Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d21a75ed-c996-377e-b40d-5406ce89aa43.roa
File: d21a75ed-c996-377e-b40d-5406ce89aa43.roa (raw, json)
Hash identifier: SW3tI2wAfrBUd6XC+GLQwvmzlUug4rI37YI0+YPS1y4=
Subject key identifier: 9C:2C:17:48:F3:E5:4B:4A:F4:AB:F7:39:52:0D:58:5C:AC:BD:5F:62
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848A196ABF2CC63142586C38FD0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d21a75ed-c996-377e-b40d-5406ce89aa43.roa
Signing time: Wed 22 Jan 2025 17:15:37 +0000
ROA not before: Wed 22 Jan 2025 17:15:37 +0000
ROA not after: Tue 22 Apr 2025 16:15:37 +0000
asID: 834
IP address blocks: 216.122.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:96:ab:f2:cc:63:14:25:86:c3:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jan 22 17:15:37 2025 GMT
Not After : Apr 22 16:15:37 2025 GMT
Subject: CN=f5155bef-1448-4567-8e53-8310264c5cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:31:f3:16:16:40:4c:32:50:21:d5:55:98:
88:93:c0:47:1b:68:f5:3f:a9:af:0e:83:98:df:8d:
24:a2:27:1b:41:1a:ff:60:86:bc:af:76:3e:db:0f:
80:b2:5b:41:cf:87:0d:63:c5:e8:a1:b0:b7:fe:84:
78:eb:23:a4:1b:07:36:b2:d7:f8:2a:1d:04:d4:35:
10:04:14:a3:b8:35:e5:5c:31:12:d7:90:c3:33:b0:
e4:11:67:2e:ad:d3:6d:5e:9f:f4:76:7c:a6:1c:25:
ac:ca:7c:57:41:a1:e8:2b:d7:06:36:21:6e:7f:43:
8a:52:50:8c:df:8c:42:46:20:de:10:ee:91:37:27:
4f:60:85:ce:ad:b4:de:39:27:16:65:8f:7a:98:6f:
10:33:56:6b:83:77:1d:2b:56:0e:27:a6:f7:81:9d:
d1:d0:89:46:66:15:14:72:d2:20:3e:9d:4d:c9:34:
1e:17:22:ae:74:8d:d5:51:79:1d:48:c0:1a:8b:e6:
78:4f:22:d8:08:9b:12:7b:d3:b8:19:2e:f6:63:8d:
72:23:b9:ab:61:f3:30:99:32:8a:31:c8:cc:6d:bf:
26:e7:5c:19:be:a0:39:c6:7f:68:ee:78:54:9e:14:
22:7e:66:5b:94:dd:de:66:86:ca:aa:0c:a3:ce:44:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2C:17:48:F3:E5:4B:4A:F4:AB:F7:39:52:0D:58:5C:AC:BD:5F:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d21a75ed-c996-377e-b40d-5406ce89aa43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.122.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:ee:bb:5a:f4:2f:6a:d5:72:bc:75:a2:cb:2d:e4:fb:7a:e7:
b1:51:4c:9b:ac:7b:94:d5:99:78:99:ea:05:27:85:d2:c6:90:
1b:a0:a5:79:92:24:8d:a3:40:82:b1:88:2e:7d:57:3d:84:d6:
81:27:ed:86:66:74:d8:91:d0:ba:7d:fd:36:6b:e8:6e:a2:c0:
ab:e2:f6:62:2c:19:97:4f:d2:3f:c2:d0:42:b8:c3:a9:0b:df:
1b:ad:72:93:00:04:87:aa:01:56:0c:b6:a7:f1:d8:dc:8c:dd:
ab:43:39:fa:0b:ac:96:62:ae:3b:e0:bf:ca:33:6f:2b:d2:92:
f8:f7:29:78:9a:f0:6f:e0:4f:1b:13:b7:18:7c:c3:4b:cf:0f:
8e:a3:d5:53:7f:dd:85:b4:d4:a6:c7:b9:14:df:8f:e3:2c:de:
f5:f9:2c:0f:71:99:a2:4e:55:2c:ae:43:79:ff:c2:c7:b1:ba:
82:e5:03:cd:27:6d:fc:77:fe:2a:c7:59:c8:5d:a0:dd:96:e3:
a6:7b:39:93:d9:a9:de:e8:d0:06:ea:1f:60:e4:19:10:62:38:
94:aa:f7:f9:a9:9c:34:1d:82:23:13:63:ff:bd:25:61:a1:3f:
dd:37:17:ad:6a:79:23:0d:d5:f3:ae:02:f9:83:02:84:86:ce:
13:39:8a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:57 2025 by rpki-client