Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa
File: d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa (raw, json)
Hash identifier: htO1EbiJcnrDGmFYwGWvqwnIRjjQ+WP42h6zNHxttpI=
Subject key identifier: 9D:A7:AB:26:80:B7:81:3E:8A:1C:AD:F7:2F:F0:EC:FF:8E:31:DD:F5
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F43285848910C2D0662D9DEE3E322A680
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa
Signing time: Thu 16 Jan 2025 19:03:38 +0000
ROA not before: Thu 16 Jan 2025 19:03:38 +0000
ROA not after: Wed 16 Apr 2025 18:03:38 +0000
asID: 23473
IP address blocks: 216.171.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:0c:2d:06:62:d9:de:e3:e3:22:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jan 16 19:03:38 2025 GMT
Not After : Apr 16 18:03:38 2025 GMT
Subject: CN=35344cdd-b37d-40c2-a3ab-601729864cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:6c:e2:05:8f:d4:7c:53:39:e0:a6:54:ce:
67:ba:8b:05:96:5c:ed:89:f2:5c:02:12:44:cb:6a:
b4:86:bc:92:02:98:b3:a3:3f:b2:95:fc:f2:41:ee:
e0:cd:24:c1:31:ec:fd:cf:76:38:8b:3e:b1:4d:2d:
59:a1:98:ac:e4:23:b0:8d:78:24:86:cc:60:6b:7e:
de:28:f4:5b:16:74:3b:37:06:e7:b9:35:75:24:57:
49:76:ad:b6:52:ee:d4:51:dc:93:45:d3:a5:a8:bb:
72:55:be:14:1f:3e:a6:46:9b:b9:56:cc:c8:45:a7:
d9:bb:88:49:c0:8b:d2:0e:87:9b:ff:37:26:d4:05:
0d:ee:c2:b4:07:ff:43:7c:cb:68:c3:8d:51:52:4f:
bd:59:22:01:d0:c7:07:83:1f:a9:e3:26:c6:88:ac:
0b:eb:20:ac:10:47:81:c6:54:89:20:1b:d8:b0:28:
37:4e:8b:22:c3:79:19:f2:e7:cb:4f:64:dd:4d:19:
42:32:93:2a:85:33:33:f7:a9:1d:22:0d:c4:0a:db:
b6:43:24:bb:41:df:e7:1c:40:b9:03:da:f2:19:56:
27:84:7a:7e:0b:25:54:34:19:85:ce:ac:21:c8:9f:
ac:98:09:b3:5c:2d:ad:b3:1d:c5:7e:c5:f3:a8:a3:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:AB:26:80:B7:81:3E:8A:1C:AD:F7:2F:F0:EC:FF:8E:31:DD:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d1edd12e-ecf8-3c06-bf69-5d9918f38673.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:30:cb:98:8a:cd:2d:c7:ca:68:67:e1:bc:4d:90:94:b7:22:
1e:0c:18:bf:5d:20:7b:f0:fe:8e:78:15:27:52:46:17:98:53:
37:47:af:87:a4:df:f2:99:5d:97:d1:fb:94:d5:93:fe:31:b1:
9a:01:f4:e4:56:07:e8:a6:49:a4:07:e0:af:a7:cd:6b:b2:be:
fd:f9:6f:c6:d6:7c:d5:67:7a:80:d3:d9:20:53:69:3a:8f:09:
b6:e5:29:b2:46:aa:79:a8:3b:db:4a:60:75:a6:12:4e:1e:99:
21:19:14:1f:df:db:c8:a2:d8:58:ad:ea:d0:cb:b6:73:3a:db:
4c:5a:7e:ab:88:57:b7:f1:0f:22:55:c7:e8:0a:8a:33:35:39:
3b:12:54:4e:e9:d5:f6:e0:a0:23:02:60:dc:70:1d:84:6b:12:
df:44:fc:c0:78:8d:02:a9:e7:47:b5:10:4f:28:2f:ce:55:fe:
04:6d:5e:58:3a:0b:7e:14:d2:73:01:32:45:4f:6e:7e:8d:c4:
73:1a:de:4a:bd:50:b3:33:42:99:70:9a:71:49:fa:fd:24:b6:
ca:d5:64:f4:81:cb:70:b6:09:a5:ec:10:4e:cc:0b:e0:e5:98:
f7:cf:d4:7b:50:c9:fc:ce:f3:15:a8:53:d0:6b:ed:f2:55:82:
e5:83:17:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:42 2025 by rpki-client