Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aede1be0-6c9a-325b-8567-3f1cda5866ec.roa
File: aede1be0-6c9a-325b-8567-3f1cda5866ec.roa (raw, json)
Hash identifier: ZHWQBzAUlFuCLqMVLndPGCm//w3o+80HLApZzDFTzeU=
Subject key identifier: 17:BA:59:B6:4D:B1:85:1C:52:39:BA:DE:EB:8E:39:BE:17:D6:E9:29
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584878246D246AE421834DFA4F80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aede1be0-6c9a-325b-8567-3f1cda5866ec.roa
Signing time: Tue 07 Jan 2025 20:57:17 +0000
ROA not before: Tue 07 Jan 2025 20:57:17 +0000
ROA not after: Mon 07 Apr 2025 19:57:17 +0000
asID: 23473
IP address blocks: 216.171.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:24:6d:24:6a:e4:21:83:4d:fa:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jan 7 20:57:17 2025 GMT
Not After : Apr 7 19:57:17 2025 GMT
Subject: CN=0c4cd298-b0d3-41a6-8208-1f9ff5e3b3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7c:45:78:6d:58:44:b2:24:f9:a5:2f:7e:2a:
f0:d9:7b:5c:5e:5c:d7:5f:ed:5d:ee:b4:92:6a:ec:
aa:17:ba:e7:f4:ae:aa:40:f9:f6:f9:83:10:91:00:
e4:3f:10:9b:ec:be:9b:9b:a4:1e:10:db:b6:f3:63:
bf:23:40:76:0c:89:28:8d:5c:dd:df:4d:ac:3a:90:
2d:b3:da:e2:67:e3:c7:a7:ce:d5:59:66:81:c7:bf:
70:09:35:ca:42:a1:c1:35:73:3d:f8:b8:47:59:e5:
1a:d8:0e:20:f9:ce:7a:4c:03:42:ad:85:14:81:4c:
37:97:cd:2e:e0:60:07:38:9b:20:b7:79:1c:a1:78:
86:c8:60:79:72:3d:52:bf:62:e8:ab:58:76:99:f0:
17:c1:31:00:5a:e3:b9:0f:15:81:0c:39:91:8a:ce:
67:79:68:b6:95:28:a0:52:5b:3a:61:1e:82:3f:aa:
3b:bf:cc:b3:1c:fe:8d:23:5a:b9:b6:26:eb:c6:5d:
34:a7:81:b9:aa:04:bd:4d:96:d5:fc:69:63:d0:de:
5a:50:29:9c:24:08:d0:dd:8b:ca:8a:21:eb:a1:62:
0e:76:8f:b4:7b:81:7b:0e:8b:ae:7a:f9:0d:67:6c:
9c:5e:9c:e2:94:90:fe:3e:3a:48:a0:77:64:0b:4c:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BA:59:B6:4D:B1:85:1C:52:39:BA:DE:EB:8E:39:BE:17:D6:E9:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/aede1be0-6c9a-325b-8567-3f1cda5866ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:0c:6d:3a:04:69:51:f7:9f:ce:f8:d6:9f:8b:cf:2f:c3:d5:
76:94:aa:94:18:55:67:7f:45:bb:e8:52:c4:27:9f:23:cf:35:
a8:d9:ae:5e:85:b8:36:65:29:a9:98:2d:36:f5:d0:af:00:c6:
91:94:62:b4:93:b7:f7:66:45:9f:f8:0b:5b:7d:0e:a2:f4:92:
8e:cf:c7:27:ad:49:c9:50:6f:30:f9:7a:2a:7f:7a:f4:ad:07:
64:5d:a6:c1:fa:06:db:8d:e4:ea:94:16:10:b4:87:1e:26:a6:
57:59:fc:5c:1a:65:1a:8a:b6:ea:91:71:f4:96:89:2e:6b:8c:
51:84:1f:77:6a:c3:51:0d:94:18:90:d5:a7:d3:b9:13:df:06:
85:07:27:a2:d0:98:68:83:17:35:fb:04:2f:3b:9b:c3:25:7d:
89:4a:39:af:39:f2:05:b1:0a:55:8c:92:55:79:82:89:67:f4:
36:f0:41:0d:09:cb:f2:3b:76:90:e8:92:44:09:a3:3e:16:61:
5c:44:a5:ad:4d:fa:3b:7e:eb:aa:61:25:d8:c8:1d:44:b2:80:
ef:8d:b2:64:3c:f9:dd:03:4b:a6:70:25:72:25:6a:65:d6:16:
a9:fe:92:25:00:4b:cb:67:78:28:26:28:9a:f9:24:d8:1b:67:
71:6f:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:12:05 2025 by rpki-client