:f4:cf:81:8d:05:ec:1f:1f:3a:66:30:0e:
2b:f4:7c:01:fe:1b:85:14:d5:1e:88:e1:be:c2:34:5e:25:0b:
8d:62:0e:54:12:10:7c:a1:f5:7d:46:9b:55:97:fa:d0:61:38:
49:98:2d:bd:ef:69:fc:78:2e:34:03:26:cd:52:fa:e5:21:87:
2a:50:87:55:85:73:4a:1b:a0:94:1f:00:82:68:5f:8b:7e:17:
4a:a3:88:ea:c0:30:7e:77:fe:4f:6d:ac:2f:44:b0:ed:0b:14:
de:0c:68:6a:fa:14:cd:5a:e5:85:fb:4a:3b:20:5b:ac:a0:7d:
9b:cd:6e:57:8a:bc:58:7b:6f:8f:2b:0c:2f:67:bb:a6:3f:aa:
db:76:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:46:00 2025 by rpki-client