Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/75e71cf3-71a6-3c2b-8128-c55832ec009e.roa
File: 75e71cf3-71a6-3c2b-8128-c55832ec009e.roa (raw, json)
Hash identifier: FPjfFxz7++cKLpqdYQgRZ6BN4wDaqmxu8ouxVi1XNhk=
Subject key identifier: 26:4E:97:65:42:00:84:EE:FE:A7:68:78:6D:72:13:54:50:95:DE:EF
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858480208284F8FE838CBA9D4BF00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/75e71cf3-71a6-3c2b-8128-c55832ec009e.roa
Signing time: Tue 26 Nov 2024 13:34:56 +0000
ROA not before: Tue 26 Nov 2024 13:34:56 +0000
ROA not after: Mon 24 Feb 2025 13:34:56 +0000
asID: 397199
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:08:28:4f:8f:e8:38:cb:a9:d4:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 13:34:56 2024 GMT
Not After : Feb 24 13:34:56 2025 GMT
Subject: CN=c3bf272f-cf81-4867-bc15-650c247389bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:69:e0:89:47:c2:b6:18:33:42:e7:d9:be:1d:
52:2e:08:ef:25:be:4a:9d:58:27:73:6f:61:b9:3a:
1a:c8:6c:0b:b1:03:fb:35:0f:43:35:f4:f1:3c:48:
ef:2e:8c:65:c4:76:90:9d:9b:a7:58:25:f6:ca:e5:
2b:2d:b3:e0:46:3b:bc:45:73:34:ed:84:9c:52:cd:
48:99:58:21:47:d9:14:4c:b0:d4:06:ac:19:72:2d:
f2:e1:7d:81:b9:06:68:6d:e4:06:0b:ef:a6:c1:c5:
2a:20:24:bb:e5:6b:2c:ce:c0:e9:db:af:09:b7:13:
2f:68:7d:26:48:7a:0c:57:3c:34:7a:77:60:8f:cd:
32:6b:77:a7:53:3d:52:5f:4c:a9:0c:c4:56:3e:50:
be:ac:5a:e5:b7:63:d5:64:cc:63:54:89:d2:44:54:
2b:40:d6:4f:84:0c:35:a0:60:66:a3:56:ce:54:33:
4a:f9:0f:39:50:8d:ac:a6:9b:79:1a:08:87:74:d9:
d5:88:29:76:87:a0:65:60:8e:a7:c3:b8:e7:b3:14:
b7:60:eb:b9:a9:13:3d:83:73:03:b2:02:c5:84:75:
3f:2e:a2:38:7f:e3:a7:0e:e3:78:88:9b:d3:d8:bf:
44:52:ae:3f:2d:fa:54:44:27:e4:97:35:94:75:08:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:97:65:42:00:84:EE:FE:A7:68:78:6D:72:13:54:50:95:DE:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/75e71cf3-71a6-3c2b-8128-c55832ec009e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:b0:3d:ec:64:c5:92:bd:b9:49:9b:dc:d8:32:d9:38:e4:c8:
e1:ac:c8:8c:c2:92:83:cf:0c:49:24:71:3f:ab:f4:fd:8d:94:
c3:3b:ba:03:bf:f7:4e:3c:de:f4:e8:79:cb:be:6b:91:50:6c:
45:ad:76:fa:13:a6:51:a0:84:dc:c8:1d:55:ee:5c:a7:22:31:
58:17:da:3c:81:ed:f8:1e:39:35:a1:82:bc:68:99:61:21:8e:
65:c7:d4:99:9d:2b:a6:ef:4b:e9:70:ac:1c:14:37:02:8d:ff:
29:ba:f4:d8:1b:aa:cf:51:f9:35:71:8d:4c:fb:0b:b4:3b:ee:
ad:d1:dc:37:50:54:15:8d:da:91:01:ee:1b:0b:37:31:db:6f:
89:e8:95:63:5b:3d:20:e2:c6:d4:db:05:a6:0b:51:b0:e3:b8:
73:98:44:e1:97:13:2e:54:41:a9:52:52:9d:86:46:82:8a:28:
7e:32:4f:ae:df:ff:e1:a1:ca:de:b1:11:01:c5:a4:f9:67:bd:
3e:f7:f1:c0:ec:fc:7c:6f:af:cb:a1:21:49:76:f2:3d:03:2e:
aa:f8:41:12:ea:15:9d:5d:5c:40:0b:db:a9:d3:e5:0d:30:fa:
b6:75:de:3b:17:f6:21:b5:17:7d:b6:7d:f5:eb:48:e2:b3:dd:
dd:f2:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:24:35 2025 by rpki-client