Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2320306e-47da-30b5-acec-4856a8216f6f.roa
File: 2320306e-47da-30b5-acec-4856a8216f6f.roa (raw, json)
Hash identifier: HMzfnj5OVspQm4Qmb9gXZpdUZqld2xs5D9VC8jHHzns=
Subject key identifier: 66:CD:19:FC:EF:3D:5E:E3:3C:83:A3:36:7B:25:56:2D:F1:44:43:29
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584937D92F16C4DB89AE612E7400
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2320306e-47da-30b5-acec-4856a8216f6f.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.249.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:2f:16:c4:db:89:ae:61:2e:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=bcd33aeb-53cc-49ff-98c5-679fd30d192f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:8f:28:9a:87:32:d3:a1:a3:81:92:a5:90:
3f:9f:b2:b0:bc:9f:4c:5a:8b:a8:b0:0c:cd:79:aa:
d9:93:91:3f:d1:1a:a0:df:a1:32:f9:20:16:15:b0:
17:65:36:59:da:e1:29:7d:a1:0a:b0:3f:ac:31:c6:
ea:44:47:91:81:24:20:82:7f:de:d8:db:8b:02:d7:
af:5e:a9:89:c2:d7:58:f1:9b:62:16:4e:f1:d2:a1:
69:c4:a4:63:fe:d0:34:3f:e7:7a:d8:b5:0a:f0:0e:
df:1a:7b:fc:dd:80:0c:97:39:25:fe:be:ad:6d:99:
d1:1a:40:be:61:d4:3b:27:2f:6d:c3:c0:a2:bb:cd:
e5:fb:0b:ec:eb:da:60:55:b2:13:60:98:98:cd:20:
94:db:ef:a9:c3:66:fb:96:ff:7b:1a:f6:16:fd:3b:
92:ac:8d:90:5f:24:e5:2a:86:dd:26:a3:56:3c:38:
08:1c:33:7d:31:f3:4e:d5:0e:29:24:0e:55:97:82:
39:d2:3f:70:1e:32:18:73:be:f5:cd:ac:2a:d1:8b:
00:d6:45:f0:56:2a:71:ad:dc:85:49:84:d9:06:ce:
b3:74:2b:5e:7c:67:2e:17:6c:eb:3d:8b:35:ce:61:
e1:86:55:2d:b7:de:01:97:68:93:2b:ca:a1:32:4f:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:19:FC:EF:3D:5E:E3:3C:83:A3:36:7B:25:56:2D:F1:44:43:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2320306e-47da-30b5-acec-4856a8216f6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:48:a5:4e:6e:6b:d1:a7:cc:b1:30:14:6c:29:66:44:ce:01:
49:4c:f2:1b:39:2f:84:02:96:4b:6b:6f:d1:e7:60:3f:21:be:
33:e1:b9:e3:57:dc:10:cc:4c:6b:24:fc:de:c3:38:6a:d8:52:
e1:9a:19:c9:55:db:f9:ae:b5:d0:f4:af:80:54:c5:15:dc:93:
e1:11:bb:99:37:21:ac:91:76:ef:32:c5:98:bf:07:06:e8:c3:
97:ec:aa:07:f1:24:1b:79:57:a5:64:5a:ce:10:2a:f9:3d:c4:
fe:92:a1:a2:98:64:c2:a3:9b:20:ca:9e:bf:bf:70:f7:cf:41:
2c:08:a9:4e:6e:eb:fa:13:4c:8d:3a:94:3c:8e:50:88:c3:15:
d7:de:39:b2:8a:83:d4:14:c2:98:cf:ba:c0:8c:2a:cd:bc:19:
69:69:42:c8:88:9a:e1:56:b4:59:4b:63:cf:60:ce:5d:67:77:
79:f5:d4:96:5c:fc:cb:28:09:7e:61:31:2a:d4:fc:a3:03:ad:
6a:d2:6e:3a:6a:d7:28:12:ac:84:3a:74:66:c0:65:bc:6d:9f:
c8:a3:43:15:a1:e2:f2:ee:bf:44:78:f9:4e:20:f2:55:a4:0b:
32:ec:55:7d:de:8f:3b:cf:5c:ef:ae:7c:4d:2c:6e:2a:6d:20:
5a:42:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:59:58 2025 by rpki-client