Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa
File: 79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa (raw, json)
Hash identifier: gyQGIQQnf8ZCGRdgfSWn79gt71k3xoRuE7Gln7tk5zA=
Subject key identifier: 53:82:D5:83:35:07:B5:AC:3B:E0:AB:4A:8B:3F:C2:EB:E6:EB:76:D8
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F43285848AF2B7BA05C630C03EE974000
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 216.185.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7b:a0:5c:63:0c:03:ee:97:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=ea7f4139-acd8-439e-884c-91e351dca155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:f7:0f:03:f0:38:92:fb:64:4e:14:3f:77:
0e:67:92:1a:2f:c1:7c:13:30:68:32:f7:67:b5:39:
4d:2a:92:47:80:2a:64:54:26:5b:f5:52:54:74:4a:
3c:dc:2a:cb:d6:18:12:44:9d:f7:33:5f:6e:e1:02:
c8:6f:aa:86:6f:51:5c:61:5b:4f:1f:1a:7b:44:6a:
ca:cc:06:33:97:d1:cd:ab:f5:52:97:d0:a7:75:3b:
b2:99:9d:91:fc:48:fa:9e:8a:b0:21:82:7b:9b:24:
ad:be:44:17:52:4c:8c:92:67:54:b4:bc:da:11:ef:
3f:71:6d:27:9c:34:55:bf:ac:79:50:6b:4c:1d:f7:
a7:8e:91:08:a4:36:05:0a:0a:a4:a2:80:33:e7:aa:
b4:bf:f6:ad:1e:78:2a:6e:15:a9:aa:b7:41:53:f6:
ea:06:6f:52:ee:5d:8e:05:42:6b:62:cc:56:c0:7b:
e0:09:0c:9a:32:32:35:52:da:5b:1e:a4:6b:2f:3b:
21:37:5a:cc:45:39:26:af:55:4c:7b:69:a0:7f:6c:
48:78:72:80:3a:5d:67:04:38:aa:e9:80:99:d4:bf:
0b:3a:ab:ce:cc:cd:67:77:9d:b7:59:c0:60:da:3d:
14:03:b9:65:8d:2c:7f:f7:01:b3:3b:49:83:61:9a:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:82:D5:83:35:07:B5:AC:3B:E0:AB:4A:8B:3F:C2:EB:E6:EB:76:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/79e9ef63-4b2d-3a3f-919a-a9630a168b3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv4:
216.185.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:0a:07:5f:6c:ac:68:6b:1f:2d:0c:ff:d7:a0:52:93:17:6c:
4a:d2:31:24:be:e7:d0:c0:d9:51:bf:26:4f:a9:3d:5e:6e:cd:
09:40:3d:dc:b9:0a:db:66:97:54:8e:48:92:02:b7:2b:ce:03:
dc:0e:1f:a2:36:5b:36:50:75:aa:66:d7:c1:1b:50:d4:86:0b:
69:4b:ff:0a:3d:ed:9b:3a:7e:11:9b:b5:5a:a5:fc:5a:30:a8:
b7:af:99:fa:b4:f3:c8:e0:4b:60:6c:6c:e3:0e:58:8b:62:e9:
49:af:c2:98:be:4d:87:08:5d:6a:f2:16:df:9c:5d:10:43:82:
da:03:86:01:e0:21:f4:be:01:51:e6:b8:a1:72:4e:d3:88:6f:
42:a5:bb:8a:89:bc:21:f3:36:63:d6:cf:3f:c2:fb:2a:97:dd:
e6:da:70:82:1b:9d:98:d5:48:18:da:17:0f:c9:18:4a:e2:d5:
4c:7f:3a:70:27:58:83:26:4d:00:9b:8a:0f:d8:bc:de:46:c3:
6e:e6:28:4e:2f:37:62:a1:0e:b1:70:e2:50:a7:b9:4a:37:b2:
9c:16:d4:9a:ac:4b:4e:dd:b7:68:9c:e0:2b:0a:87:44:e8:6c:
b3:b3:45:35:13:92:28:e1:92:23:b6:8b:92:d2:c4:bb:dc:8d:
e6:89:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:28 2025 by rpki-client