Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/0ddccc5f-ee76-38d0-96bf-08b3ad9bd22f.roa
File: 0ddccc5f-ee76-38d0-96bf-08b3ad9bd22f.roa (raw, json)
Hash identifier: qfvQ7dK62dsFii4OPx/foJs8UNTAM1rRg2TI5cFZKP8=
Subject key identifier: AF:09:24:85:46:B8:E4:DE:60:BA:0F:68:66:B7:B6:A0:E2:AD:2E:4D
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F432858483B500ACE83780D5B9BAE9580
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/0ddccc5f-ee76-38d0-96bf-08b3ad9bd22f.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 22925
IP address blocks: 216.185.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0a:ce:83:78:0d:5b:9b:ae:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=b4df2d9f-1c31-4285-a565-727fd7477f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:35:fb:46:50:c1:09:e8:d8:16:8b:f9:67:
27:b3:78:18:b1:78:cd:22:a0:f4:79:07:bb:e9:4a:
7a:89:c8:b4:82:b8:a6:54:1b:20:94:e4:21:91:ac:
89:0a:56:3e:79:0e:17:26:c9:50:bb:33:d2:fa:2d:
c7:35:1e:c4:c5:20:95:9d:fb:b7:13:69:08:96:10:
cc:b8:d0:63:e0:14:fa:68:d8:4c:aa:d3:03:42:a0:
7b:bb:36:db:19:69:76:9c:92:5a:b9:ed:85:37:8f:
d3:7c:0c:86:73:d8:bf:23:c6:c9:f1:7f:bb:ec:f2:
ba:fa:ef:72:07:2c:f8:9a:28:f5:09:7c:2f:ce:70:
ad:b9:66:d0:0f:9f:69:57:ae:f2:ef:fc:c1:dd:d2:
ea:7a:6f:f1:18:88:4a:b0:5e:54:24:44:16:ad:ed:
b1:76:57:7b:03:eb:35:84:6d:32:a7:64:1d:6a:de:
61:30:e7:da:93:e2:26:db:fe:1a:c6:9a:dc:ab:81:
61:33:c3:6e:36:fb:c6:c5:e5:84:b4:08:f6:79:c3:
98:06:74:b4:b6:e0:87:ba:f4:06:d8:1a:d1:17:47:
32:13:2d:94:8c:ec:f6:98:ba:3e:47:9b:e3:ea:2f:
20:30:53:ea:17:8c:94:15:70:af:e8:29:6f:92:77:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:24:85:46:B8:E4:DE:60:BA:0F:68:66:B7:B6:A0:E2:AD:2E:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/0ddccc5f-ee76-38d0-96bf-08b3ad9bd22f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.185.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:c9:0f:a0:da:ab:ff:a6:f6:af:b3:80:05:b8:74:76:77:78:
2d:98:3b:dd:d2:3c:24:a6:ca:2d:88:05:14:f7:54:0d:2e:64:
14:73:c0:1a:5a:d4:64:1c:50:87:e9:f3:a7:00:29:74:2e:8a:
4d:a8:db:7f:ce:e4:c4:79:1e:f3:aa:a2:8d:07:9a:91:0b:ba:
bd:1b:1f:e2:86:9d:7f:0b:d1:06:01:c9:1e:0e:78:b7:e6:69:
67:b4:1e:d2:34:0c:37:ec:b4:e8:cc:ab:f9:45:22:c1:e8:56:
6d:47:d1:64:29:3f:14:33:04:6a:83:2c:f5:28:f4:a1:30:cf:
42:31:74:e6:0f:16:16:4e:04:66:a3:cf:71:76:06:76:11:cd:
a5:e7:c9:46:b8:9c:5b:88:6b:1c:d0:fb:80:ce:80:41:bb:0d:
b2:49:e8:2f:c7:6e:dd:b1:39:c3:0b:cb:01:39:e1:af:d2:18:
51:7d:e0:57:d4:b9:f4:c2:5c:21:be:97:4e:f7:15:11:ed:f0:
af:ac:4b:5c:4f:62:2f:2e:1e:af:fd:a7:7f:0e:34:b1:3d:cc:
ce:94:5a:91:94:bd:1b:62:9f:8b:45:2e:48:38:56:dc:f1:59:
cd:80:c8:97:36:f4:91:3b:d5:d2:df:a3:d7:8c:52:50:a8:32:
0b:27:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:21:51 2025 by rpki-client