Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa
File: fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa (raw, json)
Hash identifier: Tscu52Ba+Qrwjcor/cc77rMXssGWOzEE8v8GO9gOMnM=
Subject key identifier: A3:FC:B8:84:C2:5F:8A:C9:63:22:76:1E:CE:E1:85:0F:E3:0A:0F:22
Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial: 010D0C9F43285848F65BE1D96172C824F254AF00
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 32482
IP address blocks: 216.82.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e1:d9:61:72:c8:24:f2:54:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=1fd66851-387d-436a-bc99-b17e91791831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:2f:31:7c:1e:7a:2d:08:f4:67:27:fb:fe:
4e:d5:e0:6a:2a:58:f8:54:e5:22:a4:95:dd:87:26:
d1:da:b1:e3:a9:bb:2d:fc:45:60:69:68:c0:71:b4:
16:6a:84:aa:fa:ac:29:36:32:6b:7c:63:e2:8e:df:
33:4d:8e:90:65:d4:21:16:b2:87:bd:e9:2e:cf:63:
a5:59:de:4f:83:0f:01:b8:d0:59:c7:91:8c:82:41:
5a:74:7d:0e:ca:5b:6f:97:01:57:38:96:4d:ef:da:
72:ec:e9:d8:56:6e:6e:a4:6b:d6:4e:7c:83:90:82:
f0:4f:bd:23:32:bf:63:68:a7:6c:a4:8f:ec:0c:11:
95:5b:28:f9:bd:4d:91:f7:51:50:d1:14:4b:14:f7:
5f:91:02:80:eb:2d:b7:bb:e2:28:02:fe:ac:95:16:
6a:79:a9:f3:40:51:e9:73:b6:38:a9:fb:fb:e3:53:
b8:a2:01:00:9c:b5:2a:e0:c4:b7:d8:2d:8e:1f:a6:
f9:3e:7d:11:49:fa:d0:51:9b:cd:28:2f:f9:31:b9:
bc:33:7e:63:2f:d9:68:ca:ea:ba:f8:16:4a:5a:7f:
18:9e:ed:db:04:3e:9d:d6:1e:45:df:a4:f6:ac:62:
23:da:d5:50:ae:a6:34:9a:4a:86:2f:e2:5c:e4:23:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:B8:84:C2:5F:8A:C9:63:22:76:1E:CE:E1:85:0F:E3:0A:0F:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/fddb6154-d8ef-349a-ad7c-f41cc2150f43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
X509v3 Authority Key Identifier:
keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
sbgp-ipAddrBlock: critical
IPv4:
216.82.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:a7:4e:f0:a4:49:39:fd:26:af:53:8d:63:c8:3d:db:d5:35:
2f:63:27:b2:85:7d:85:79:74:dc:13:65:fa:3b:52:ea:5f:38:
3a:78:b4:8d:f3:9b:b3:2d:31:3d:38:f5:0a:a4:9c:21:b0:1d:
9d:06:18:7e:57:f9:65:b7:e3:c5:75:1b:c6:29:27:a0:73:47:
a0:b3:9e:fa:fb:10:e4:d6:92:30:92:06:61:75:03:72:b9:a5:
cf:21:5d:17:bf:43:d5:20:e5:b9:0d:42:94:7d:ea:b8:20:3b:
cf:bd:6c:62:7a:a7:b5:fb:12:28:2d:1c:a9:6d:49:d6:7b:a8:
64:1a:fd:9e:0a:fa:40:a3:9c:8f:33:b5:4e:e8:46:51:dc:71:
63:ce:28:b4:7b:46:b5:fe:f6:f4:7b:bb:3e:b8:c8:e3:68:5a:
aa:cf:56:fa:28:11:72:9f:3f:f3:1f:62:b7:40:d6:c1:d4:37:
61:93:33:71:15:f2:90:cb:ba:7b:e5:41:b6:ba:94:ba:26:5f:
38:b6:e9:83:66:b8:5e:d3:c0:8a:93:a7:10:15:19:d2:e5:42:
ca:05:65:2b:a7:f6:89:57:7e:60:40:d2:16:76:37:5f:c6:47:
f0:08:bc:37:6c:bb:33:3d:8d:69:df:ec:9b:32:c2:d0:7e:aa:
20:4e:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:19 2025 by rpki-client