Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25a977fe-29ef-3042-9e24-ed4e07d83c91.roa
File: 25a977fe-29ef-3042-9e24-ed4e07d83c91.roa (raw, json)
Hash identifier: XDnCNlrRFqiScufoeu43TCddIgUmrkA32ppin5OTat4=
Subject key identifier: EB:AC:A6:9B:0C:41:FA:71:6E:CF:A4:A4:BF:32:F1:34:1F:71:C1:49
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F43285849393E9569C34EA0FF9BBE1D00
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25a977fe-29ef-3042-9e24-ed4e07d83c91.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 19786
IP address blocks: 216.224.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:95:69:c3:4e:a0:ff:9b:be:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=4df097df-5f43-452c-980d-c2769512d1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:18:a7:52:be:01:24:14:7d:c3:23:76:86:
15:e5:4a:f1:80:4d:f2:13:b5:bd:70:d8:3e:67:6e:
db:69:ec:4e:6b:71:50:e6:29:06:12:09:01:ac:77:
fe:0e:89:a2:72:59:6e:c8:a0:42:3a:57:9c:a5:c2:
bd:9a:ee:11:a1:e6:ee:31:d3:66:ea:cd:b3:18:17:
99:bb:3e:8e:42:29:bb:34:b9:a4:16:a3:16:20:fe:
a1:07:a1:42:31:50:24:a3:af:b7:9a:f8:cb:0f:20:
6b:81:1a:97:ab:59:8f:20:3a:be:9c:3a:df:9b:e3:
26:7f:9c:bf:44:37:c6:55:c4:26:dc:1b:33:44:63:
39:e0:04:cf:53:e8:d3:0a:51:70:c2:a8:96:03:a4:
c5:e5:d1:62:2f:42:e8:ba:ba:10:8e:a7:4e:a5:2e:
ab:bc:2d:49:73:42:03:bd:80:55:f6:bb:44:89:4b:
77:0e:0b:b4:cf:4a:41:2e:67:47:d6:4f:4f:15:cf:
fc:73:1b:47:b7:ce:0d:4c:05:b9:c2:26:f4:b1:9f:
2c:c7:00:31:77:57:58:2a:10:c0:3a:27:e3:8e:95:
ba:16:6d:ee:a9:28:fe:e5:40:82:db:48:cf:d4:a6:
42:4e:b7:59:00:3f:f4:8b:f0:4c:a5:bb:74:50:67:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AC:A6:9B:0C:41:FA:71:6E:CF:A4:A4:BF:32:F1:34:1F:71:C1:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/25a977fe-29ef-3042-9e24-ed4e07d83c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.224.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:5a:33:86:34:06:c7:4e:49:f5:8b:4c:39:13:97:57:09:33:
0e:77:97:09:1f:ca:c1:fd:d7:d2:48:3a:ff:d4:1f:4a:27:79:
52:7a:66:46:43:1d:66:ad:48:8d:b2:e7:d5:85:3c:b5:06:f3:
95:a4:b3:97:d5:87:51:c8:5f:51:66:48:3f:00:90:6c:80:f0:
32:b4:cf:0b:ef:0e:af:c4:ec:e3:4d:42:46:cc:5b:de:e5:fc:
30:a2:34:f6:bd:a2:3f:ca:4c:eb:ed:bc:fa:99:4d:7b:3b:0a:
6f:a0:db:12:a6:6d:f0:40:8d:b4:c4:d7:83:aa:ad:90:6d:3c:
14:6f:c1:a5:7a:6e:2a:e9:f0:ef:df:39:26:58:6e:df:2b:75:
11:59:01:00:1b:42:b9:b6:80:b8:f5:8c:dd:0d:65:af:d2:a4:
3d:f1:d7:a3:49:01:a2:18:5c:25:14:4c:e2:f9:68:7a:bf:13:
49:5e:6c:9e:82:e0:2d:9e:4d:36:69:e8:09:7f:cd:f3:e8:fe:
37:9b:d9:b5:c5:37:4e:b7:b6:82:6f:ad:7c:ff:45:ee:53:c4:
9c:c9:46:89:ae:10:e8:18:53:31:34:ca:56:c8:e0:6a:7e:7d:
39:34:9f:71:9e:ea:a6:f1:a9:7f:de:2a:1f:bf:b2:13:27:f7:
56:bf:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:16 2025 by rpki-client