Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f6be008e-f3a8-3b2d-a921-07917a719383.roa
File: f6be008e-f3a8-3b2d-a921-07917a719383.roa (raw, json)
Hash identifier: JGrFs/r6oQgFtwQJhG8EWEAJa+kCJOUtQuxif/f3TIA=
Subject key identifier: D4:BF:C6:63:E2:82:FB:ED:4C:42:0E:61:DA:CC:F4:11:50:F5:A4:90
Certificate issuer: /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial: 010D0C9F43285848AF2B88A396963AE351F6FD80
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f6be008e-f3a8-3b2d-a921-07917a719383.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 32554
IP address blocks: 216.162.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:88:a3:96:96:3a:e3:51:f6:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=c0227ec3-a19b-4cbc-a41d-00ea7415a761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:a6:14:e3:b6:ff:c8:71:41:84:a3:45:2b:
a8:76:2c:08:10:67:31:61:3a:3c:9f:60:8f:b9:70:
b1:37:4c:63:e7:65:7b:ed:ae:75:34:ff:cd:82:9a:
5d:9e:a0:5e:94:8d:a5:c3:6d:d5:51:05:37:78:fb:
da:cf:4d:f4:b7:fb:16:c5:46:13:4c:89:8f:03:38:
9e:35:c7:aa:48:b7:fb:78:08:fa:87:1a:64:9f:14:
bc:22:4b:5d:5a:34:14:52:8d:9f:6e:14:9c:b7:da:
66:00:3e:65:1a:65:e4:d0:41:2e:ff:20:12:ed:ff:
cc:da:59:1f:07:5e:07:71:fc:06:88:7b:ab:82:0a:
89:0f:5e:21:99:cc:05:eb:50:a7:13:a6:fa:ef:59:
3e:3e:c6:57:f7:64:0c:69:95:1b:b5:50:c8:09:87:
35:46:04:8b:c8:1e:63:87:f5:2d:5c:92:75:d8:6c:
3b:21:43:74:8f:af:92:8e:aa:21:95:88:d3:ea:8a:
f7:7b:4b:c6:d3:c4:cc:e0:ed:5f:46:49:00:7b:54:
10:a3:23:b8:8f:d2:37:06:9a:55:aa:72:2f:d6:2f:
23:dd:3c:4b:2d:9b:5f:0f:b7:b0:9b:bb:fa:ce:4a:
ab:b1:56:75:ec:10:61:8b:33:90:ad:26:c0:06:bc:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:C6:63:E2:82:FB:ED:4C:42:0E:61:DA:CC:F4:11:50:F5:A4:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/f6be008e-f3a8-3b2d-a921-07917a719383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl
X509v3 Authority Key Identifier:
keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.162.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:02:61:90:7c:3f:dc:92:78:ad:9b:30:ee:e3:a5:b4:1c:df:
33:96:5d:69:99:64:02:b7:44:5c:00:1b:50:6a:1a:98:f3:fd:
94:3f:e3:54:ed:16:7d:f8:6d:53:98:75:8c:f6:49:43:e6:f1:
46:e8:fb:6e:02:31:3c:ea:3e:06:a2:6d:af:fd:88:2e:d2:ce:
3b:6d:24:2c:aa:93:da:52:8b:f6:0e:e9:40:de:25:c7:7e:3d:
b6:5b:fa:28:7d:6a:d1:3a:d8:39:32:ce:e2:41:02:2c:19:80:
be:69:51:60:a4:e7:fe:71:45:80:e1:72:e6:7b:c0:d5:57:96:
55:ca:9d:21:22:3b:99:e7:2d:d3:30:30:dc:98:7e:a4:76:30:
82:32:51:bd:2d:77:74:85:47:6c:81:b7:a5:ae:0f:4d:43:40:
49:97:e4:b7:da:f2:de:0b:61:42:da:6d:4b:8d:67:a6:02:d6:
d3:d5:39:2a:4d:19:e9:e8:4b:8f:89:68:0c:fd:b0:df:bd:e2:
5c:09:28:4c:f2:79:f8:ad:23:88:87:34:26:f5:64:d6:76:c8:
27:5a:ff:7b:a2:08:29:85:71:37:ee:af:d6:90:4e:86:3a:db:
23:5a:8c:be:21:fa:86:04:73:0a:18:9c:c9:76:4a:98:9a:ed:
22:70:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:39 2025 by rpki-client