Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa
File: 6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa (raw, json)
Hash identifier: K9pRmycrm7VskbXKsrbnTN+qUOVA4ybmm/w8zqWDWso=
Subject key identifier: 5C:C2:4B:2B:A8:3B:6A:1B:DB:7C:F5:CE:D4:82:38:24:02:4B:9E:78
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848CC7B9C77C5AC79261643D300
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 216.137.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:9c:77:c5:ac:79:26:16:43:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=9574bf08-b171-441c-be79-9287aeedb5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:15:0f:5c:14:1a:00:8e:f0:43:09:8e:0f:
f9:86:67:e2:d7:ba:7b:c0:ff:bd:44:a6:79:7c:49:
25:7c:59:a0:57:0f:f4:9c:d9:d3:49:7a:5e:5f:0e:
b8:15:d3:2b:97:60:ec:ba:43:ab:19:3c:2c:96:e0:
05:d5:35:47:71:63:40:be:4b:69:31:80:5b:51:66:
5f:4e:36:b9:d7:7a:19:b0:65:ca:c8:88:34:4e:4f:
ee:d4:da:11:dd:a1:91:3b:8b:1c:e8:91:f1:5e:4e:
61:78:34:bc:fa:08:ea:16:ee:e7:55:bd:9f:1d:85:
03:59:33:65:69:39:2d:01:63:e1:e9:46:08:0b:fc:
df:0f:ac:16:8a:9a:2c:82:4a:df:5b:bb:69:a2:b8:
55:9a:92:70:66:ba:a7:d7:ca:1b:4f:e5:12:99:e5:
67:e9:4a:a3:01:d7:e8:fa:ff:3b:5a:1f:af:78:2d:
6a:a0:02:aa:b2:20:19:bc:dd:ad:50:a3:4b:cd:1b:
98:4b:3a:57:92:5e:7e:c8:b6:76:ba:77:7d:5f:9a:
32:f6:9a:ff:7d:a8:ea:fa:a2:e9:b1:0b:d1:91:54:
4a:fc:30:f6:e2:a5:dc:4a:fb:20:eb:98:9a:dc:34:
48:86:93:0d:ce:93:99:9b:30:93:53:11:73:0e:ef:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:4B:2B:A8:3B:6A:1B:DB:7C:F5:CE:D4:82:38:24:02:4B:9E:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6de39cfb-2730-3e9f-9736-3a6cac1071fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:82:22:91:34:de:39:de:1e:25:17:ec:e7:d1:65:24:84:65:
ea:58:83:d1:00:20:e2:78:d8:c4:2b:a8:c4:1a:da:3e:71:b6:
7f:43:8e:b5:46:1b:11:14:f2:36:90:33:91:43:b7:7c:2e:47:
cc:72:09:c9:bf:ef:aa:94:62:ee:71:87:b1:52:7b:da:37:f3:
c9:38:80:8a:7b:2e:39:e8:02:72:fb:44:3d:d8:01:73:66:b2:
b5:d6:f1:ea:79:6e:99:5e:69:01:11:d0:90:0c:31:6f:00:04:
8e:83:dc:74:81:99:04:7f:9f:11:44:e3:12:b8:f7:fb:0c:21:
d0:2d:98:ca:20:04:bf:26:78:19:46:a4:89:79:16:a7:22:9e:
57:92:ad:ad:44:fe:32:35:82:31:51:b9:94:d4:bc:d2:e1:39:
d3:73:a0:c4:c9:68:cf:79:e1:b6:40:d2:6b:6a:68:58:81:4b:
95:06:e3:5e:18:95:99:2e:b8:51:3b:92:8b:23:8e:86:f3:73:
bc:33:bd:6d:51:da:fa:10:56:62:4d:9a:91:0e:cc:88:77:13:
f7:c1:c5:fa:14:de:5c:f1:83:2c:7f:00:2f:e4:57:c2:87:ec:
e9:c4:88:ff:a4:4c:26:88:0a:f4:d0:ca:01:2a:48:15:9d:39:
ce:d9:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:28 2025 by rpki-client