Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa
File: b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa (raw, json)
Hash identifier: l0Prh/uQdWSPQzGZJ5hiqaFPDhxTNKjoKcwhKOeXOaE=
Subject key identifier: D3:E1:1D:EA:08:C1:75:F5:BC:B9:97:47:0F:C6:72:90:12:43:8F:7B
Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial: 010D0C9F43285848345568230663904920D9C914
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 40501
IP address blocks: 216.235.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:68:23:06:63:90:49:20:d9:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=fea05187-d437-4686-8b65-6f46ccd6df92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:95:1b:b1:65:99:5f:6e:09:9c:f5:5a:72:
50:bb:a7:55:60:1a:8f:7f:15:c2:27:50:22:aa:ef:
56:ab:7a:a0:7e:68:e3:0a:3c:22:da:09:8c:60:96:
02:cc:30:87:6e:72:d3:c2:4e:0c:ea:23:1a:b6:da:
3c:27:e1:85:3a:c3:29:f3:ca:53:61:8d:f4:9e:6d:
bd:42:9f:32:4f:87:bf:67:25:0a:46:1e:49:d6:ea:
64:2e:a1:41:8d:b6:f3:3e:32:c9:7a:c1:f7:e9:3d:
fe:a5:1a:7c:cc:01:25:08:5f:f9:32:2e:91:d4:f0:
da:57:30:c2:64:8a:4d:3e:03:25:e6:85:58:20:18:
84:5e:8d:23:1a:a9:1b:06:16:85:36:c1:f5:47:8c:
19:59:f0:51:7b:77:ab:13:95:92:11:66:58:c1:6b:
6a:36:82:15:c5:e7:3a:9d:96:bb:d4:0b:77:1d:ab:
03:16:27:90:1a:80:fa:53:cf:a4:d4:d8:21:36:e7:
84:47:76:d0:63:40:08:64:de:0b:61:db:f2:09:47:
5a:64:d1:ec:e0:d7:6c:ac:40:10:cb:7d:76:ab:da:
64:f0:4b:dd:be:8a:8e:c9:da:07:0a:f6:9a:42:b8:
78:07:95:32:d2:b4:06:f1:ba:d2:0a:1c:ad:98:a1:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:1D:EA:08:C1:75:F5:BC:B9:97:47:0F:C6:72:90:12:43:8F:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/b6eccfd0-fbc4-37cd-b8ea-f33a03b7c5fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
X509v3 Authority Key Identifier:
keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:4c:97:53:26:b8:f9:56:07:56:91:95:ea:ff:37:10:77:1e:
59:36:ef:8f:8d:f4:84:8a:6d:a4:69:e9:17:c7:19:0c:99:02:
1b:31:d5:aa:ab:9d:23:01:95:96:ef:af:3e:be:b0:19:0c:d1:
b2:96:3e:4d:5c:91:82:7e:3d:10:58:20:99:1b:80:78:b7:5d:
cc:89:ae:81:59:82:c5:bb:b1:fc:05:29:38:4e:66:aa:bb:5b:
72:e9:7f:fb:16:ea:0a:1a:6e:35:9d:e3:b1:2a:21:1e:29:14:
6d:bf:7d:01:86:11:d3:8b:3f:73:e5:c2:6a:6c:2b:47:04:a5:
15:cc:e0:fc:fa:67:4f:86:37:69:a5:a5:13:8c:6d:f0:d5:13:
31:d4:28:3e:52:46:e5:01:7b:02:1f:b8:65:75:cf:57:2e:f4:
53:61:aa:0c:0d:f6:e6:77:6e:3d:65:c5:ec:d3:78:9b:a4:3f:
73:86:14:65:50:13:f4:df:29:2f:00:61:c0:e9:c0:64:ae:93:
72:f4:83:36:8a:bb:5d:68:44:6b:e8:be:54:86:0a:03:58:eb:
01:1e:d2:6c:20:e7:66:c1:f3:53:f5:93:96:d3:96:42:10:b3:
fb:bf:aa:8a:4c:df:69:30:7a:e9:cc:6f:10:19:16:b7:0b:2e:
aa:02:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:37:47 2025 by rpki-client