Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa
File: 89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa (raw, json)
Hash identifier: ILY2YSLY/z6O5m5E5r2IF48cU+RMbI5JntUdTcWuR1Q=
Subject key identifier: 68:F6:1F:F3:FA:81:12:2E:81:05:ED:D2:93:9D:FC:41:21:2F:4A:03
Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial: 010D0C9F43285848B8F0C67C71A6C51F5DCE4E40
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 40501
IP address blocks: 216.235.80.0/24 maxlen: 24
216.235.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:c6:7c:71:a6:c5:1f:5d:ce:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=0d0c18b1-b3d4-4ce2-a690-a10c590fe165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:75:af:b2:00:9f:b4:3e:c7:82:6c:a2:8e:43:
c2:5d:7f:82:4a:71:09:ba:61:07:28:66:5b:93:eb:
18:81:b3:01:ee:b1:dc:83:2f:cf:e8:87:47:a3:91:
c1:e9:37:56:f5:fd:ee:c1:7b:a1:64:76:e6:40:2e:
be:e6:06:4c:7d:86:17:1d:37:26:23:03:4c:d2:e3:
04:28:87:94:83:8b:60:51:11:84:0a:76:fa:42:c4:
89:97:da:4d:c1:18:96:3e:c9:9c:2a:3a:e4:37:5a:
ce:73:28:d8:35:76:d1:f1:83:5a:a3:b1:05:1a:a5:
b8:da:94:17:34:5c:d1:45:92:45:6d:b6:d8:8e:b6:
b5:f3:ad:36:b0:11:87:bc:a5:c2:32:e6:df:c1:c7:
ca:24:42:52:c0:7b:7f:2b:14:2a:85:c7:04:47:e1:
cc:ea:34:7e:8f:45:2a:de:b3:67:c4:7b:0d:a5:a1:
27:55:a6:48:c5:ef:42:7b:88:4a:42:2b:fa:b7:fa:
c1:c5:7d:34:2e:72:42:88:c2:7d:52:96:89:05:05:
dd:a3:52:de:41:99:1d:97:7c:a2:00:55:c7:7c:47:
62:e2:df:69:7d:ad:b4:da:55:df:58:4a:7b:00:dc:
f7:d2:4d:aa:a1:ba:f4:2f:95:06:85:0c:c1:f3:a3:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:1F:F3:FA:81:12:2E:81:05:ED:D2:93:9D:FC:41:21:2F:4A:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/89a2a09d-07aa-34d4-80d6-c44a4ede830e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
X509v3 Authority Key Identifier:
keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.80.0/24
216.235.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:e0:8a:f2:be:0e:6e:15:99:8b:d2:c9:06:7d:ba:a3:76:21:
65:a9:08:86:14:f0:cf:af:f7:b8:f4:56:ae:54:60:ad:21:2d:
b2:2d:2a:c4:2d:54:df:b2:b0:e7:b3:5a:04:2f:1b:63:88:9b:
17:1b:47:93:52:d1:2b:a3:c8:2c:8c:9e:d2:7f:81:3d:bb:c0:
9e:ef:f9:10:f3:41:ed:00:65:de:35:58:51:8d:58:51:f6:01:
af:9d:b0:01:9a:58:96:e6:87:19:63:d0:df:7a:5c:1a:8b:d1:
84:c9:47:69:e4:81:e2:45:08:90:4a:07:99:d8:be:dd:0f:67:
01:4d:7c:78:d0:9c:a6:d3:2e:c6:b2:f7:50:98:d1:7c:0a:19:
03:80:b2:42:d8:a9:8c:1a:b7:fe:6a:51:0b:78:e2:a7:08:67:
b0:ae:5e:f3:a1:85:1a:42:35:7c:4f:51:ac:d4:54:49:ed:78:
74:e6:94:79:da:49:96:87:90:98:de:54:c3:35:c0:93:b2:8a:
51:f1:74:94:20:3f:df:6f:0a:1b:21:b6:b5:84:f5:a4:2d:74:
62:ca:c8:fc:34:ce:d7:98:2b:24:5c:86:f3:18:8a:b0:ff:14:
1e:1b:e4:10:49:0c:23:f0:d3:f1:6e:82:27:89:3c:17:cb:26:
fc:c3:f6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:22:51 2025 by rpki-client