Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b34d1f69-a972-3112-9d9b-3f0f47630569.roa
File: b34d1f69-a972-3112-9d9b-3f0f47630569.roa (raw, json)
Hash identifier: 1F3yiDMR4Uf+fit/QHBPS0LW7YYIv9TfIe85vQEgjBE=
Subject key identifier: 58:EB:0B:83:2D:C0:04:44:53:E9:5F:CA:3D:9E:76:34:A0:97:C1:66
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848ADC601DE801EDDF41A7C5000
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b34d1f69-a972-3112-9d9b-3f0f47630569.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 401415
IP address blocks: 216.249.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:01:de:80:1e:dd:f4:1a:7c:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=317cf2e3-ce88-4a29-ad06-7fe155861ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7f:f6:92:91:ee:cf:49:3a:dc:00:4a:31:70:
ea:cb:fc:bf:83:70:6a:90:ba:f6:42:87:43:bd:e6:
f0:57:f5:60:e9:5f:b8:57:77:b0:d4:b9:2e:54:bf:
c1:79:36:cb:27:0c:ed:cf:21:04:bd:29:96:58:b2:
2f:da:84:73:65:a8:4a:b4:94:bf:c1:9f:97:61:ac:
99:4c:50:de:7d:3b:e0:db:20:96:a5:49:50:d8:cd:
4d:31:3d:9a:f8:f6:7a:d6:99:e5:0a:d9:f2:16:e1:
01:13:89:78:3b:33:8f:27:9b:a5:59:6b:64:c5:33:
33:2c:d1:aa:16:01:e1:a8:9a:7d:2a:42:b2:0e:f2:
1a:0a:4a:49:14:86:15:52:ff:15:17:c6:56:e2:ee:
71:de:ae:08:7e:6b:ec:e0:87:a6:72:6c:da:37:b8:
4d:cb:f4:8b:bc:fc:92:0c:4b:ec:1a:23:9c:6b:92:
47:db:6d:e1:85:95:f2:0b:34:e4:af:df:9b:2c:c0:
e6:83:4d:c5:73:ad:c4:f7:19:04:8b:b2:d2:23:18:
ee:6c:8e:2d:77:f8:12:e1:71:a0:93:6d:d7:18:b7:
5a:cd:16:40:ef:c1:78:10:c9:5c:33:9e:29:66:ef:
2a:ae:4b:dd:e6:e2:38:d6:ac:7e:40:5a:40:59:da:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EB:0B:83:2D:C0:04:44:53:E9:5F:CA:3D:9E:76:34:A0:97:C1:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b34d1f69-a972-3112-9d9b-3f0f47630569.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:b6:c3:2d:ae:67:d7:24:e6:e6:9c:70:b8:f7:1b:ff:cf:ce:
9d:d8:0a:ea:45:4b:ee:ff:00:cc:29:7d:d2:4e:9b:05:3f:4a:
81:4e:33:04:4a:92:d6:09:0c:27:bd:2d:76:20:bb:34:db:c4:
48:2d:f9:29:2e:ea:16:37:b1:f1:8a:3d:13:da:6c:62:fd:4b:
8d:d9:39:64:03:c3:f0:f5:a0:dc:29:ce:91:74:0a:18:23:af:
07:7a:49:93:db:95:4b:99:0c:bb:e4:93:7b:1a:ef:f3:22:a5:
61:3f:ca:9d:b2:4e:af:f2:a5:04:14:60:c0:ef:e7:46:6b:59:
91:a3:d7:4a:46:69:ad:9d:76:f3:af:f7:d7:38:94:e3:20:5b:
ca:26:a5:73:97:1b:07:f3:27:6a:98:89:b7:52:62:78:b0:4d:
25:3f:5e:51:5f:41:2d:96:57:c9:c2:e1:2f:75:a1:f2:03:dc:
67:0a:30:03:8f:e1:27:05:42:3e:ea:3c:1f:68:c0:25:fb:31:
c4:6e:16:08:ad:da:d4:51:87:37:a6:cc:d1:00:36:63:02:65:
9a:f1:ab:be:d0:0d:c1:5d:fe:c1:75:dc:30:c8:47:ae:76:78:
50:43:46:58:b5:45:f9:9c:53:68:cc:13:fc:1e:32:b2:67:2c:
58:6c:9e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:43:47 2025 by rpki-client