Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa
File: 6ec4b6bf-d53f-3877-b36e-f669576d8063.roa (raw, json)
Hash identifier: XxzOfZKtVEBlQzZgO6F3qyIU0WbqPaP1KdiHeJhUHFY=
Subject key identifier: E3:6E:B6:7B:24:73:03:FD:2E:BB:CF:C6:D0:65:63:24:F8:EF:58:BA
Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial: 010D0C9F43285849552954EF2BC0C2D1774A1C80
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa
Signing time: Fri 28 Mar 2025 01:00:41 +0000
ROA not before: Fri 28 Mar 2025 01:00:41 +0000
ROA not after: Thu 26 Jun 2025 01:00:41 +0000
asID: 6128
IP address blocks: 216.97.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:55:29:54:ef:2b:c0:c2:d1:77:4a:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Validity
Not Before: Mar 28 01:00:41 2025 GMT
Not After : Jun 26 01:00:41 2025 GMT
Subject: CN=88476634-8acc-4d6e-a617-02ccbce29287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:1e:0f:56:bf:d0:fb:90:59:39:2d:d6:22:
93:f0:76:07:de:59:0b:0c:b5:40:f5:3e:5e:ed:d5:
80:05:e4:da:71:10:5b:2f:30:4c:00:af:b4:35:bc:
8e:1d:63:a9:3e:7f:7b:f9:51:84:3d:34:ff:3a:ca:
58:ff:03:2a:fd:7c:d7:7e:c3:a0:9f:42:ba:e2:ef:
aa:86:38:b8:e6:9b:9d:b9:98:20:80:05:52:d0:36:
b9:e9:ec:00:10:c3:3d:dd:fa:aa:0f:eb:20:fe:8d:
05:aa:43:05:0d:e1:33:72:ab:29:ff:58:66:67:77:
2a:72:6f:6c:a4:42:62:5a:6d:00:dd:dd:6a:67:5a:
71:c2:f3:bb:1d:a5:12:1f:98:08:f8:d3:a1:11:d5:
6a:b8:8d:13:16:09:4d:35:c5:ff:e8:83:14:fe:5f:
29:1f:5a:f4:ef:89:a0:0b:a1:5d:81:cd:96:17:7c:
5b:2d:f5:ae:cd:59:1d:62:96:56:88:26:d9:06:09:
6f:8b:b3:ac:8f:95:e1:78:99:cf:cb:2a:a5:a8:24:
fd:d8:07:d8:d8:92:c3:db:85:fb:c4:23:fb:c6:90:
a7:82:99:35:84:20:81:a1:89:f6:55:7c:1e:ad:b1:
7b:90:5c:b7:29:08:37:19:ba:39:8c:c5:c3:30:85:
49:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6E:B6:7B:24:73:03:FD:2E:BB:CF:C6:D0:65:63:24:F8:EF:58:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
X509v3 Authority Key Identifier:
keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
sbgp-ipAddrBlock: critical
IPv4:
216.97.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:ec:21:ef:60:61:40:fb:10:aa:be:df:10:eb:b2:e1:40:46:
78:40:06:17:42:a4:ac:9f:fc:16:5c:a6:5e:fe:24:9a:9b:93:
7a:a3:af:8a:05:ee:93:d7:50:9e:ba:d3:28:21:bc:3f:09:5c:
12:99:e4:dd:cf:59:0e:0e:fa:7e:72:39:11:a5:20:8b:cb:17:
97:32:8f:c9:50:f7:ea:ef:70:f2:1c:0c:88:28:d5:46:78:f0:
13:77:e2:8c:03:dd:b0:42:85:de:20:8a:e1:73:d3:82:5b:73:
69:88:6e:32:3d:ce:39:10:42:e1:c8:ca:93:a6:a8:95:79:d6:
e2:16:23:d1:3f:03:a5:a1:52:54:c5:e3:79:68:b8:fa:4f:bd:
30:92:ba:68:fe:e6:8c:15:d0:06:fd:c0:84:9e:b4:9e:65:e3:
0a:f3:bb:26:1e:0c:79:d6:b5:68:39:69:35:eb:f0:f4:f8:75:
da:f5:d1:b5:8b:36:03:1c:e6:a5:19:20:82:2c:53:d2:2b:21:
16:41:b8:48:14:6d:c6:ef:0c:5a:71:04:20:c9:f9:11:ab:f6:
e4:9f:a9:e6:25:6c:cb:38:8b:15:02:43:77:1d:6f:0d:8e:df:
c3:ec:4f:f2:79:39:d1:d1:a7:a1:b9:fb:c2:13:fe:5d:ec:76:
f6:9e:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:44:57 2025 by rpki-client