Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d4774cb-8d05-3db8-a5f3-8c45313925e4.roa
File: 8d4774cb-8d05-3db8-a5f3-8c45313925e4.roa (raw, json)
Hash identifier: KXI1YKr8zjzNCPs+X0CxTYdqiWV6AcQdMJB//GEO5bY=
Subject key identifier: 34:42:02:21:90:55:F0:0B:56:FA:87:5A:95:E4:37:D9:AF:F0:4F:C4
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848ADC6016736185CEFBC6E1100
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d4774cb-8d05-3db8-a5f3-8c45313925e4.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 401415
IP address blocks: 216.106.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:01:67:36:18:5c:ef:bc:6e:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=6ac6f5f6-1aa3-4425-aaf0-b8f811355a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:dc:a8:70:a3:40:77:90:f0:cd:aa:0d:a6:
df:07:e3:15:af:3b:4f:75:4a:69:2c:15:76:0e:f0:
f6:e5:ff:45:b2:8c:71:65:0d:99:18:6a:9e:d8:71:
b6:66:6b:c0:73:fa:96:a6:0c:36:c5:24:11:96:92:
af:81:1f:45:49:e0:75:33:8c:1a:7d:13:ca:33:28:
13:32:f1:a5:29:b7:3b:b0:ed:44:0d:23:b3:04:82:
6d:8e:7d:97:d6:f4:b1:40:2b:97:1b:18:a2:9a:84:
70:e2:96:74:b7:ec:e6:bf:af:e3:b7:cd:79:f4:b0:
f3:83:69:5e:b3:83:b6:6d:cf:40:c7:0d:13:30:9b:
b1:e7:e1:8c:e6:3d:82:84:48:18:15:91:b7:da:12:
e3:65:c3:38:07:36:f6:1e:9e:ae:88:1d:d9:71:63:
0a:93:d2:67:ae:ab:89:5f:c4:31:f4:66:d5:80:d9:
1e:6d:ae:24:4a:43:af:df:a9:97:2f:81:df:5d:c5:
15:61:20:e4:2e:ff:0a:2a:6a:ad:cd:ef:05:68:bb:
48:08:2b:26:e7:5d:9e:2c:7f:cf:f8:ce:20:0a:30:
8f:d1:78:ee:70:de:41:37:80:9c:1e:3d:e2:d6:64:
75:6c:4f:84:bf:37:b6:9e:3f:c5:09:89:12:b8:2d:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:02:21:90:55:F0:0B:56:FA:87:5A:95:E4:37:D9:AF:F0:4F:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/8d4774cb-8d05-3db8-a5f3-8c45313925e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:4a:a6:dc:e5:2d:00:e6:ff:8f:58:37:c6:d5:90:cc:1d:93:
13:73:60:04:52:00:37:19:65:ed:62:85:2b:a8:16:33:e6:c2:
12:93:90:cd:ad:b3:f9:65:5c:a7:f2:cf:8a:96:dd:84:24:18:
02:c1:10:01:fa:5e:6d:71:f8:06:af:20:3e:7d:a4:80:1c:ae:
8f:d0:87:5d:54:1a:69:bf:98:dd:1d:7b:3d:c6:6e:9c:2a:41:
80:b2:ae:7a:dc:68:ea:44:af:84:a2:20:87:08:28:87:60:57:
6a:44:08:8e:df:3c:25:84:21:53:f7:86:0d:ee:b0:40:c0:68:
71:85:28:27:68:be:39:d8:e6:78:b4:b4:e2:45:04:4e:70:2e:
d0:ab:e2:93:f6:80:83:8b:bf:ca:ba:3e:fc:9a:43:bd:49:d1:
a5:97:a2:69:23:ff:c1:c6:02:ce:3a:ed:54:33:be:ba:c7:6f:
de:9a:75:b1:63:6d:73:03:9a:14:11:a9:02:79:c8:b5:98:1b:
85:6c:06:1c:29:37:ee:b8:99:0c:84:59:47:d2:a0:40:5d:55:
3a:97:95:a6:d5:56:8a:08:36:9a:3e:77:01:e9:2b:db:47:35:
9b:cd:60:87:63:b8:40:81:4c:02:14:e3:76:ba:3d:fd:5b:91:
74:db:3f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:41:21 2025 by rpki-client