Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa
File: b33af0fc-e9a0-358c-8666-2e266d81251f.roa (raw, json)
Hash identifier: IT/LB5VppoeGRAXIkIsRi6Fy5zw9eR041IDgaONJ/Sw=
Subject key identifier: 5D:81:82:A6:84:2C:1A:5B:5F:E3:03:B1:86:CF:5B:1A:11:DB:76:89
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584937D940BF4D5FBD3903A5C130
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 6939
IP address blocks: 216.66.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:40:bf:4d:5f:bd:39:03:a5:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=4b706994-6be4-4e13-b0e6-c407d1b711cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:13:ad:12:33:4f:cf:19:c6:08:6b:50:55:
f0:0e:15:f8:0d:d0:1c:96:25:9d:c0:d6:a3:60:ba:
98:43:d7:3a:c0:87:34:fe:82:17:36:26:c3:e8:34:
9c:93:c6:ec:43:07:45:22:3c:c1:c9:eb:4f:37:4d:
35:3d:3f:70:9f:0b:6a:85:63:60:92:f6:4c:bc:b3:
60:45:f0:f4:d1:34:3c:70:87:a3:59:eb:de:75:5c:
5a:44:8d:ba:05:e7:1c:d7:23:3b:09:56:a8:85:59:
04:c8:92:61:41:0e:2c:7d:90:e2:1f:3c:c0:f4:15:
49:7d:e3:d5:36:05:c9:cd:e3:39:07:51:e0:c5:21:
3a:83:d1:51:5a:ef:89:57:b9:7f:68:30:b9:99:df:
97:26:ae:1d:a0:67:af:bf:cd:e4:03:55:d0:2f:73:
c1:8a:e7:46:7a:2b:a6:e3:44:6a:e2:9d:c9:63:5f:
a3:dd:65:53:fe:00:9e:9d:28:07:88:90:93:22:b4:
f4:04:11:02:92:45:b8:f5:dd:c5:bf:cd:0f:48:ec:
12:03:16:2a:46:71:da:5a:a3:8e:90:f1:09:a6:51:
52:6d:60:6e:3e:04:c6:97:86:9b:98:ee:5c:7c:5e:
7b:ec:dd:a7:03:8d:82:2b:c8:2f:5a:be:8c:cd:10:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:81:82:A6:84:2C:1A:5B:5F:E3:03:B1:86:CF:5B:1A:11:DB:76:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b33af0fc-e9a0-358c-8666-2e266d81251f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:d4:8a:94:40:aa:e6:89:40:68:ac:02:1e:8d:cd:6d:c3:88:
4e:96:96:83:0b:25:09:54:fc:21:6c:5e:8f:a3:97:1e:a3:5d:
9c:96:9a:13:0a:05:6b:96:a5:b2:5f:54:10:87:7d:5f:30:c8:
73:46:eb:80:7c:86:91:0d:95:dc:20:23:57:7b:cb:e8:c6:49:
ef:34:d4:06:12:bb:0d:a7:f5:72:da:21:d0:5d:a2:86:05:98:
58:91:12:2b:76:71:fd:06:3e:39:f4:88:ac:40:11:74:8a:75:
86:1e:89:08:3d:e1:67:f0:2a:3b:20:37:60:3c:67:5b:28:c0:
74:82:e8:5e:ac:d0:cc:0d:d8:4a:f3:eb:0a:b8:06:94:22:1f:
8a:b5:af:59:2c:9f:ee:b1:5a:73:44:f6:0b:e7:f0:ef:60:35:
ea:46:34:ab:46:fb:b8:21:e4:fe:3c:a3:ef:d5:ca:8b:c7:e9:
2d:2b:4c:f2:88:5c:35:08:38:9c:ac:1e:04:e3:48:30:f2:65:
76:1b:c3:b2:9f:b0:1f:3a:e3:c0:b0:b7:bd:cd:06:6f:33:34:
f7:9a:9a:d0:97:73:fa:af:a7:21:aa:80:10:03:ac:55:09:a4:
62:69:a6:d3:db:33:39:9e:27:00:a0:ae:f7:c8:86:8a:1d:fe:
e9:d6:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:51:20 2025 by rpki-client