Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d4560c96-ab1c-3af7-87ad-4027d8751f66.roa
File: d4560c96-ab1c-3af7-87ad-4027d8751f66.roa (raw, json)
Hash identifier: TZHaGleMmrg6FpagkDVxzRh4oV8Jf4HUTbdE3UxGsGU=
Subject key identifier: FE:17:B8:5F:98:44:ED:34:E6:0D:4F:FD:DE:85:E6:25:67:69:19:EA
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285849350EAE0C75FEF8076DF614C0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d4560c96-ab1c-3af7-87ad-4027d8751f66.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.249.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:ae:0c:75:fe:f8:07:6d:f6:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=60e3c117-ebaa-4384-b185-1dc9fd542585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8a:79:80:5f:fd:8a:f9:b8:26:56:3b:70:b1:
a3:46:c6:bd:4d:44:72:df:2c:14:97:2a:1f:00:c8:
a9:55:a0:b3:13:dc:48:26:55:d4:d4:8a:53:31:f0:
6a:f7:f6:d3:07:99:fc:2c:94:96:0d:27:c0:f8:ee:
57:7e:e9:a5:79:ed:de:ea:63:73:2b:23:d1:13:ae:
e9:21:53:8a:fa:82:7d:94:29:38:95:21:c1:80:63:
bc:ea:41:70:3e:c2:cd:69:5e:b4:8c:fc:eb:8c:f3:
54:65:1e:d6:63:66:31:dc:36:b6:2f:4b:62:ee:78:
f4:d4:08:7d:37:d0:85:8f:7f:e7:9c:f5:ae:c5:7f:
47:82:df:dd:e3:f5:47:a0:71:e1:c4:f6:b6:72:6a:
e2:fd:b7:b1:3f:ea:1d:43:69:fa:34:48:d7:8c:f3:
62:b6:98:eb:46:90:ee:98:02:1f:5b:28:24:b8:61:
8b:24:cb:b9:73:e9:8f:3b:88:aa:53:bc:a5:3a:a7:
70:0c:cb:39:3e:18:b9:95:91:f7:07:34:4f:07:48:
ea:48:cc:8a:ea:b5:b0:88:89:88:ae:d4:ac:a7:dc:
d3:05:5a:aa:a4:fe:ce:7f:19:24:05:10:75:e6:6a:
4a:64:eb:3d:7b:66:ac:f1:64:5c:72:01:bc:f9:05:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:B8:5F:98:44:ED:34:E6:0D:4F:FD:DE:85:E6:25:67:69:19:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d4560c96-ab1c-3af7-87ad-4027d8751f66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:d3:79:bd:6a:e2:b5:92:5f:2b:46:c5:95:62:99:03:38:c4:
e1:7b:8d:77:a4:25:77:06:15:e6:48:70:29:50:12:86:9e:32:
de:98:12:53:bf:8e:75:ea:20:f5:99:ca:8f:97:2a:aa:ef:97:
53:f1:1b:88:ad:ae:d8:18:40:5a:10:ae:ed:78:a6:cb:09:55:
bf:94:a3:fc:31:0e:8b:a1:8a:24:11:35:87:46:9d:43:d5:d4:
ca:2e:ad:d8:b7:50:cc:1b:a5:43:fa:ff:bf:cf:7d:72:e1:51:
d1:e3:2c:b0:e3:de:60:45:32:d3:bc:90:a7:d3:39:c0:ae:3d:
5f:6c:a0:1f:a9:1e:62:9f:2b:b2:d7:22:d9:02:25:0f:6f:dd:
51:ee:8c:d2:ca:5b:70:5e:eb:11:17:8b:e3:e4:26:c4:3c:44:
93:47:e5:2b:44:c9:c9:54:8c:32:82:ad:75:7c:47:79:7e:ba:
55:f4:e7:d6:93:21:d9:d4:42:da:2f:e4:5f:ba:bd:25:75:c7:
75:58:e0:36:ed:53:b6:6f:62:76:ad:aa:36:51:d6:f0:52:b4:
14:ff:bb:5d:65:32:f5:cf:13:2b:90:af:f2:9a:21:a2:17:6f:
d2:7a:49:cd:6f:02:6a:91:0b:bc:0c:0e:0c:f0:dd:fe:34:05:
d5:a1:e9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:39:21 2025 by rpki-client