Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/98a98abb-4ed2-35ba-b17e-52fd7419bfe2.roa
File: 98a98abb-4ed2-35ba-b17e-52fd7419bfe2.roa (raw, json)
Hash identifier: HcCIAvu9SXtD3Ov91RIM5N/mEMQnbWFPpOOnp2c9vM0=
Subject key identifier: 54:27:28:DC:7E:3E:C0:24:AD:97:59:20:B7:0F:35:CC:0F:FD:0C:AE
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858487FB5E43955549EDD5104E3C0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/98a98abb-4ed2-35ba-b17e-52fd7419bfe2.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 16417
IP address blocks: 216.71.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e4:39:55:54:9e:dd:51:04:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=18922a07-001d-46d7-bff3-ed89e9f63aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:de:48:dc:74:96:7d:df:aa:37:83:8c:d6:
c0:84:c1:fa:7f:b4:38:72:34:4e:2a:07:05:fc:ef:
a7:0f:3b:54:d8:6a:4d:02:5b:ac:88:cc:22:b5:f2:
94:b7:75:4d:4f:e8:83:1f:00:7d:ee:ba:9a:23:3e:
2c:fd:77:df:e3:7a:2b:d8:05:37:bc:70:4a:b0:29:
d7:fb:65:69:fd:d9:c0:09:8d:b8:8f:03:a0:a0:4a:
b4:64:9f:c9:48:cc:d4:dd:f3:75:32:16:05:b6:84:
e8:c2:17:5c:b0:ad:38:f8:3d:a2:bb:3f:1c:95:6b:
69:9a:f5:2c:2f:d0:ab:bd:2c:fc:4a:6f:bd:52:b1:
8f:ef:68:9d:d6:04:97:bc:5a:b0:0c:30:73:b7:3e:
a1:a3:a8:c4:c2:37:81:d1:aa:6f:c9:1d:3e:e7:88:
77:7b:5a:2f:9e:09:8a:e5:e4:a7:ae:07:ff:07:28:
7f:38:2f:c2:e5:4d:88:34:3b:61:99:15:8c:99:80:
92:c1:eb:c5:05:4d:88:d6:1f:3d:2d:c7:34:ec:6a:
51:02:6b:74:a8:bb:68:5c:d0:5c:f2:3a:a9:a1:85:
e2:e8:08:00:16:4d:2d:b3:c1:81:f1:39:15:0a:d8:
72:e2:ef:c2:f6:bf:88:57:0a:5a:d0:3e:e7:c8:7d:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:28:DC:7E:3E:C0:24:AD:97:59:20:B7:0F:35:CC:0F:FD:0C:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/98a98abb-4ed2-35ba-b17e-52fd7419bfe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.71.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:dd:72:af:b4:c7:fd:3f:db:ab:30:f8:59:31:32:3a:50:86:
a7:18:79:5b:da:7a:a3:37:23:b3:0e:b9:68:d4:fe:8f:02:8f:
5d:85:99:cd:8e:b6:13:87:58:dc:1b:a9:f2:78:b2:83:78:fc:
9c:e5:54:a9:11:db:6d:92:06:18:61:52:ac:63:0d:df:ed:15:
ac:23:db:2d:eb:86:6f:37:ad:15:ed:b9:6f:91:0d:88:48:48:
3d:96:2c:61:ca:3d:77:9d:a2:43:06:d7:8d:04:0a:65:7a:b2:
cf:37:c0:e3:7e:f0:be:8f:5e:da:41:e9:06:65:57:77:c4:e9:
06:2d:1e:a4:a0:e7:c9:2e:a6:50:49:b8:a9:db:80:da:83:23:
aa:ff:6e:21:67:bc:04:54:2b:02:35:2c:fb:5c:21:44:8f:3c:
8b:f0:51:90:3e:9e:d7:5c:d6:c2:c2:70:cd:7b:08:e3:3c:52:
51:e4:c2:59:04:34:0a:ca:f1:d1:d7:dd:ad:1d:89:dc:53:36:
36:b2:6b:61:a4:29:96:a7:be:a3:86:08:fd:98:b6:bc:b5:69:
5c:41:06:2c:ca:5a:ad:b4:7a:e4:1b:9d:d7:b3:d3:95:b0:74:
17:55:8a:46:17:69:67:e7:32:1e:46:56:8a:cd:80:0b:63:91:
a8:cb:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:17 2025 by rpki-client