Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b168ffdf-f7ea-3494-af80-713656ce5e8d.roa
File: b168ffdf-f7ea-3494-af80-713656ce5e8d.roa (raw, json)
Hash identifier: b3x1Dp+Xf3qQcUHJ0Jy4IxiXSsa0DU3Aqk+bwloCreA=
Subject key identifier: 8F:CA:80:76:A5:46:8E:C0:64:F3:19:A3:51:85:29:2B:7E:9A:C7:19
Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial: 010D0C9F43285849350EA32C37511575214F4A10
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b168ffdf-f7ea-3494-af80-713656ce5e8d.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 399575
IP address blocks: 216.205.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a3:2c:37:51:15:75:21:4f:4a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=54aa3778-510a-4693-ba75-06b9add09dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9b:1a:8e:79:b3:bf:83:13:ff:a6:33:b3:a8:
fd:79:b2:5d:f7:0e:33:a7:c7:c3:6c:57:0b:27:5b:
20:16:ba:63:42:0b:bd:2b:21:5e:7c:5e:06:ef:05:
c2:e6:ea:ca:92:61:13:02:f1:8d:74:95:cd:62:5e:
0d:2f:c8:5d:a6:3e:66:f0:ba:25:54:5a:3d:89:9f:
d3:a0:84:e5:13:37:83:1c:c3:dd:2c:9e:ba:ae:01:
f5:b6:d0:3b:74:03:a8:59:bc:f6:34:ab:9c:b2:3d:
68:fe:54:0c:a5:73:d9:c4:52:d1:f4:59:cd:6c:32:
e6:ad:48:72:4f:7e:83:a6:b6:33:b6:55:68:8e:61:
f0:f5:69:b4:e8:db:26:aa:5b:2a:d4:c3:7f:8f:48:
37:9b:5c:ec:d6:1b:99:72:ec:c0:6f:4d:b1:28:ae:
08:49:8c:2e:29:23:3d:6a:ef:74:b8:0f:cd:74:97:
55:55:3f:13:99:15:77:f1:f6:da:45:4c:27:0f:5a:
8b:91:80:86:df:91:41:98:42:76:04:c1:ae:91:ae:
a6:1e:8c:7c:d1:28:25:b6:ee:da:96:30:7a:62:62:
d9:70:b3:67:00:84:c5:94:13:a3:7a:ea:6a:d7:c9:
e1:d7:be:1f:1d:8b:18:dd:2c:b1:15:5a:11:f3:93:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CA:80:76:A5:46:8E:C0:64:F3:19:A3:51:85:29:2B:7E:9A:C7:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b168ffdf-f7ea-3494-af80-713656ce5e8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
X509v3 Authority Key Identifier:
keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
sbgp-ipAddrBlock: critical
IPv4:
216.205.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:e1:f5:f5:5c:fa:56:59:65:dc:37:40:eb:9f:59:47:79:dc:
83:27:7e:a9:d0:ce:93:d0:dd:53:ae:85:af:82:2e:44:78:1c:
6d:fb:c9:eb:56:80:15:c9:4b:b2:c9:38:46:d5:b5:89:fd:0d:
dc:9b:e6:3f:a1:81:82:84:9d:82:19:31:39:d5:4a:d2:99:a1:
ac:d9:0b:6e:86:62:40:65:0c:14:87:df:86:9d:60:e7:9a:43:
9e:1e:47:12:0e:0c:3f:8c:36:d5:ee:1c:94:f4:45:b2:7e:d5:
9c:38:df:28:b3:05:c6:20:04:90:74:e8:22:b4:a2:7c:56:8b:
56:3f:20:45:8e:1c:ea:a9:96:13:d6:db:c8:a8:db:4c:3a:77:
d9:eb:94:08:36:98:32:47:9e:99:fb:44:15:64:f4:36:14:7c:
86:71:39:35:b3:9a:71:92:1a:ab:3a:d3:d4:ec:52:a8:ee:38:
27:31:a9:4f:3d:08:bc:3b:d5:b7:a3:e5:f8:39:7a:a9:9a:49:
af:b7:9f:7b:36:05:4d:01:c8:10:ba:09:6a:67:de:ea:e5:9a:
5e:0a:db:57:27:11:49:1b:9d:d3:d7:99:1f:f4:46:49:25:46:
5f:7a:8d:b9:ee:cf:4f:f8:91:bb:c3:b5:51:ea:5c:cc:d3:ca:
a4:bb:1e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:57 2025 by rpki-client