Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa
File: d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa (raw, json)
Hash identifier: ro/KO837RNWotP3btEUN563YfEuvWUv6IXcqiQKNJJ8=
Subject key identifier: EC:E5:F9:10:C5:82:F6:CC:3F:CD:4F:E5:D2:5A:9F:85:87:9F:D9:C6
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F43285848CDA19622D7F7A7BE678CADC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa
Signing time: Fri 07 Feb 2025 11:53:11 +0000
ROA not before: Fri 07 Feb 2025 11:53:11 +0000
ROA not after: Thu 08 May 2025 10:53:11 +0000
asID: 23473
IP address blocks: 216.171.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:a1:96:22:d7:f7:a7:be:67:8c:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Feb 7 11:53:11 2025 GMT
Not After : May 8 10:53:11 2025 GMT
Subject: CN=68c8b867-8380-4cfe-b585-03ef8c28e061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2e:33:09:2e:1f:04:93:94:3b:c2:ad:34:01:
64:99:49:4f:e0:0d:b2:16:c7:20:43:1f:fe:aa:50:
9e:87:14:76:16:9e:c2:f0:98:5d:95:13:cf:f4:6c:
e5:86:dd:bd:cf:5a:73:86:ff:08:b1:f6:23:da:8d:
30:80:6d:ba:f6:8e:c2:66:fc:5d:31:8c:10:94:8d:
d6:8b:18:e6:e5:e3:96:48:28:1d:a9:97:98:81:94:
c8:95:81:ce:3d:82:62:cb:c6:c7:c0:0d:b9:5f:28:
2c:e8:f5:70:d9:4c:a2:56:04:72:a4:81:47:3e:d0:
ba:e2:3b:f3:be:63:68:b4:3f:e5:c1:16:d1:b5:6b:
d7:2b:99:fa:e4:71:8b:9d:e4:ef:c3:18:74:2e:8a:
58:d1:19:d7:56:d6:72:de:f7:d6:ee:3d:8c:0c:ae:
1c:10:7f:36:59:0e:6e:d3:a9:ca:9a:ba:d4:ab:f6:
c9:f0:d4:f0:b5:a6:6d:87:b2:d9:03:21:6b:d9:bb:
a3:1a:a1:12:e3:b8:bb:b2:ed:52:d3:db:d2:b8:5f:
7c:4b:2d:ff:d7:c1:bf:b7:71:00:8c:f9:2b:2b:97:
15:17:ab:30:c0:56:05:59:0a:17:93:32:90:9d:dc:
17:ce:03:25:26:f9:3c:35:07:5a:6b:d7:ff:16:25:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:F9:10:C5:82:F6:CC:3F:CD:4F:E5:D2:5A:9F:85:87:9F:D9:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d9a36c2e-ec07-3c58-a7c6-76e1675ee80b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:d4:d4:54:5e:ba:11:00:5f:d8:53:60:3f:46:6f:82:1a:a1:
96:3b:f7:9a:10:b0:4b:f2:fc:7e:a5:dc:60:76:5b:03:e4:3e:
9b:de:78:77:96:d3:61:d5:2d:37:43:31:33:15:eb:bb:49:b7:
2d:20:e1:ec:b9:94:0c:79:cb:f6:97:6a:c7:70:c5:7c:76:ed:
a9:0f:9f:43:83:80:f7:a4:c3:fd:a7:85:2f:77:1f:c9:13:cd:
b4:58:a6:4c:0f:a6:61:d9:2e:a6:09:0a:0f:2e:09:cb:05:30:
f3:aa:fc:e5:82:2b:aa:d9:c1:0e:d4:39:f3:4f:0a:5b:21:53:
9d:30:18:74:64:81:22:10:89:9b:59:70:19:6a:89:39:ca:68:
6d:c6:cd:54:93:2a:eb:1e:94:fd:c3:74:2c:68:c4:39:ed:70:
6e:67:c7:9c:ee:d1:9b:b6:63:42:b4:d2:9f:cf:7e:20:55:e8:
dd:3e:2e:96:df:f8:ef:11:16:b5:4c:1f:5b:db:6f:02:dd:2c:
3f:58:f1:27:d9:16:d7:6c:88:22:7a:0b:09:43:b5:e9:e8:7d:
3d:f7:c2:54:5c:69:cb:5d:8e:4c:d5:38:df:b8:2d:51:59:8e:
bf:f1:5e:53:1a:4e:47:e7:ae:54:ac:55:bb:ad:5e:a3:dd:10:
96:1e:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:05:00 2025 by rpki-client