Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa
File: d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa (raw, json)
Hash identifier: rwsyvI7ma3CybuIVGK3/eH5GCeHfFSlsaFsWFpu6Gss=
Subject key identifier: 71:0A:96:7C:5E:9F:10:DE:9A:77:90:B0:62:21:8E:3F:B4:43:59:8F
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858487325B16FE31E146F7889892C
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 22781
IP address blocks: 216.131.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b1:6f:e3:1e:14:6f:78:89:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=60c054c5-55d4-44c1-bdc1-f198300e158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:27:c2:f2:b0:2f:65:92:26:fc:a2:67:60:8d:
60:06:cc:38:64:c5:55:20:ba:b5:fe:84:5c:6b:6d:
14:b0:de:45:7a:a6:c2:36:81:97:db:df:7d:ad:b2:
4c:e7:db:95:82:c3:c3:79:a3:ad:54:e2:8c:af:a7:
a8:91:c3:e1:79:50:91:89:a4:f9:c2:69:73:4f:de:
26:0c:a0:93:bf:24:bd:ae:82:f4:6d:3e:d4:17:a4:
fe:6e:54:17:2f:59:9a:26:a4:38:e7:96:70:e1:a4:
f7:f3:b3:97:42:d4:51:9b:7e:30:b7:c6:f2:94:62:
50:c5:28:0b:27:d1:c8:8f:8c:22:dd:1f:f6:f2:b8:
f4:4c:8d:f7:d1:f8:1c:69:4e:8e:47:3c:99:b9:0f:
1d:02:ef:f4:df:0e:3f:5c:dd:a0:cd:75:80:86:fa:
b4:99:e0:69:f7:0a:93:6f:43:cb:63:e4:67:22:b3:
3c:d3:0e:33:cb:5f:e5:ac:63:72:a9:a1:51:5f:24:
89:44:c5:ca:36:b4:b9:00:3e:29:aa:36:1b:ad:ed:
a5:20:3c:df:95:db:0d:8a:8b:59:50:b5:54:c2:ce:
ed:67:57:50:e7:f2:79:d0:9f:db:a0:8c:3f:b3:43:
e7:8d:39:d7:7a:d7:43:24:cf:a9:b9:77:6a:e3:71:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0A:96:7C:5E:9F:10:DE:9A:77:90:B0:62:21:8E:3F:B4:43:59:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:9c:ac:b1:2f:d7:5e:7f:6c:48:33:b2:ff:45:d7:b4:b9:2a:
47:db:00:b7:e6:81:4f:a6:4b:d2:ff:05:42:d9:4a:1c:24:e0:
20:86:a2:e9:42:4d:5e:d4:d7:c1:c2:51:a9:f6:bc:43:7f:0e:
96:66:24:46:d1:db:1e:24:19:47:df:b0:45:ce:16:fc:41:d3:
76:26:5a:f1:9c:4d:2f:8d:0e:40:04:37:00:c9:7c:8e:42:c9:
1d:f8:c4:40:6b:e0:ef:2d:e8:b3:93:c8:9a:73:fb:e8:e1:ab:
fc:88:3a:57:f5:23:7d:80:70:21:44:2e:59:85:9e:0e:8d:00:
ed:d8:7f:86:21:9b:02:7e:f6:e6:1e:83:8d:59:cf:9f:80:dc:
ad:e8:74:7e:20:c3:64:31:38:f0:2d:2a:4f:bc:6e:f4:cf:9d:
0f:2d:09:6e:72:b8:2e:cf:e9:6e:ab:01:4e:bc:76:06:d4:16:
6d:93:72:bf:c4:8b:c4:64:45:04:d7:f1:be:cf:6a:33:ac:a6:
b9:3e:ba:39:8d:1f:ec:12:e4:40:c6:f7:f1:9f:a7:14:9d:78:
e7:22:e7:51:88:30:28:3c:7a:e0:91:d7:01:f9:41:0b:56:7a:
b9:02:c7:b1:25:dd:99:8c:b4:60:9d:fe:3b:d3:77:a6:5e:6c:
bd:33:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:03 2025 by rpki-client