Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3b38bc24-8d49-3254-ad4f-25f11914f514.roa
File: 3b38bc24-8d49-3254-ad4f-25f11914f514.roa (raw, json)
Hash identifier: V2GW111UNA2d/YiA+Siggg4dqs2nqb16rW+CapLSTLM=
Subject key identifier: A4:A0:BC:6F:5D:E4:90:E2:1A:C1:2F:70:E2:4F:24:A9:DC:12:78:C8
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858492CAE98B596C400DC9EAFC480
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3b38bc24-8d49-3254-ad4f-25f11914f514.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 30238
IP address blocks: 216.71.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:98:b5:96:c4:00:dc:9e:af:c4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=e24a3066-16f0-4330-9e39-8c97ea1bebb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:09:da:eb:9f:74:bb:20:11:79:25:05:58:
0f:e2:0e:c4:b5:ad:05:d1:c6:32:da:93:0c:37:03:
c2:12:59:63:63:4c:54:71:b8:62:52:76:8f:d7:26:
9d:86:be:e4:90:d6:59:d7:30:d3:b9:0e:d0:88:91:
5c:29:5b:da:ad:a6:5a:59:f3:a3:53:39:a1:14:a9:
97:a5:b6:a5:b9:f0:58:01:88:cb:96:d8:9b:a1:36:
1e:6d:ef:b9:33:bc:bc:69:f7:01:dd:29:36:31:c1:
79:53:93:76:22:92:35:ae:d8:f0:88:36:66:ad:54:
84:c4:2b:a5:49:56:a4:5c:a6:27:61:22:1d:52:0a:
89:f1:0e:ba:3f:8f:6c:13:2f:fd:fe:bf:d0:44:a8:
93:92:7e:c8:08:fe:fe:3e:16:8f:cc:88:e6:36:7d:
93:55:1d:9b:69:3f:44:76:27:aa:a9:55:0b:36:e9:
54:54:2a:36:bd:62:4d:18:7d:30:fd:a2:e1:6d:0e:
87:4e:6b:f8:10:a7:79:ba:24:07:3f:a2:1c:92:35:
3b:cd:2f:42:89:38:a0:0e:4b:92:fb:4f:16:46:59:
9d:b9:10:41:fa:cf:d0:16:bf:80:19:4f:ab:d5:be:
21:62:be:0f:5c:3c:48:7a:29:28:22:71:9c:e1:da:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:BC:6F:5D:E4:90:E2:1A:C1:2F:70:E2:4F:24:A9:DC:12:78:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/3b38bc24-8d49-3254-ad4f-25f11914f514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.71.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:2b:1a:c8:cf:da:e4:05:d3:ca:f7:d0:cd:6e:b2:6d:b5:6c:
a7:df:b9:91:0e:73:9a:50:e4:ec:ce:14:0d:e8:0a:c5:36:9e:
c5:3e:2b:ae:6e:49:8a:e2:86:52:49:8a:54:d8:fc:ff:1b:d3:
ed:46:e7:a1:65:d3:31:3f:93:ba:af:fa:4c:1f:84:98:9b:41:
84:69:0d:4b:cc:a4:78:a9:5d:81:2c:a4:21:22:6e:87:23:35:
54:de:74:01:83:46:ba:a6:7b:ff:41:42:6e:10:95:a1:eb:d6:
39:60:1b:1d:a5:a2:60:56:75:90:3e:b5:08:69:ea:ae:3a:4a:
30:09:61:91:d5:9d:c0:4c:67:38:ec:dd:db:33:03:fc:34:87:
9b:37:86:30:7e:cf:32:10:7a:3c:ba:29:80:75:a3:e5:65:ac:
25:47:9f:55:3a:ed:94:ed:35:b7:af:ed:78:39:2a:00:53:2a:
e6:78:61:ad:78:11:dd:cc:d8:a5:33:74:16:63:8b:93:50:13:
c6:53:76:f4:48:08:a2:4c:e0:e0:ac:62:21:e4:ac:32:85:e1:
77:fa:8c:3f:48:44:c9:2c:b9:bc:21:1e:d2:36:e0:3e:63:31:
4c:bd:e2:4c:be:ba:37:86:77:25:db:40:16:8d:08:31:d6:62:
d0:6d:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:08 2025 by rpki-client