Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa
File: 21c05a3b-e062-3862-8df9-24b08a6621aa.roa (raw, json)
Hash identifier: XWlCIsrDhiq4QNcwS4yXT8UXBmYizk418e89RZfnOUE=
Subject key identifier: 6E:8C:96:61:06:68:67:45:DC:89:40:B2:04:FD:DD:38:BE:C3:FA:D6
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848BE863294358B9B91551BAC00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 216.152.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:32:94:35:8b:9b:91:55:1b:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=fd12fe8e-a7fa-4a7b-a073-68d7f5644e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:a0:f8:d0:2e:a5:d0:d9:4e:4b:f1:3f:aa:
5f:81:1e:52:86:c7:fd:a2:55:8f:4b:ef:97:0a:af:
24:9e:2d:8b:3d:0c:1b:8d:d2:bb:5d:1c:8a:43:10:
7e:d3:6e:09:34:d2:32:12:a5:7d:18:2b:30:08:56:
bf:21:2f:16:82:ff:ab:e5:b0:9b:00:0b:ad:8d:03:
a2:5d:f1:e6:f7:19:fc:aa:ee:47:6f:cf:4a:3d:b8:
f6:2f:6c:4e:2e:dc:bb:35:69:6c:53:ac:30:c0:4c:
55:cd:3d:62:58:78:fb:d9:41:a0:b7:f9:49:03:45:
14:b4:3e:75:82:de:ba:10:86:a9:37:d5:04:42:ef:
45:1e:61:b1:e8:d2:37:22:4c:97:b0:ef:c4:50:b3:
0c:66:bc:c8:c7:8a:dd:33:9a:aa:a4:8e:fd:35:b6:
9c:6d:ce:78:f8:2b:26:1b:0f:82:a9:79:ef:af:7f:
63:e5:c8:0d:1c:0b:ca:10:0f:59:c5:2c:45:0c:dc:
9a:59:9e:02:3d:02:e1:e9:6f:07:a7:fe:68:cf:db:
3b:f7:de:54:9e:fb:e5:7b:18:88:e7:9c:04:99:09:
e2:0e:0b:ad:28:c4:38:f5:d7:d2:5e:cb:ce:cf:48:
af:fe:c4:95:10:1a:c4:8e:01:0a:0b:44:39:ba:bd:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8C:96:61:06:68:67:45:DC:89:40:B2:04:FD:DD:38:BE:C3:FA:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.152.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:1a:2c:ef:6f:ae:26:31:12:99:24:e8:22:d9:17:4c:b3:06:
3d:01:e6:49:bc:c5:02:e0:c8:88:b7:9f:d5:63:d7:c7:03:3c:
6e:72:a8:37:d6:18:4d:da:31:31:1d:1d:ca:e5:a8:e7:c9:4b:
29:d3:8e:7d:a9:30:af:33:af:58:af:89:06:0a:10:2e:a9:bc:
8f:f9:6e:af:c4:74:8a:b3:65:a3:14:39:ef:1f:cc:e2:17:54:
df:5a:b4:f7:2a:77:86:d4:48:05:5e:7c:1c:0e:74:14:10:54:
40:e7:e0:18:51:d3:e6:62:13:d8:57:a0:2f:03:48:f1:e8:5b:
5c:dd:b4:6a:44:b7:9d:29:7f:50:16:5c:0b:74:a9:20:5d:c5:
75:a5:c0:64:46:05:a8:0b:3c:81:1e:21:8d:ae:a0:f8:b6:ac:
b2:97:25:d6:61:d8:41:6f:8a:4b:a5:5d:85:aa:02:01:20:9a:
7f:18:34:5d:d3:5e:8c:e0:82:b5:37:10:c2:a1:ae:0a:0e:58:
3f:c2:fd:b5:55:f1:b3:23:f9:f3:d1:b6:15:c8:6e:74:3b:81:
62:48:99:17:08:07:35:7a:1f:cd:fc:5e:66:36:2b:89:38:a8:
eb:69:8d:0f:12:47:45:3a:09:f7:f8:2c:d6:05:e0:c8:e2:31:
bd:81:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:34 2025 by rpki-client