Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/3e7989ac-b2f4-3a06-a5d4-23f9ed4f00f7.roa
File: 3e7989ac-b2f4-3a06-a5d4-23f9ed4f00f7.roa (raw, json)
Hash identifier: rz4nIt/NFtCFsOZ8yBFmO147s4DpnmG0l9boIeOFs8c=
Subject key identifier: F4:59:AD:D6:12:A2:E8:38:89:2D:30:70:FA:78:A7:11:01:77:DB:8A
Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial: 010D0C9F43285849ADD3158F828E1B8C3A399580
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/3e7989ac-b2f4-3a06-a5d4-23f9ed4f00f7.roa
Signing time: Mon 28 Apr 2025 19:13:59 +0000
ROA not before: Mon 28 Apr 2025 19:13:59 +0000
ROA not after: Sun 27 Jul 2025 19:13:59 +0000
asID: 5065
IP address blocks: 216.132.192.0/24 maxlen: 24
216.132.193.0/24 maxlen: 24
216.132.194.0/24 maxlen: 24
216.132.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ad:d3:15:8f:82:8e:1b:8c:3a:39:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Validity
Not Before: Apr 28 19:13:59 2025 GMT
Not After : Jul 27 19:13:59 2025 GMT
Subject: CN=f351ee99-faf2-4cb2-a2f3-27d9317297f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4f:73:de:73:bb:77:e2:c7:a5:16:68:58:48:
29:7b:10:a0:d2:3d:a1:1b:fd:46:08:94:2e:de:b0:
37:98:09:fc:e5:7a:b1:49:5c:3a:9a:f5:90:d3:2c:
5f:ba:d7:e5:ef:40:58:4a:3c:ab:8d:c4:e2:2f:c1:
5b:c1:44:da:2b:82:27:02:5b:79:06:7d:f2:d5:1a:
38:48:05:02:61:1d:cd:02:2b:b9:18:60:49:42:e6:
c1:ae:2f:4b:68:83:fe:e9:29:8a:11:cf:92:90:b3:
74:ee:07:58:a3:e4:5e:7e:d8:e3:ff:e3:09:c7:ae:
16:e0:1c:55:79:7f:e4:fd:c3:62:7c:a3:8a:3b:0a:
e5:d0:2b:ee:a2:11:a8:8a:ca:cf:9a:60:31:2e:23:
31:88:21:bb:08:68:51:2a:d9:e2:0b:8c:72:87:78:
b8:c3:c8:34:45:ba:ff:7c:db:cc:b8:54:95:3a:17:
63:d6:8d:b7:81:24:59:ea:ae:f4:fb:ea:e5:07:94:
35:34:1f:38:19:04:e2:e8:e6:0e:2c:39:41:ed:b6:
56:8b:f4:32:07:7a:35:7e:44:ec:17:28:88:65:81:
30:fc:5f:5c:50:45:dc:b2:e3:64:53:21:dc:fa:40:
a4:90:b7:b8:d6:37:2c:8d:51:51:6b:3d:12:e0:8f:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:59:AD:D6:12:A2:E8:38:89:2D:30:70:FA:78:A7:11:01:77:DB:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/3e7989ac-b2f4-3a06-a5d4-23f9ed4f00f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
X509v3 Authority Key Identifier:
keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
sbgp-ipAddrBlock: critical
IPv4:
216.132.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:ef:95:f8:33:07:c0:f7:da:31:eb:84:98:80:b2:8c:23:9f:
24:1e:04:77:a3:a1:1b:2f:a5:82:15:2c:7f:bb:41:9b:74:b9:
f7:10:a8:a4:09:f4:40:64:89:1b:fb:83:c9:9c:4d:df:9c:ec:
65:f5:8a:ae:87:0e:0b:98:34:a2:db:ca:7a:28:57:6a:4b:31:
bc:98:c2:a4:6f:ef:a9:31:df:e0:b2:67:e3:ed:2d:0b:7e:bd:
3a:9b:5c:92:f1:19:e0:71:38:a9:aa:b9:4a:26:dc:63:20:ad:
e0:83:a6:27:50:a6:ab:a6:55:13:6b:18:c9:5e:35:f8:d0:4e:
8b:a7:d5:1d:23:13:c3:04:7c:9b:62:fb:8d:92:26:cb:30:4a:
c6:53:6b:23:14:29:12:b6:1f:f6:6f:bb:a2:78:4d:78:98:3f:
83:e7:c4:db:17:1a:a3:2a:87:b9:41:d8:02:e9:76:7e:e9:7f:
51:ed:e4:72:78:4a:5f:ee:58:38:9b:14:7e:5b:df:ae:a2:86:
28:bb:a6:56:16:82:b5:a1:ae:26:0e:33:52:01:45:78:a5:15:
c8:95:f5:14:0d:bd:77:e8:33:7e:79:5f:de:e7:4c:fb:70:8b:
0c:d8:7b:97:5f:1f:1d:bf:a0:c6:27:ad:d5:9e:7c:97:a5:62:
c8:59:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 21:22:29 2025 by rpki-client