Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/f2ad8f20-9ab4-345e-97a6-3f6b3192f8d2.roa
File: f2ad8f20-9ab4-345e-97a6-3f6b3192f8d2.roa (raw, json)
Hash identifier: unNMtwhtJyn0uCTHP/OM2h2DRYuUk/m7WP6KyQ/Fupg=
Subject key identifier: 83:87:41:B5:64:2A:E3:79:8A:A3:58:E1:AD:6B:32:37:54:9E:74:D9
Certificate issuer: /CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b
Certificate serial: 010D0C9F4328584802150492C1FDC99DDA029400
Authority key identifier: BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/f2ad8f20-9ab4-345e-97a6-3f6b3192f8d2.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 19704
IP address blocks: 216.57.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:04:92:c1:fd:c9:9d:da:02:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fe72d3-c7f7-4c93-a9f0-a57341b2590b
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=b31a8e3c-1833-4fc6-a087-f10faed4eeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:91:01:40:50:78:11:bf:ed:51:d4:b3:7c:
75:1a:59:b2:d1:9b:43:71:cc:fa:aa:8c:2e:76:65:
0b:47:e4:1a:d2:be:8c:fd:7b:3b:92:0b:d1:2c:c3:
68:d9:d6:e3:e9:63:9e:81:26:96:d4:52:d2:00:c4:
c9:ad:36:65:75:e9:cc:0b:56:f0:bf:70:4b:f6:1d:
a1:e5:5c:82:d3:aa:48:2a:f9:f8:f8:0d:bd:38:dd:
eb:ba:93:eb:9b:38:da:cc:8a:ad:fc:51:83:19:71:
d9:73:82:67:a0:1a:a6:66:e4:26:e0:04:66:d3:47:
a7:91:9a:57:1c:56:d7:ae:20:e8:60:ad:cb:4e:8e:
3c:f6:5c:52:48:8d:2f:bf:91:71:86:e8:8d:95:67:
1f:9d:76:c2:39:b2:ba:37:cc:f6:ac:32:f2:45:2a:
a5:c8:ff:c5:9b:28:41:65:ab:11:48:ab:e8:d1:c7:
2a:08:7e:16:6c:f9:d6:cd:41:6f:59:cf:c0:52:cf:
9b:62:9b:d8:1c:ff:82:40:28:db:fa:12:73:04:e8:
c3:06:96:59:8e:26:a5:24:b5:7c:69:da:d8:6a:6f:
f3:ef:89:c7:b2:ad:6e:49:e0:5b:c7:d7:51:b1:36:
2a:67:1d:ca:2d:23:27:be:8e:78:d6:76:d6:2e:74:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:87:41:B5:64:2A:E3:79:8A:A3:58:E1:AD:6B:32:37:54:9E:74:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/f2ad8f20-9ab4-345e-97a6-3f6b3192f8d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.crl
X509v3 Authority Key Identifier:
keyid:BE:9B:F0:43:E1:E7:AA:A1:01:9C:05:F4:D3:42:A4:DC:9F:7E:C8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74fe72d3-c7f7-4c93-a9f0-a57341b2590b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.57.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:81:8a:2e:72:7c:de:4c:00:8d:2d:2d:35:ff:86:8b:6e:a2:
6d:09:a1:ea:2b:ae:8e:73:e2:2d:31:55:bf:a9:31:16:2a:34:
d4:fb:5a:a4:9f:79:13:61:93:5d:95:16:c5:33:35:2c:68:eb:
88:8f:2b:55:e5:1f:19:b9:a5:b2:ed:46:83:7e:ad:fd:85:6a:
3e:7d:05:7e:78:3c:16:f8:e2:e7:1c:26:64:57:07:7c:ba:a4:
db:03:85:4a:0f:2c:b0:02:63:5c:a0:a7:59:3a:d3:f9:bc:d3:
b7:85:db:fa:7b:79:8b:39:3e:b1:e8:a6:4d:d1:5e:7c:a4:c0:
9b:b1:9e:fa:cc:0d:c0:e5:5b:04:48:05:99:dd:c3:60:fe:c2:
06:61:1c:ba:ae:b4:0b:70:d4:58:e5:3e:0c:10:40:5b:d6:6b:
36:72:7b:21:87:d5:3b:98:5f:cd:c0:9e:85:e0:55:9f:4d:1c:
c6:99:79:f6:7b:ed:da:82:28:36:ce:f4:6d:7e:55:51:85:8b:
77:66:6b:11:58:8a:75:52:b0:1a:04:2c:8b:e1:d1:3d:f8:92:
b8:f1:c9:06:22:4e:ef:6e:35:d1:4c:c8:87:90:05:8c:e6:1d:
11:f1:be:1a:69:f5:73:59:11:90:ad:d3:f7:fa:5c:4e:8e:fe:
f6:be:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:24:27 2025 by rpki-client