Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa
File: 48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa (raw, json)
Hash identifier: TEmXsmve6qQDxCOc+UEUJASIMhfehOq6QIoHFKWnQ3Y=
Subject key identifier: 87:D0:D7:51:1A:3A:DD:5A:69:B1:5B:E2:B8:9E:52:DD:88:E9:B1:17
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848ADC602B8F6E3BB4589FA7800
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 401415
IP address blocks: 216.249.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:02:b8:f6:e3:bb:45:89:fa:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=fd6031a4-7faa-45c3-b534-56c44fee95d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:23:03:0a:7a:cb:1d:1d:93:63:03:0f:e1:
c3:32:af:e5:62:9c:42:f8:6f:7d:27:57:84:b4:e5:
ed:98:90:ae:b9:7c:d7:95:ed:73:3c:33:e3:2c:71:
f5:04:77:61:53:22:e0:98:17:53:ee:fa:44:55:f4:
b1:85:0e:0d:14:30:28:21:b9:41:2d:ab:ae:15:05:
94:3f:3d:cd:03:b4:64:b7:4b:d2:b4:7e:8b:f8:bb:
49:78:47:60:a1:92:8b:70:7e:41:ae:2e:17:c8:43:
8e:ec:44:92:a3:0f:49:67:ea:ad:be:c2:54:77:dc:
0b:64:60:69:3a:8e:26:7b:c9:0a:17:a9:4e:be:b2:
e6:5c:a7:4c:7b:21:6f:da:48:47:01:66:74:6a:a2:
ce:e1:dd:ce:6e:92:3c:46:4b:60:2e:8e:59:47:2e:
a1:0b:37:b6:c2:a7:d9:d3:9d:a1:f3:8f:0c:7e:08:
96:68:5f:e0:8b:98:86:20:19:3a:87:6b:8f:7d:65:
ff:45:d2:48:b8:07:26:c1:ae:5b:39:35:43:be:7c:
0f:9b:80:4b:8f:ca:a3:a3:37:6e:e0:40:7c:c9:cb:
ae:7b:d0:41:63:12:01:5d:fc:45:45:79:c4:46:7c:
1c:85:1c:49:9b:e4:39:01:08:40:dd:d2:5e:35:bb:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D0:D7:51:1A:3A:DD:5A:69:B1:5B:E2:B8:9E:52:DD:88:E9:B1:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/48e6b9a3-db59-37c1-b335-f338f63ff2ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:b5:db:b2:83:3d:d2:fe:02:b3:18:d8:bc:87:8d:ed:6e:30:
b7:d5:22:11:8c:64:7c:43:d7:57:e8:67:cd:c3:e9:bd:f7:ce:
00:d8:85:bb:72:81:ef:e5:e0:60:f0:cb:30:ce:47:fd:78:26:
2c:4c:c2:d4:35:27:1f:da:4f:30:8a:27:9c:63:be:3c:d3:2e:
b6:b6:dc:80:c6:59:14:a9:bb:e1:a7:84:2e:f1:8b:d3:3c:ba:
2e:e0:51:e8:db:66:8d:ac:80:c8:53:0e:07:d0:58:29:cc:62:
7a:4d:25:07:91:16:56:08:7c:57:e7:b8:c0:2a:00:16:1c:81:
2c:e7:f6:b2:48:dc:9e:42:f9:05:f4:e0:05:b9:b5:ed:77:57:
61:00:62:a1:d2:02:3b:9b:2e:a5:b8:39:1f:28:74:0b:63:c7:
2c:ec:1d:e9:bb:d3:cd:aa:d5:45:3f:21:c0:f5:dc:8b:ab:e7:
18:2e:ce:9f:19:f6:95:a5:91:de:6a:78:e2:ac:9c:34:7e:bb:
fa:20:60:94:3e:19:10:07:06:d2:c8:40:a9:6e:f5:f9:2b:0e:
20:fd:b8:00:b1:d2:e8:38:5e:39:de:49:5a:31:eb:dd:7c:d6:
43:fd:06:2c:f4:02:51:23:70:46:b7:32:e9:29:c7:19:b7:9e:
a6:ad:1f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:41:25 2025 by rpki-client