Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa
File: 8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa (raw, json)
Hash identifier: xA86qwrEG+slN4+P6Bpz7I86a5yfet/kF0qQ2qbJHCU=
Subject key identifier: 27:66:15:AB:AE:59:9C:BD:60:46:48:BA:F0:33:E3:8B:08:8C:3A:CC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB6FC9A5D03ACE17874EC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 216.233.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:6f:c9:a5:d0:3a:ce:17:87:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=88c34063-a248-4f35-b28a-74473a01c85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:2c:27:2f:ca:74:ca:28:7f:92:0d:35:55:
85:40:0d:50:0b:ca:43:9d:11:59:9c:07:b3:8c:93:
24:a2:0c:e0:a8:4c:67:92:fb:54:d5:31:2f:e9:7e:
d1:5d:bc:22:2f:0c:a6:c8:0c:91:ef:2a:7f:ca:01:
a2:17:8d:4f:7b:44:53:bb:bf:3c:41:75:fa:98:de:
5e:e5:4b:55:b2:96:4e:81:c4:6e:30:a1:4e:c1:4e:
34:ed:b7:93:a4:df:74:ed:8a:df:71:7e:04:ed:bd:
1f:f5:63:95:79:46:32:5f:82:f8:33:9f:35:a1:c0:
57:c7:2a:a1:02:3b:fe:a4:8a:e8:e3:25:0c:16:ee:
83:48:e6:e9:95:74:10:b7:94:c7:cf:ff:59:3e:a8:
03:67:b6:9d:18:1e:d8:90:76:c8:17:ff:09:bd:bf:
1e:93:6f:2e:dc:d5:f0:9f:22:e8:6d:5c:d7:f3:ff:
2f:ba:e6:b5:d1:01:e7:37:45:35:6a:d8:4a:bd:82:
87:a9:b3:c3:63:8a:ea:0f:50:ad:e1:98:6a:98:ae:
0d:ce:00:65:52:d1:d7:bc:73:39:60:ce:d3:b1:61:
6d:a4:01:dd:23:af:5b:01:48:a7:d9:4b:ce:d1:1d:
fe:70:56:cc:6e:05:0b:2b:8b:1d:21:e4:77:9e:f7:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:66:15:AB:AE:59:9C:BD:60:46:48:BA:F0:33:E3:8B:08:8C:3A:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bd8ebd0-3552-3108-aa02-ab7386e4101b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
216.233.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:47:e8:28:eb:16:09:1b:e8:a6:f6:bd:10:56:53:ca:d2:05:
c0:6e:83:22:77:cf:d0:f6:d1:20:8a:de:10:06:89:b5:e5:2a:
ff:fb:c6:88:15:82:4e:3b:36:d1:c5:13:c0:ef:43:65:84:7f:
a8:60:f1:f5:ef:57:02:47:15:5a:55:ae:67:d1:7c:26:39:14:
bf:e8:8a:cc:d3:82:e5:5d:0f:20:84:b6:2a:ad:3b:7d:08:cf:
9d:92:89:b1:de:5f:a3:7d:c3:bf:77:15:32:74:3b:53:07:d8:
68:76:03:4c:3f:0f:18:2a:f4:b1:f0:e9:cd:1f:6a:a6:d9:d0:
d2:d8:2d:d4:ef:5b:2e:70:59:99:9e:6d:57:97:51:4e:11:9a:
f6:8d:d1:f9:15:15:64:90:01:99:b2:f2:44:82:fa:f6:d8:45:
df:2d:eb:9c:d9:c0:1d:42:25:92:c4:55:3b:5e:40:46:d8:ce:
b5:26:a2:7b:45:b0:46:b4:2d:18:a1:e0:6b:3d:f2:d3:12:d7:
74:7e:77:ba:dd:7b:66:63:6e:ae:1e:cd:7a:3f:22:89:a8:ff:
bc:6c:c1:2f:05:2a:d7:f9:65:a3:00:24:06:16:19:31:e2:f3:
21:fb:61:0f:f1:94:74:de:4c:c7:d9:18:de:16:b4:67:81:cd:
2b:f1:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:30:42 2025 by rpki-client