Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/95423c2b-0cd4-3073-9ac2-e6ae316928a1.roa
File: 95423c2b-0cd4-3073-9ac2-e6ae316928a1.roa (raw, json)
Hash identifier: oX6yfr16rwj0E6WW96T3g8FAxmjfnbyI3OKQWLoto7I=
Subject key identifier: 5B:4A:7C:74:28:8D:2C:A0:3E:86:A6:CD:5D:CE:FC:36:E5:B8:50:50
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F43285849F9DFDBB8F9188EF9DB8EB880
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/95423c2b-0cd4-3073-9ac2-e6ae316928a1.roa
Signing time: Mon 26 May 2025 01:00:50 +0000
ROA not before: Mon 26 May 2025 01:00:50 +0000
ROA not after: Sun 24 Aug 2025 01:00:50 +0000
asID: 21570
IP address blocks: 216.191.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:f9:df:db:b8:f9:18:8e:f9:db:8e:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: May 26 01:00:50 2025 GMT
Not After : Aug 24 01:00:50 2025 GMT
Subject: CN=b36dbc4b-0dd5-45ab-91d7-6e47a26ca42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:ed:b6:c9:23:56:d7:90:b6:11:47:f9:db:
e1:51:7d:45:e8:a2:4c:49:f2:aa:90:45:da:d0:df:
84:ec:f2:92:11:78:bb:fc:9a:66:fa:3a:c8:50:01:
b3:2e:38:cd:12:36:50:f6:38:4a:e3:71:bd:ef:b7:
d8:d8:6e:f8:d5:a6:59:6c:b7:cd:ad:37:f0:2d:94:
bb:89:9e:b0:f2:4f:59:06:52:9f:11:be:c2:f0:20:
16:1f:bd:96:b0:a1:b4:48:ee:94:a5:5c:dd:b8:44:
fb:0e:78:72:1a:f0:d4:cb:af:fd:dd:45:9c:5d:ee:
22:e2:5d:e6:ca:e4:00:2c:29:e9:7e:3f:43:1d:1e:
c7:2b:9c:14:52:ea:28:40:1f:71:72:f6:fe:06:26:
2c:19:35:16:7b:29:b1:98:1a:9f:88:93:cb:e0:b5:
ac:56:1e:cc:19:57:c8:b0:bf:5c:d0:d3:a9:d2:af:
bd:a6:8a:7a:10:52:cb:66:72:92:a1:28:18:f3:3d:
98:ab:44:0b:56:15:b7:1f:79:3a:f9:b4:16:cc:12:
05:5c:0c:aa:dc:6f:04:9e:45:ba:0a:3e:71:af:f6:
87:c1:75:d1:c0:fe:12:20:25:fd:bf:94:b6:a1:2e:
e5:02:1f:f0:44:ee:f5:3c:82:97:58:72:7e:80:c0:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:7C:74:28:8D:2C:A0:3E:86:A6:CD:5D:CE:FC:36:E5:B8:50:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/95423c2b-0cd4-3073-9ac2-e6ae316928a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
216.191.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:57:32:b0:18:e1:62:5a:47:86:89:f7:85:3e:8b:f5:62:60:
1e:08:ae:b8:30:4a:17:cb:09:11:be:68:7f:37:90:c7:38:f7:
5c:04:2c:e2:88:1e:02:1f:75:de:73:5b:e2:bb:53:0d:04:67:
bc:e0:1c:7f:21:41:55:fc:dc:12:eb:26:79:6f:5a:3a:af:ca:
b6:9d:37:17:9e:1f:30:0f:80:a6:e2:f2:ab:bd:22:c8:98:e3:
f6:c7:75:99:58:2b:7a:98:5f:58:a9:f1:77:35:12:f2:80:c4:
d6:4f:14:cf:2e:62:60:df:34:fa:06:08:e8:78:78:17:df:22:
9a:58:68:9e:14:60:d1:d9:36:0f:c2:b4:de:d5:84:6b:a9:3b:
84:d2:dc:f2:9f:b2:a9:ba:dd:39:8a:32:89:57:ee:9e:36:82:
64:8c:8f:37:06:4e:dd:71:13:95:9d:b7:c3:b7:e5:00:ba:0d:
0f:31:be:27:a5:cf:16:6e:04:5c:60:dd:21:4f:db:b0:54:14:
50:90:36:78:fb:a7:bf:a0:dd:33:70:38:0a:0d:58:3b:77:8a:
1c:76:7b:09:7d:15:7e:f8:27:8c:b9:d3:c0:fe:27:1c:8c:cd:
50:9a:b4:17:1d:ce:ff:91:ed:be:b8:11:2e:e4:4e:c1:07:90:
cc:4a:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 07:40:41 2025 by rpki-client