Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe4fa1a0-d297-3389-bad3-0e9a0daccaca.roa
File: fe4fa1a0-d297-3389-bad3-0e9a0daccaca.roa (raw, json)
Hash identifier: +oRfbxAYxf6hWluS5azCR4b5H+KGGhpKgLI2ArPiqgM=
Subject key identifier: 86:FE:56:28:3D:23:3F:F0:43:53:DB:9B:74:91:F7:2A:B0:6B:B5:FE
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584802082CABB79B6F2976C5CA00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe4fa1a0-d297-3389-bad3-0e9a0daccaca.roa
Signing time: Tue 26 Nov 2024 13:34:58 +0000
ROA not before: Tue 26 Nov 2024 13:34:58 +0000
ROA not after: Mon 24 Feb 2025 13:34:58 +0000
asID: 396573
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:08:2c:ab:b7:9b:6f:29:76:c5:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 13:34:58 2024 GMT
Not After : Feb 24 13:34:58 2025 GMT
Subject: CN=7a66b6cb-5c7b-48b3-ac8d-80abb16ff5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b1:99:8b:4e:c2:cb:bb:d2:d8:b1:47:8f:81:
01:8d:ba:86:51:84:1a:a1:70:ed:b1:78:20:d6:76:
18:ed:3e:27:28:ea:87:e3:37:6a:28:fc:51:31:42:
1f:b1:a0:21:96:f7:34:be:76:52:86:b2:1e:35:00:
09:84:d7:6d:9c:e4:0d:b6:43:7e:d2:27:74:be:79:
33:25:c5:90:ed:fa:ee:cb:a7:06:60:52:ce:35:de:
a1:41:29:68:56:cc:eb:fe:ff:23:7a:1b:a2:3e:fb:
46:c9:9a:ad:8a:34:13:83:1b:0b:81:c8:2c:a3:5e:
99:81:58:b9:76:de:87:4d:56:95:7b:b7:dc:99:21:
88:40:05:1a:ce:6d:63:a7:72:b0:75:db:06:65:b1:
2e:2c:b0:d4:be:0d:ab:77:ca:d1:d8:02:2b:03:ec:
88:a8:33:87:2c:6f:fd:05:14:67:b3:a0:bb:4e:b7:
60:f6:fc:e0:85:25:fc:d6:17:b6:b4:57:d3:73:c3:
c4:2b:f7:d0:83:aa:1b:6d:0c:51:59:29:c2:1f:32:
65:d7:f3:aa:d8:b1:fe:19:bd:10:4f:46:92:7f:c2:
1b:e5:75:d4:c3:22:73:26:e0:39:87:e1:1f:8d:66:
5a:de:8b:49:45:a8:54:95:be:ba:5f:f6:05:1b:7e:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FE:56:28:3D:23:3F:F0:43:53:DB:9B:74:91:F7:2A:B0:6B:B5:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe4fa1a0-d297-3389-bad3-0e9a0daccaca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:d8:39:dc:44:59:56:54:ea:72:b1:a4:a1:25:a2:e3:0a:9f:
c3:c3:4c:5e:13:27:74:f4:c7:3b:7e:72:b3:4c:fa:68:bc:a0:
8a:21:18:77:4e:df:97:05:9c:cd:5e:06:ca:33:91:40:51:4f:
ca:33:28:95:10:2d:8b:ea:5d:7b:85:0d:f2:20:68:db:a8:eb:
21:02:a8:d3:84:9e:79:d6:3f:60:93:51:7b:8c:3d:c2:99:fa:
74:39:a0:24:0d:00:e9:40:da:9d:aa:8a:d1:d2:c2:5a:29:0b:
75:22:d3:d6:d7:2b:6d:84:67:25:2c:fd:fe:3b:02:50:d3:26:
8d:19:14:f8:1e:64:b3:3f:f4:4d:e0:16:48:fd:56:b2:2c:68:
0d:65:3b:fe:74:94:d0:78:a4:7e:e6:e5:40:9f:f7:fc:0a:d9:
e9:e6:ec:4a:ed:55:98:ee:2a:cb:d9:6c:56:d7:34:13:8f:68:
7e:fd:e6:58:19:01:43:1b:4b:06:d2:07:55:a2:14:77:69:38:
7a:4a:83:0f:8f:53:12:4d:d9:09:be:d7:aa:e9:78:2f:db:bd:
57:9b:e9:75:7e:0f:05:ed:73:9f:10:31:3d:b3:96:8a:27:e3:
15:f0:af:6e:be:c8:05:98:a5:fb:3a:94:65:77:a3:7b:c0:f5:
20:4c:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:50:20 2025 by rpki-client