Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
File: fb067586-180b-31bb-9e56-5603dfecf409.roa (raw, json)
Hash identifier: yk2d4GDNxRnOW3E1+OAPukZp9EQxPyUlcxgPl5Ns2ck=
Subject key identifier: 10:E4:92:74:46:E3:23:7C:DF:F2:A1:1D:3A:51:AA:89:93:F1:21:B6
Certificate issuer: /CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
Certificate serial: 010D0C9F43285848CF4638F18489EA6C84898600
Authority key identifier: 10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
Signing time: Sat 08 Feb 2025 02:00:38 +0000
ROA not before: Sat 08 Feb 2025 02:00:38 +0000
ROA not after: Fri 09 May 2025 01:00:38 +0000
asID: 401408
IP address blocks: 216.181.130.0/24 maxlen: 24
2602:f7c8::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cf:46:38:f1:84:89:ea:6c:84:89:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
Validity
Not Before: Feb 8 02:00:38 2025 GMT
Not After : May 9 01:00:38 2025 GMT
Subject: CN=578bf7af-155b-4a8f-8a87-8120a1a8aa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:ef:85:3b:8f:c7:c4:60:c4:9b:2a:90:b3:
b1:4a:aa:d3:27:49:00:1e:0a:5a:0b:ce:dd:d1:57:
2f:85:97:a5:bc:87:e1:be:96:0a:07:f3:7a:d0:e0:
b4:a1:90:18:a6:52:31:ad:38:3d:2e:89:8b:cf:bb:
c5:aa:8a:3b:7e:47:62:e4:ca:d7:b6:6d:39:03:c3:
02:43:87:88:84:a2:4a:ac:ee:b9:92:3b:91:75:34:
3e:21:fd:af:dd:c1:d9:7e:16:94:f2:38:a9:d4:31:
0d:78:43:73:f9:ce:2c:d4:bd:51:80:86:2a:27:7a:
07:fc:5a:f0:59:a3:3c:43:c5:e9:ca:7f:be:91:13:
a2:2f:25:4d:74:02:f1:33:da:9f:a5:2d:33:62:ad:
d7:c5:e7:57:77:cd:7f:5b:97:eb:ee:63:20:b9:3f:
1d:ea:57:72:26:7e:ff:6b:10:7c:6f:be:bb:8f:4b:
d2:eb:18:c5:9d:22:ac:77:9f:02:90:3b:b7:5d:25:
8f:80:6d:08:ba:da:cf:0a:8d:2b:54:74:c4:9b:12:
01:c5:7c:eb:10:84:2c:4d:06:e5:90:de:78:9a:73:
83:35:5a:37:92:16:44:1c:1a:bf:81:55:e5:b4:5d:
a0:95:21:21:d3:71:23:25:b2:5d:ec:e6:a9:df:49:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:92:74:46:E3:23:7C:DF:F2:A1:1D:3A:51:AA:89:93:F1:21:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl
X509v3 Authority Key Identifier:
keyid:10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
sbgp-ipAddrBlock: critical
IPv4:
216.181.130.0/24
IPv6:
2602:f7c8::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:33:73:e6:16:af:ce:02:9a:21:5b:17:16:f1:a7:38:02:ee:
60:8e:c8:0c:93:c7:3a:82:ea:87:91:06:7a:11:88:86:05:94:
01:38:83:5a:3e:41:5b:87:6a:5a:aa:1e:f0:c0:88:45:64:57:
89:d1:d5:2d:28:bb:73:a2:bd:bd:f4:47:8f:d8:1a:0e:21:34:
12:9c:eb:ea:e3:12:e7:de:aa:2e:ee:a2:b8:98:c6:1f:a4:d7:
ce:4f:93:ae:fc:5f:ef:cb:99:9f:5c:7a:f1:74:6c:e6:a6:50:
cf:6a:b1:a2:0a:69:71:7d:7e:70:98:94:1c:39:ed:cf:55:87:
7b:68:c5:c0:bc:7a:76:2d:e9:01:f5:7b:39:82:04:c0:ed:da:
e7:b0:5a:4f:49:7d:50:38:59:4d:9d:97:76:b4:b1:ed:42:71:
9d:ec:01:0f:5a:9c:53:ca:90:1c:9a:2f:b1:f5:5e:c6:5d:49:
02:c7:d1:66:54:66:36:cb:d7:61:ba:e7:8c:c1:f4:68:d1:c5:
8a:0f:70:7d:fb:75:9c:67:1c:b8:81:94:4a:82:bc:81:32:0a:
54:2c:5b:dd:b6:5c:ce:0c:61:d7:93:af:ca:ed:16:b9:09:ce:
07:5e:f7:bd:df:8d:a4:04:c3:3c:c9:10:a1:10:f5:51:6f:31:
d8:5f:d3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:31 2025 by rpki-client