Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/d2bf1caf-b23c-3e62-971d-e69b45200ad2.roa
File: d2bf1caf-b23c-3e62-971d-e69b45200ad2.roa (raw, json)
Hash identifier: ndO/hv9Wq7SAbyatrIuLkNl2Sl0rhx8v37IGgc6Un8Y=
Subject key identifier: 58:AD:5D:B1:2B:6F:43:44:FF:6C:14:8D:48:47:B7:9C:CD:B9:4F:FE
Certificate issuer: /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial: 010D0C9F432858494E2EB448DD5CB41D30598040
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/d2bf1caf-b23c-3e62-971d-e69b45200ad2.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 13389
IP address blocks: 216.179.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b4:48:dd:5c:b4:1d:30:59:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=d76bf53a-5c56-4d37-8811-a4cdd038c7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:72:92:73:0e:36:f2:de:fc:ae:c1:67:9c:
14:08:96:7d:17:44:26:a6:15:1c:e0:48:77:a6:31:
2a:38:be:3d:5c:8b:f0:0d:7d:95:43:cf:3f:66:07:
7e:4e:c7:7f:a8:e5:7e:05:9c:da:d1:5f:a0:61:59:
9b:7f:75:9a:0b:c2:01:4b:21:e0:cd:b4:15:b1:1b:
2a:93:c7:ba:fd:cc:f8:93:e0:ab:7c:90:28:8a:c7:
a7:15:40:8a:c0:7f:28:3a:ee:d7:6d:31:c1:9e:ad:
62:24:b2:f5:6a:cf:50:e4:ff:38:c8:e2:cf:57:b6:
a4:9f:d9:5f:1a:18:94:91:58:fe:8b:5d:8c:5f:9b:
a6:38:75:17:63:a2:d0:e6:6f:cf:5d:be:d9:bf:e9:
5e:32:1c:df:a3:d0:5a:38:45:55:ef:e9:a7:34:9a:
76:12:ad:92:a5:67:76:bc:35:ff:03:57:5a:01:4f:
6e:c9:0f:2f:4e:d2:16:e3:7e:79:97:10:b4:89:dd:
bb:95:72:c6:81:51:2b:fe:3f:32:9b:56:ce:36:3c:
80:a9:46:1c:22:67:ba:8f:25:92:11:f8:12:ff:84:
49:fe:c7:f4:48:37:ce:14:8c:b4:fe:96:34:6c:6e:
29:b2:0a:77:8b:32:6d:87:40:df:b3:c8:f7:0f:b8:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AD:5D:B1:2B:6F:43:44:FF:6C:14:8D:48:47:B7:9C:CD:B9:4F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/d2bf1caf-b23c-3e62-971d-e69b45200ad2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl
X509v3 Authority Key Identifier:
keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
sbgp-ipAddrBlock: critical
IPv4:
216.179.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:2b:3f:af:87:32:d6:2d:f8:72:8d:a3:ec:07:19:11:71:7c:
47:93:c9:fd:fc:1b:76:92:fa:f0:48:db:69:53:82:79:ea:84:
a0:93:62:77:f7:98:0b:03:1a:1b:22:3e:d7:80:25:1e:48:0d:
cf:c1:2f:57:e3:ef:91:3a:c8:90:dc:0c:f0:e8:c6:10:04:68:
c9:a1:4b:ee:cb:34:f2:d1:38:ea:17:ba:9c:da:48:4f:65:e5:
8b:97:f9:b3:88:a4:59:ca:d9:e3:9a:d5:a7:9a:75:eb:3a:de:
17:b3:7e:24:fe:dc:53:c1:c8:87:e5:f4:11:13:9d:3c:9e:99:
6c:5f:c0:f3:85:8f:74:3d:54:bb:4c:40:38:56:54:12:13:98:
a5:c6:98:f0:3e:84:41:f6:2e:4e:b1:18:76:0b:ac:20:60:e3:
a2:a7:98:b4:0e:eb:50:ce:ef:18:ca:a8:c8:c7:6a:bf:85:36:
1b:fc:73:1b:72:cd:4f:c0:9f:ed:7e:47:f7:a6:f4:e7:2b:60:
ea:95:27:b9:4f:fa:d8:e3:fd:09:3c:a5:63:4c:2d:be:ce:0b:
e0:e5:7d:85:8c:c8:21:29:0e:a3:05:70:87:76:6e:80:d9:c4:
1a:72:16:a9:66:2b:e3:a1:25:1f:90:a2:03:4a:a0:d9:11:04:
2c:f0:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:12 2025 by rpki-client