Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa
File: b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa (raw, json)
Hash identifier: lnwZXW8hQ+vU1ljxSJjRX4R0piWe8RlMhq1x+RcaxNI=
Subject key identifier: D8:6B:F7:42:E9:25:F6:1E:83:0B:90:8E:5A:92:09:CC:1E:71:DE:05
Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial: 010D0C9F4328584930DE6DFA091F841E9DBEB100
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 3356
IP address blocks: 216.168.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:6d:fa:09:1f:84:1e:9d:be:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=b9257fe3-6640-401b-bece-6642018aa67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:27:2f:05:69:87:a0:49:60:b3:1c:4b:6c:
a0:c2:78:82:1f:d1:e2:02:46:53:95:69:83:3a:68:
bd:25:8c:97:aa:36:46:60:a9:bb:a7:ad:cb:77:4d:
9e:73:3e:af:03:99:0c:d4:b7:58:2d:41:df:4a:64:
57:23:b2:71:d3:74:e7:94:7a:24:c2:c4:3f:22:fa:
72:f0:a7:74:0f:45:dd:37:e5:cc:78:2f:d0:c6:20:
22:1b:77:3f:c1:71:89:1e:b1:2b:bc:c9:ae:5f:16:
49:1a:21:c9:3c:98:0b:cc:22:18:f1:17:84:68:db:
62:10:43:fc:8b:38:ff:67:3b:3c:1d:f2:b1:eb:6b:
7b:05:88:a1:dc:77:d7:ab:aa:74:56:7e:5c:18:8d:
d4:89:5e:d0:e1:11:46:aa:95:a7:5c:d0:0d:6c:26:
af:90:99:17:3d:b0:49:4a:c4:67:60:3a:64:d6:e5:
f6:b9:dc:b3:5f:d1:f4:68:2b:c6:62:08:21:fe:1e:
3f:fb:ca:af:7d:53:d6:a4:17:89:b0:1c:61:57:af:
9b:e2:c4:35:1a:a7:74:49:ca:b5:6b:45:94:d4:9e:
e2:4f:60:8a:5f:e3:61:d8:f0:e5:a5:f3:de:7c:b1:
6b:fd:3e:d1:a3:af:fc:25:56:31:c5:7e:ec:c4:69:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:F7:42:E9:25:F6:1E:83:0B:90:8E:5A:92:09:CC:1E:71:DE:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
X509v3 Authority Key Identifier:
keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:2a:c1:29:2d:3f:a7:02:fe:4b:ed:23:84:7c:e9:3a:39:86:
3c:16:88:20:89:68:8f:4b:93:8d:4d:ab:de:23:b5:66:ed:f6:
c7:c2:cd:d7:50:22:b3:d4:c2:02:2c:32:7b:e7:27:ae:11:0f:
18:f8:63:72:58:fd:1f:ec:29:18:63:67:33:74:74:fe:14:19:
ba:6f:d1:f8:ef:3e:c0:27:b9:25:15:91:6f:15:93:81:df:03:
88:70:98:b3:bf:8d:bb:86:f0:70:e2:8a:ae:ac:84:d9:63:3c:
82:2b:40:0f:9a:ad:a8:60:5f:08:22:52:a5:2e:b5:5c:2a:56:
95:96:52:a1:8e:5c:1f:9d:93:66:dd:03:12:48:75:44:79:a1:
16:1b:d0:19:49:f6:3a:da:e9:93:68:1f:5b:12:4b:28:dd:b8:
ba:35:aa:fd:f9:41:f3:f8:0c:69:7d:7a:40:e9:97:7d:fe:e8:
3a:ea:de:60:82:fb:95:a7:f3:0b:ec:9f:b6:eb:95:37:dc:2a:
c7:76:91:58:b1:04:5d:4b:24:78:50:74:e4:8a:75:81:56:7c:
59:d0:20:da:d0:ec:79:7c:00:13:e3:16:2c:f6:1d:9d:f0:63:
78:5e:c4:3d:ad:c7:76:86:6e:a9:89:c3:4a:57:63:17:ed:e8:
27:99:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:19 2025 by rpki-client