Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa
File: f890b188-b610-38a0-89b0-8a1a62d249f7.roa (raw, json)
Hash identifier: caVQ7L6v5ybKwZrDikrZF8HnBi282D8zMp2vvD4ektE=
Subject key identifier: 9C:D7:FE:00:4E:44:0E:06:7B:DE:65:29:33:E3:4C:F7:C2:58:C0:AD
Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial: 010D0C9F432858492CAE88DFBBCAAC1D7A610A40
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 216.245.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:88:df:bb:ca:ac:1d:7a:61:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=bd67a40b-9246-42f0-82e6-b54f4f70b56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d3:19:95:03:83:2e:1a:d2:71:bb:12:f4:5e:
78:11:41:f5:30:d4:d7:6e:6d:d8:15:f6:1c:de:fa:
0c:5d:15:d7:29:a5:f5:a0:2d:15:41:0b:ca:6f:4f:
7a:85:f4:f4:a0:ce:7b:79:3a:cb:02:0d:dc:a9:7b:
13:24:1b:34:a5:62:82:1f:1f:ce:44:f8:30:5f:96:
3b:38:c7:e1:37:5e:6a:18:5b:a3:b1:87:47:94:94:
55:3f:91:00:a6:26:e2:84:64:7c:77:81:08:65:8b:
83:0b:59:e1:07:28:c2:90:78:14:a6:78:33:b9:01:
4f:f1:fc:ea:27:95:d9:3d:a5:7d:e4:f0:ca:54:27:
2c:6e:d5:5c:74:57:9f:d3:9f:6e:6c:c2:45:59:19:
48:ac:c7:a8:eb:f9:d8:77:79:21:40:95:4b:36:1f:
d4:3a:33:90:40:9c:cc:16:56:e9:b3:cc:5e:df:61:
5b:0d:9d:a9:3b:99:9c:b9:59:12:47:08:43:db:37:
13:31:0b:b5:db:90:7d:fe:3e:c0:bd:af:29:0b:e5:
16:28:62:d2:fc:5c:ee:9e:25:5b:45:3f:f1:ac:b3:
61:45:b4:1d:0d:e2:41:5a:6b:f0:33:71:b2:23:82:
c6:5e:d8:8d:b0:31:24:de:18:2c:bc:bc:bc:7f:d1:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D7:FE:00:4E:44:0E:06:7B:DE:65:29:33:E3:4C:F7:C2:58:C0:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/f890b188-b610-38a0-89b0-8a1a62d249f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
X509v3 Authority Key Identifier:
keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.245.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:57:80:15:4b:df:6b:93:3f:fa:04:de:c8:e8:a0:ce:44:98:
23:eb:97:c5:91:7e:ad:fb:b5:35:29:d6:95:4b:b0:e3:49:f1:
e1:01:32:87:1c:43:29:ac:ee:8b:37:9f:89:25:b5:51:45:98:
50:c4:f7:3b:93:c4:44:5f:af:a1:cd:a1:39:e3:14:b9:df:b5:
4d:da:b1:7f:3a:b6:ed:6d:7e:c2:e2:ca:4d:91:ba:96:11:11:
9f:6d:f0:88:54:d8:37:25:f9:0c:21:3a:c8:72:2a:7b:17:03:
cf:06:1d:14:90:7a:30:21:28:d2:34:76:28:5d:3e:b8:c3:6f:
18:4d:05:92:a9:e0:c5:e5:da:e4:c1:30:f0:34:bd:b1:e9:4d:
0d:fc:9e:e5:33:05:c9:a5:4b:2b:14:c3:92:c7:72:b3:17:70:
9e:52:2a:0b:3f:91:9a:28:19:c3:4f:f7:12:95:37:82:b2:d0:
ef:3a:cc:77:bc:91:83:94:3e:a3:2c:a5:42:1f:27:0a:84:0e:
84:d5:1c:64:f6:ac:ce:2a:e4:fd:2b:9c:a4:ef:83:e4:84:b5:
19:ef:fe:8f:03:67:69:64:cc:e1:76:59:ce:7a:89:a2:02:5e:
8d:31:b3:5e:a0:3e:1f:ea:7d:6b:fa:7d:60:96:88:08:9d:d3:
99:6d:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:40 2025 by rpki-client