Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/213b1cb5-785e-3f75-babd-806ac6f1872d.roa
File: 213b1cb5-785e-3f75-babd-806ac6f1872d.roa (raw, json)
Hash identifier: iZKyzR+X/uVLUB9HsNqjXuEfbZ9hprxFEnsJ9Igfi1I=
Subject key identifier: 53:67:91:71:4D:70:C9:5F:B7:07:E6:BC:5F:4F:4D:CB:08:43:BC:18
Certificate issuer: /CN=86f7a77b-e956-481e-b990-dda9c01233ef
Certificate serial: 010D0C9F43285848A565F3E029C9D7EED8D21F80
Authority key identifier: C0:AD:7F:FD:65:87:FA:30:98:CE:CE:07:A9:0F:4D:7E:AF:91:4A:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/213b1cb5-785e-3f75-babd-806ac6f1872d.roa
Signing time: Fri 24 Jan 2025 02:00:39 +0000
ROA not before: Fri 24 Jan 2025 02:00:39 +0000
ROA not after: Thu 24 Apr 2025 01:00:39 +0000
asID: 26996
IP address blocks: 141.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:65:f3:e0:29:c9:d7:ee:d8:d2:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f7a77b-e956-481e-b990-dda9c01233ef
Validity
Not Before: Jan 24 02:00:39 2025 GMT
Not After : Apr 24 01:00:39 2025 GMT
Subject: CN=2c3ab86b-687d-4b06-bf5a-0017a264e84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:96:30:fe:97:22:61:0c:c4:68:2b:aa:76:
96:70:c5:cb:fa:2f:e8:6d:23:e1:29:36:55:c8:06:
33:17:0c:a2:c8:51:8f:15:d7:56:b2:1e:d5:69:b3:
71:a3:61:e3:07:fe:11:1b:fb:81:12:13:af:1b:33:
02:f5:1b:48:98:2d:4c:69:8a:d7:fd:0d:30:7d:6a:
09:7f:fd:7b:e6:ae:b4:7f:ba:f1:bb:c0:b0:df:48:
b8:6e:23:21:e9:8c:8f:99:9c:4d:8f:2d:a2:c2:93:
61:b5:3a:6c:1b:52:a4:2d:0e:80:7c:4c:f2:54:d7:
70:4c:29:12:88:d1:23:8f:bc:4b:6e:a5:c6:da:d8:
04:a3:51:b3:71:8d:dc:b6:af:6f:84:69:23:df:fb:
a3:0a:a8:b2:b8:fd:d8:64:3d:a6:db:0e:a6:a7:71:
31:3c:e9:3c:00:af:c6:dc:d2:65:78:a5:0b:c7:b1:
c3:32:60:c8:71:91:e8:1e:6f:4c:c7:71:2f:9e:68:
2b:8d:9b:e4:0a:6e:8c:af:5d:67:56:6c:8d:3e:66:
b5:f2:3d:2b:ae:99:0e:22:58:11:33:a7:af:20:b7:
73:fc:d6:42:86:33:ac:d1:58:ad:4d:4b:9d:04:0d:
df:7d:91:0d:a1:e1:37:69:a3:fc:41:70:c4:98:0c:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:67:91:71:4D:70:C9:5F:B7:07:E6:BC:5F:4F:4D:CB:08:43:BC:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/213b1cb5-785e-3f75-babd-806ac6f1872d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef/86f7a77b-e956-481e-b990-dda9c01233ef.crl
X509v3 Authority Key Identifier:
keyid:C0:AD:7F:FD:65:87:FA:30:98:CE:CE:07:A9:0F:4D:7E:AF:91:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86f7a77b-e956-481e-b990-dda9c01233ef.cer
sbgp-ipAddrBlock: critical
IPv4:
141.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:70:22:87:8e:7f:a9:d4:fb:9e:06:62:88:42:d8:46:a0:5e:
af:31:ea:0b:b2:cf:79:a5:47:d5:dd:4d:75:84:07:bf:27:34:
b2:cc:c4:46:0a:44:a7:ab:d7:42:af:b3:cb:f2:10:7c:4d:59:
55:2b:f5:83:c3:21:7b:15:35:ae:79:8f:ef:f5:21:ea:6a:04:
25:7f:a9:0f:03:d7:1b:b1:5e:50:aa:50:11:5b:19:fc:e9:0e:
d6:19:33:1d:dc:40:a4:7c:b4:d9:b2:26:b6:66:c3:70:23:92:
29:35:0b:8b:a7:20:01:b4:53:f8:df:5e:d9:09:2e:71:8f:4e:
2d:75:84:f5:66:d5:37:7f:8e:85:4e:a9:ae:1c:7c:6d:78:37:
15:32:ff:f1:6b:3f:77:62:a7:b2:74:d9:8a:2d:b7:3b:ef:92:
94:e3:58:7e:61:23:3e:8d:b4:96:c0:df:6a:27:24:5d:86:ac:
5b:61:1d:83:cd:3c:36:66:82:e7:92:1e:53:a0:7f:95:dd:34:
7e:a9:28:64:b0:7d:4f:b3:8f:f2:b1:c7:a0:f6:67:d4:50:8f:
ae:d0:eb:af:48:40:d4:c4:cb:1f:81:52:be:31:c7:d1:5a:e2:
f8:43:7a:3c:30:d3:f6:19:70:e1:a7:bb:d9:c7:84:0b:1c:ab:
a8:f7:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:02:46 2025 by rpki-client