Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa
File: 6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa (raw, json)
Hash identifier: bVl0pSt1cmnc6aiB66Mp4XQdiuj5Q5pLwmvPJXDnCBg=
Subject key identifier: 57:47:56:8C:78:28:E9:75:CD:BC:B7:B3:46:44:61:F8:9A:50:CE:10
Certificate issuer: /CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Certificate serial: 010D0C9F432858488AE0A14F97DEF9D1A160EB80
Authority key identifier: 04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 137409
IP address blocks: 216.189.34.0/24 maxlen: 24
216.189.58.0/24 maxlen: 24
216.189.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a1:4f:97:de:f9:d1:a1:60:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbd1783-5272-4e33-b882-bdd928a5e339
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=9fd67bd8-d618-4c73-94c6-dbf4f46f798c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:a5:5d:f9:cc:87:80:6a:e8:5d:58:07:50:
80:43:35:b2:94:90:83:75:e6:ec:05:f9:93:43:ee:
e1:f6:d5:a1:b4:8c:2c:6a:8c:11:14:bf:69:b7:13:
43:c1:f4:1d:fc:95:ec:15:93:c7:91:16:b9:84:ab:
72:70:aa:11:ec:24:a4:d1:01:3d:cd:ad:0c:4f:5f:
15:f7:ef:73:62:b4:1a:a0:da:60:57:1e:c2:47:87:
ae:f7:5a:0d:c5:a8:ac:43:7c:4e:16:af:a9:3f:6f:
e5:cc:84:5d:a3:9b:49:cc:9b:34:b8:f4:99:da:68:
c0:f8:4f:cb:12:46:a8:a0:8a:be:75:98:31:97:86:
e8:6e:e5:8b:df:57:f2:9f:c9:7f:ea:c4:f0:93:04:
a9:83:4a:16:1e:c2:9d:bd:90:23:43:7f:f5:23:b0:
e3:4e:b3:5e:3e:f6:98:1b:4b:96:7a:99:2b:bc:57:
76:03:0e:dc:19:79:16:7e:8d:2a:11:7a:a5:fc:91:
68:51:af:4e:74:9d:d5:52:bc:b2:14:27:76:07:7a:
dd:86:f5:db:a0:71:1a:be:8b:dc:30:2f:c2:c6:73:
04:07:d9:e1:7e:a2:75:7f:56:bd:c3:e1:5e:60:eb:
1c:06:23:07:23:bc:96:46:80:ef:46:88:76:43:9c:
3b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:47:56:8C:78:28:E9:75:CD:BC:B7:B3:46:44:61:F8:9A:50:CE:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/6a1e9df8-956d-3d5d-9652-5c2c1bdd553a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339/4cbd1783-5272-4e33-b882-bdd928a5e339.crl
X509v3 Authority Key Identifier:
keyid:04:7C:80:53:0E:B8:46:12:A9:2C:71:B3:A8:DC:CA:6D:5A:DC:59:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4cbd1783-5272-4e33-b882-bdd928a5e339.cer
sbgp-ipAddrBlock: critical
IPv4:
216.189.34.0/24
216.189.58.0/24
216.189.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:cb:cf:64:d6:f4:59:2b:e7:a6:d9:66:77:f7:1c:4e:3f:0c:
a7:be:f8:b0:92:fc:73:ab:d1:d9:14:7f:53:25:61:8f:86:4b:
75:eb:70:d0:90:74:ef:7d:d3:01:92:1e:2e:a7:51:3e:a9:70:
04:53:0d:f8:34:eb:0a:df:43:d4:32:22:19:5d:ed:e9:07:9a:
16:ce:e2:17:59:d8:48:9e:6f:20:7b:b9:41:4f:ef:97:bd:86:
2f:20:c5:50:39:d8:14:aa:7f:f7:dd:10:fc:84:f4:f2:c9:d2:
e6:2a:4e:99:63:c9:15:d6:20:fc:78:cc:f7:6c:cd:a5:c9:1d:
87:3b:00:fe:dd:c3:d1:3f:d8:73:14:fb:bd:f7:3c:57:a8:59:
12:2b:90:94:5d:ab:b5:2b:52:dc:62:45:3c:df:33:4e:42:96:
44:87:2a:3d:55:29:91:cd:ea:33:12:0a:da:f8:99:db:e1:70:
14:1e:81:88:a1:a8:5a:38:ae:9c:02:12:45:57:8b:39:7b:e9:
55:5e:f0:7b:b4:f2:39:9d:b9:d8:8b:d9:ab:19:18:59:f7:d7:
42:31:e7:ad:cd:36:5c:d4:b4:d7:78:ae:e0:ac:0c:c0:a4:34:
a3:58:90:11:2d:e7:9d:a3:0f:d1:df:5d:c2:e5:21:9a:29:6a:
3c:6d:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:40 2025 by rpki-client