Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa
File: 3cffd828-cce9-3c73-a852-0976eaacdfbb.roa (raw, json)
Hash identifier: 14BZK0IZAYU7WEDEGS+90k23T5rVS/ZYNGsFXACxoF0=
Subject key identifier: B4:95:CC:E2:9D:65:36:B1:74:43:7D:12:93:81:26:A6:27:17:0F:65
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285849350E94C0038E0B119F3C4700
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.106.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:94:c0:03:8e:0b:11:9f:3c:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=a5900968-ebc6-4166-98ef-01f868edaf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:79:79:27:36:01:42:ee:eb:7c:19:73:3e:
4a:09:5e:81:66:1c:0c:9b:df:07:ba:dd:e7:28:61:
08:58:b7:25:2c:d8:86:89:d4:20:3c:a0:61:3a:57:
48:4a:e0:bc:0b:2b:4b:f4:9c:74:8b:61:2c:39:47:
84:99:a7:36:5c:33:5d:b0:5c:b2:cd:e6:cd:0c:38:
e7:79:46:40:9c:e9:85:fd:67:31:93:73:b5:08:95:
84:fb:e7:df:79:5a:c7:9c:a8:d7:26:bf:82:90:88:
c6:69:9e:56:b0:18:2b:f4:56:f0:9f:e3:98:9c:4c:
20:30:2a:8d:b4:f6:c7:6b:3c:3a:93:6a:fe:0c:a6:
10:ba:5a:18:39:b4:e3:1b:d7:c2:04:70:36:79:7d:
f8:31:6f:80:81:65:cd:8f:0e:49:12:9c:cf:03:d0:
e3:8f:12:d4:e1:01:80:ff:79:89:d6:2b:9b:a5:d2:
7f:1b:5e:d3:57:35:f8:a0:d2:dc:5f:e5:2d:97:ca:
76:51:45:3e:15:19:1a:34:68:b6:02:4c:62:01:b6:
67:32:bb:2e:a4:95:0f:34:58:bb:54:04:3f:cf:fb:
d6:29:7e:bc:2d:68:d1:d6:58:1e:33:1d:e7:2d:07:
ea:0d:8a:5a:5f:bb:9d:f7:c7:c0:ef:e5:06:d2:b5:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:95:CC:E2:9D:65:36:B1:74:43:7D:12:93:81:26:A6:27:17:0F:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3cffd828-cce9-3c73-a852-0976eaacdfbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:54:d3:ae:41:47:20:69:b1:2f:df:d4:28:e6:0a:46:e8:3d:
b7:fb:fb:29:3b:bf:f8:63:20:55:06:32:81:19:b2:ff:fd:44:
3a:44:80:58:d6:2b:03:d1:30:1e:8f:2f:2f:ba:cf:cf:62:65:
3a:d5:78:b9:a6:a7:44:b4:6b:8b:67:36:d6:f7:bf:0c:af:d4:
c0:27:a6:9a:aa:0c:52:c4:97:02:a8:c5:6a:bf:43:f7:71:8e:
64:3e:cf:73:f2:92:a3:1a:84:0b:b1:c8:b6:7c:bc:e5:16:db:
2f:bb:c0:12:30:7a:47:cf:8d:09:85:9c:89:52:8b:33:45:84:
11:b6:43:ba:4f:7e:9a:a2:ba:52:23:5b:08:cf:1c:3d:fd:cb:
d3:bc:32:1f:22:17:f0:c0:53:ed:1e:8a:23:ab:a9:10:cc:8b:
e0:fd:16:ee:f2:17:2c:74:aa:b5:26:7a:61:8e:04:93:d4:ec:
44:85:b0:0f:af:71:9b:23:dc:a4:f4:8c:09:d6:16:f1:56:e5:
2d:5c:d3:be:b1:a8:99:d7:c3:4b:b8:56:e6:4b:f0:18:8f:68:
4a:61:dd:37:1d:e9:d9:40:ce:2f:8c:aa:c8:93:e1:c2:8a:ab:
2b:0a:d9:aa:6d:57:88:4d:60:f2:ea:69:3f:81:13:7f:98:f1:
fb:9c:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:07 2025 by rpki-client