Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa
File: cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa (raw, json)
Hash identifier: NvJuZaYRSmMByQT6SiEA1yRespVQNaJiyYCGgNP6NE8=
Subject key identifier: 7A:BC:5C:06:EC:FE:B2:44:F1:56:47:09:06:82:99:E5:E0:55:72:AD
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F432858487823C67B7939B37FBCBE5580
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa
Signing time: Tue 07 Jan 2025 20:55:58 +0000
ROA not before: Tue 07 Jan 2025 20:55:58 +0000
ROA not after: Mon 07 Apr 2025 19:55:58 +0000
asID: 23473
IP address blocks: 216.171.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:23:c6:7b:79:39:b3:7f:bc:be:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jan 7 20:55:58 2025 GMT
Not After : Apr 7 19:55:58 2025 GMT
Subject: CN=60af30bb-dbf2-4b6b-b519-9d4e69868126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:67:55:12:57:8b:aa:c7:f5:61:ed:29:17:
b8:00:49:10:04:7f:6f:2c:ba:bd:9b:41:23:92:ed:
a1:e6:9c:8d:c2:5a:d7:35:47:6d:77:92:51:53:d4:
89:e9:a5:87:4e:a7:61:c8:f6:32:73:bf:3d:42:76:
6b:87:c1:b7:7f:4d:3b:73:b1:cc:d4:7a:4e:4e:d0:
13:90:ef:38:10:d8:28:46:4a:4f:f5:df:ad:7e:8e:
71:38:4c:ae:32:cb:79:d6:48:31:65:ac:6a:71:61:
67:64:22:23:2a:58:7e:66:23:e8:74:a6:5e:ee:b4:
47:ad:6f:b9:e5:24:b2:a5:e9:86:e0:d0:1f:93:0d:
f8:19:05:cf:b5:a2:02:d1:a3:ed:4b:8d:4c:54:1c:
6a:33:a3:7e:a6:d4:4c:b5:72:0a:1f:2c:80:4c:6c:
1d:2b:34:a3:20:d9:a6:87:2d:d6:35:f6:8a:c0:64:
5e:61:0b:15:fb:2d:c6:03:07:83:31:e5:08:85:03:
63:8e:c7:fa:70:6c:b9:cc:91:00:5b:de:f2:13:3f:
d5:15:cb:fa:94:66:80:90:9c:71:6f:9f:ff:a8:da:
d3:bd:75:6d:bd:bb:d5:7a:95:d2:bb:c4:13:39:14:
f2:38:4b:36:bc:e1:eb:b3:e5:1f:23:5a:a6:f5:a8:
16:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BC:5C:06:EC:FE:B2:44:F1:56:47:09:06:82:99:E5:E0:55:72:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd4f07ea-112f-32be-8929-8ba3c89a0e8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:18:a4:d4:0f:25:71:a2:e6:5d:c6:c5:f1:45:b5:e1:23:ea:
96:02:8d:c4:a9:48:43:86:1a:af:a3:f5:4c:6c:71:94:d9:a7:
9f:29:a1:e3:93:4d:33:3f:0b:e2:5a:57:8f:e0:cb:8e:7c:07:
a5:6e:35:b8:80:66:13:70:85:c0:da:9f:37:1e:5d:ff:2f:18:
f0:fa:80:15:18:d2:ea:a2:7c:e3:ed:ad:0e:ec:f3:ad:ed:38:
ad:76:4a:a6:2e:b3:43:6a:88:9c:71:69:7c:63:a9:48:77:3c:
2e:59:4e:97:7a:26:98:fa:a8:ab:7c:4c:88:b3:d5:41:38:4c:
44:f3:5b:09:cc:e7:b5:80:0f:82:f5:d5:93:31:cc:83:a4:d0:
71:2b:98:ee:3c:b2:30:95:b4:03:7f:4a:0d:d0:9a:8c:77:97:
eb:e2:af:3e:2d:7f:00:9c:61:e8:cf:89:3d:47:2c:ac:84:12:
35:c2:0d:72:a7:54:e0:26:a5:ed:76:24:7e:8c:30:d3:7a:36:
37:a0:96:c5:f5:c0:2f:65:53:9b:92:92:6a:6d:7b:4a:eb:f3:
35:d8:71:35:9a:86:27:01:39:ee:bc:ae:e2:0d:63:09:cd:a1:
78:90:68:bb:61:3e:20:cc:07:f6:24:6a:a9:fb:c0:49:8e:85:
2c:72:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:44 2025 by rpki-client