Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa
File: 3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa (raw, json)
Hash identifier: xnhoDfTT1PzhK2EF945sDjNCJROF9gQS5Vi4iSQk4Ic=
Subject key identifier: 0D:F1:34:49:8F:ED:94:7C:03:24:BA:CC:F7:E3:5C:7A:3A:F7:A9:9B
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F4328584913AC39482BE5F19782EDEF80
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 22925
IP address blocks: 216.59.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:39:48:2b:e5:f1:97:82:ed:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=cd6cfffb-a5f9-4b02-8743-d269277e2ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:1e:43:76:ae:40:1e:87:5c:1b:6c:68:c4:
21:21:3a:9b:e1:66:1c:c1:3d:41:0b:a0:3a:6b:62:
93:a1:4f:ef:ac:37:ce:24:30:16:1e:19:42:08:cc:
d1:ce:5e:a9:a7:fc:d1:e8:6e:24:b5:af:66:53:34:
8b:94:b7:46:fe:30:76:e4:77:b4:74:82:e6:3c:b9:
89:81:5b:30:dc:5e:fb:15:84:34:30:c0:90:37:00:
c1:60:d8:7f:b4:eb:49:29:e4:c4:30:2f:5d:d3:2e:
f6:ae:8b:41:58:51:c9:4a:27:2d:64:b7:18:51:8f:
1c:c1:05:4a:de:7a:9e:49:51:59:d1:2d:8f:10:3b:
e3:66:e2:ec:4f:e6:7e:f9:57:4b:fa:a4:4a:90:40:
46:77:56:4b:bb:45:d3:25:ea:71:61:15:46:54:2d:
ed:59:5b:88:78:84:4b:6e:93:e8:c1:21:ae:17:3c:
df:3e:b3:f7:37:47:7a:4f:0e:d7:d5:8f:a6:e4:11:
f6:d4:30:dd:fd:46:7e:c0:26:e6:aa:0f:82:7e:0b:
8c:29:10:69:c8:8a:3c:2b:9e:a0:13:9e:39:1d:55:
8b:d5:4b:25:56:6d:42:6a:31:80:4b:58:d9:03:e2:
13:2e:a8:ea:0e:88:95:ae:32:30:a8:21:a6:cf:e0:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F1:34:49:8F:ED:94:7C:03:24:BA:CC:F7:E3:5C:7A:3A:F7:A9:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.59.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:dc:c8:96:5b:6a:5a:5f:09:d2:d2:ba:41:09:df:b2:70:9e:
d2:4e:85:6d:c5:a6:d5:fb:e4:bc:72:7f:e0:4d:98:83:60:a9:
a2:85:0a:77:1d:cb:f0:fa:07:08:e1:dc:3c:97:47:ec:4e:2f:
58:f3:9b:fd:e8:fd:83:a9:36:eb:76:60:5a:77:e2:b2:1a:9e:
75:40:a2:96:03:68:2f:0c:3f:13:3c:96:a9:b8:ee:28:f5:a8:
f1:db:48:5c:36:01:40:be:f4:4b:81:b6:de:d6:31:60:20:b3:
f1:b3:e3:e3:6b:d4:01:b9:0f:e2:ce:f7:4f:12:1b:ee:01:a7:
e3:d8:eb:59:70:da:62:b1:22:fd:29:95:6e:e3:ee:d5:dc:3e:
31:80:76:3d:1b:0b:d5:25:b6:7b:c6:8b:af:65:ab:2c:da:66:
d0:d8:dd:30:61:b9:0d:32:49:b6:df:cd:e1:9b:b1:e4:6b:46:
34:b9:3e:d2:af:d7:a8:3e:dc:2d:2d:5f:86:02:c7:c6:01:06:
c7:9c:4b:ef:9e:50:78:ad:c0:51:ba:6d:84:0b:b4:0f:9f:f5:
99:26:aa:d0:77:57:b0:33:ac:74:ed:44:b2:65:c9:16:d4:ad:
7e:ac:42:22:a9:da:59:08:08:4d:e8:ed:6a:a4:66:12:86:f4:
8c:52:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:46:02 2025 by rpki-client