Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c81bbaaa-f879-3851-9be2-8e32b27159e2.roa
File: c81bbaaa-f879-3851-9be2-8e32b27159e2.roa (raw, json)
Hash identifier: zLnHq8L91b1A/5W4XWVYgEodHACF0WOvOP2fd2myeFg=
Subject key identifier: 76:D8:E5:98:DE:25:C4:8B:76:60:01:02:07:15:E2:86:BA:4C:4A:D3
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584937D93B6A56DD227394E67180
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c81bbaaa-f879-3851-9be2-8e32b27159e2.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.249.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3b:6a:56:dd:22:73:94:e6:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=fbca5dcb-e3f0-4b32-afe5-3f3ebec9abe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:16:1a:3f:5b:90:1f:e3:7f:56:c1:7d:c8:80:
4a:3d:b5:b5:44:f4:73:23:ff:d1:94:d6:b1:d3:fa:
65:77:63:ed:10:91:f3:52:25:20:e4:ec:4e:65:24:
72:44:1b:f9:84:4d:cd:ed:97:92:8e:40:2e:95:f9:
82:10:43:0c:62:5b:43:21:ec:32:f4:83:c8:dd:60:
63:0b:4d:f5:a0:c2:b0:19:44:74:e6:6f:11:2c:2d:
23:77:fd:a8:7d:e2:70:eb:58:b0:08:9e:44:d0:55:
5d:d7:69:c7:fa:7a:35:69:e8:61:09:fa:87:f0:44:
95:a2:34:5d:3e:8e:1e:48:0e:a6:41:1a:d6:70:c1:
08:7f:58:fb:83:3c:85:34:80:24:75:b6:54:0e:ec:
90:41:e2:d5:55:da:49:7a:99:95:5e:d2:3f:0a:2d:
52:50:7a:10:2f:ed:57:af:dc:69:69:1d:4a:a6:68:
bd:62:e4:79:68:a0:74:22:a8:db:38:06:83:7e:50:
ad:28:0c:43:77:83:71:86:32:37:92:07:ee:0b:dc:
34:17:82:02:63:cd:7e:2f:e4:71:d3:93:c9:c5:f5:
bd:93:6b:5e:ba:be:bb:7e:70:5e:5d:63:cb:86:3d:
06:91:c2:d5:b2:a4:0b:59:d0:7e:27:a0:84:b2:54:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D8:E5:98:DE:25:C4:8B:76:60:01:02:07:15:E2:86:BA:4C:4A:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c81bbaaa-f879-3851-9be2-8e32b27159e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:02:09:5f:c2:66:4b:e6:b6:28:0f:fd:e3:32:3e:8c:05:dc:
68:aa:d5:dc:42:7a:ef:dd:80:a1:b6:25:90:80:4f:98:fd:70:
af:9f:11:6b:7d:03:3d:9e:ee:ae:bc:7d:71:97:6d:45:60:ed:
0f:ee:09:88:76:f5:46:fe:2e:c7:9d:f7:24:f2:cc:d4:aa:0d:
6b:62:28:99:86:fe:ab:91:ba:d2:18:4c:39:51:53:43:cb:1b:
c6:c0:fd:e9:2b:ec:97:9a:21:68:b3:89:87:78:c5:85:86:56:
b7:83:b8:90:89:eb:0f:a4:dc:26:40:cf:b0:8c:3d:57:71:07:
7e:d9:de:20:68:60:fb:e3:86:aa:88:8e:21:00:ab:46:18:8f:
f2:f2:5e:5c:c0:98:d8:a3:45:3d:cd:60:21:03:4a:12:9a:23:
36:5d:6c:2b:71:3a:52:80:ce:ed:9e:8a:1d:73:bb:ba:aa:9f:
80:5e:7d:b0:a0:55:16:0d:3e:df:ae:17:01:a6:78:0a:9d:6a:
c7:ca:28:0a:ce:f0:af:72:37:12:77:56:77:34:cd:4b:3c:d1:
08:5a:11:ae:13:f8:9b:59:2e:df:0c:4a:d9:37:6e:60:26:3e:
f2:0e:87:c4:18:02:ab:d2:c6:64:e9:e3:fb:e2:61:78:3b:0f:
99:94:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:00 2025 by rpki-client