Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a4aca5d9-3b7d-3a64-9525-72750142f185.roa
File: a4aca5d9-3b7d-3a64-9525-72750142f185.roa (raw, json)
Hash identifier: a4N2Mkp2X1kVV7Gs1cpToga5JBIqVF6QYoHeDb7pttg=
Subject key identifier: 79:F3:22:BE:04:E9:95:39:3E:C5:F4:7D:11:9A:EB:8F:39:20:7B:E7
Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial: 010D0C9F43285848F6105B73ACA0B6E813EFB100
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a4aca5d9-3b7d-3a64-9525-72750142f185.roa
Signing time: Fri 21 Feb 2025 23:28:42 +0000
ROA not before: Fri 21 Feb 2025 23:28:42 +0000
ROA not after: Thu 22 May 2025 22:28:42 +0000
asID: 1299
IP address blocks: 216.144.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:10:5b:73:ac:a0:b6:e8:13:ef:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Validity
Not Before: Feb 21 23:28:42 2025 GMT
Not After : May 22 22:28:42 2025 GMT
Subject: CN=8f6fb259-bc56-4d28-8baf-79d1209b42e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:6f:ed:50:d2:5b:c7:02:9c:2f:7f:b5:2a:
d2:d7:ec:3b:36:33:8b:f3:fb:07:3b:7d:df:4d:e8:
fe:00:03:7b:60:7c:64:61:26:a0:65:ab:99:73:a3:
7f:c4:4d:34:0b:f1:f2:cc:55:56:f9:37:a6:82:f7:
da:d4:4f:af:70:9a:8b:6e:7f:e2:aa:ed:a3:71:54:
ce:74:5c:b8:9c:5e:b5:80:6e:cc:86:96:36:74:63:
a8:8c:75:7f:2b:96:48:f6:bc:b1:e8:ea:be:c6:ab:
e5:89:e7:4e:a9:d2:2d:ee:4a:2f:2d:77:e5:10:b4:
a3:2a:b8:1f:95:ff:d8:54:ef:05:44:14:27:2c:3d:
5a:85:51:2a:98:40:c0:6e:4b:d1:f1:44:3c:d7:9c:
ef:96:37:d8:94:4e:25:8b:3f:08:74:b2:13:93:96:
e2:87:be:4b:34:37:c8:16:26:2e:9c:d7:48:19:b5:
95:5c:1d:2c:a5:8e:99:39:52:eb:98:50:f0:a2:cf:
ae:fb:3c:64:65:54:30:ec:ba:ef:22:58:e5:ab:c9:
ca:e9:3c:ec:da:2d:ba:b9:98:a2:4f:34:df:f7:a2:
57:9b:00:e8:0b:75:ce:bc:98:cd:aa:7c:f7:04:e4:
8b:83:4f:51:2c:8f:15:32:b3:d6:06:82:5f:af:10:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:22:BE:04:E9:95:39:3E:C5:F4:7D:11:9A:EB:8F:39:20:7B:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/a4aca5d9-3b7d-3a64-9525-72750142f185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
X509v3 Authority Key Identifier:
keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.144.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:0b:d5:71:87:c2:46:8f:db:4c:26:a8:8e:5a:7a:4b:aa:c3:
8f:d6:ba:ae:d7:f5:1f:06:69:8c:ce:9c:7b:77:65:98:0f:37:
88:47:34:3c:cc:13:bf:2b:c8:d4:6c:8c:b5:18:d4:0e:a1:73:
69:3f:c2:63:14:91:3d:e7:3e:b6:74:de:1b:ff:a1:78:44:39:
7a:80:ab:b0:8c:fd:25:b7:4b:71:c8:7a:d5:4d:6c:3d:54:05:
7d:74:8c:ce:78:bb:f6:da:ed:36:ef:e4:90:a8:28:58:87:b1:
03:c9:28:a2:a1:7c:8d:9a:fd:75:eb:57:3c:ef:c8:2b:9a:7e:
eb:6f:7c:6f:da:6f:7d:3d:51:c5:e9:ba:a6:9f:aa:1a:06:a7:
0e:ad:a3:42:44:f2:ed:fc:b1:6d:15:12:56:79:d6:99:41:a1:
17:20:a0:a7:72:5a:4c:9a:ee:f3:fe:e9:5e:33:cc:c2:8e:c3:
12:ac:8e:27:8a:31:8c:77:62:56:56:9d:57:cf:0a:58:cc:85:
7d:3a:ff:de:68:bc:22:d4:3f:4f:0b:81:28:16:0e:5f:4f:4d:
bf:f1:73:73:87:36:c0:5f:4d:c6:5f:d2:1d:09:24:d1:94:82:
f2:9a:e5:23:96:b5:df:fa:62:8b:50:d5:8c:ad:67:70:24:a6:
e4:b6:d2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:34 2025 by rpki-client