Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87c3de23-9fc4-3970-9862-fe9aff94f37b.roa
File: 87c3de23-9fc4-3970-9862-fe9aff94f37b.roa (raw, json)
Hash identifier: YB1ngPLaEU1+LM+XoUcDRyh6OUO99oEguTQNqYy8kxs=
Subject key identifier: 3C:A1:CC:07:DC:A4:E1:1E:3A:46:E1:A9:3B:EF:A8:D1:DE:A2:A1:41
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285848F926D5909D284FBE03787980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87c3de23-9fc4-3970-9862-fe9aff94f37b.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 18865
IP address blocks: 216.218.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:d5:90:9d:28:4f:be:03:78:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=10699ae8-88d3-424a-8fa7-3caf02d657b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:b3:1f:2c:dc:1d:eb:ac:4e:d4:b4:f2:1b:
49:8d:75:81:8e:54:de:9f:81:c4:c4:c2:d2:39:ec:
47:0f:b2:a1:44:cb:3c:75:06:20:1e:95:f7:e3:92:
4f:f5:ab:2c:9b:3b:70:c3:a7:c2:39:a3:27:44:af:
b8:d0:6a:f7:69:4c:6b:10:43:21:b0:e4:dc:7c:85:
54:cc:1e:c5:4f:94:4a:a3:ad:e2:32:7e:7a:e7:37:
af:3a:50:5d:2e:6e:a9:34:19:08:84:4c:20:5e:17:
bf:b7:24:1d:8e:71:0c:4a:3f:5a:41:89:33:5b:88:
43:70:72:aa:f7:3d:83:9b:88:05:1f:82:8b:d7:49:
f7:8a:22:04:ae:39:bd:0e:9a:7c:73:51:58:67:85:
32:2c:e3:c5:73:e3:df:43:56:88:4b:54:c6:80:37:
7a:1b:6d:77:51:c1:4d:87:09:f3:79:e2:4c:60:a5:
5e:bb:d8:fd:cb:6b:6d:39:39:eb:8d:4f:cd:46:68:
7e:67:9c:c5:73:71:a7:27:a0:3f:79:e6:87:0f:71:
6f:ba:86:73:86:1c:43:cc:c3:1b:51:05:60:60:fc:
4b:87:76:43:00:e1:4c:3e:cf:7f:06:6b:0e:d9:23:
05:86:49:47:c8:d6:32:0d:00:12:f4:e3:86:4c:e3:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A1:CC:07:DC:A4:E1:1E:3A:46:E1:A9:3B:EF:A8:D1:DE:A2:A1:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87c3de23-9fc4-3970-9862-fe9aff94f37b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.218.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:fb:7c:61:0b:79:80:94:fd:64:1b:39:a1:5e:59:88:de:63:
69:3a:97:3d:4c:13:43:60:de:bd:1d:a9:69:88:e4:c7:82:56:
e5:59:3a:c8:35:da:51:04:e5:50:98:12:b5:43:40:5c:8f:c5:
83:2e:04:68:5c:10:05:8b:e1:63:22:fc:f0:a7:87:77:cd:ef:
cb:13:9e:fd:39:71:a0:0b:55:9c:f3:33:b1:16:c7:e3:e5:8c:
b7:cb:d4:dd:96:ca:a8:12:3b:a6:d9:42:fa:38:78:03:0c:ce:
a0:d8:fe:2e:b9:1f:02:b3:2c:c7:88:55:85:de:08:1b:62:d7:
aa:aa:6b:43:ac:d7:42:4d:1f:90:44:c6:44:28:4b:22:56:f4:
db:5b:2a:7f:ad:6d:e3:d9:3a:74:4f:9b:4c:24:26:df:88:b3:
67:41:fe:f1:1f:78:86:16:ad:5e:d1:be:3c:ef:69:14:f0:b6:
fc:40:5c:79:87:72:fc:a6:6e:60:2c:e8:4f:39:a3:b0:b6:9f:
d1:e0:d1:19:52:ad:fb:ae:39:5d:83:9b:26:a6:a2:47:8f:15:
8d:64:1b:ea:9f:39:7f:43:59:61:32:64:9d:84:45:79:26:c8:
3f:3b:a5:a0:35:a6:7e:6b:ee:76:32:c4:a8:21:1f:7d:cd:b6:
55:1b:6d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:58:38 2025 by rpki-client