Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa
File: c96c620b-bc50-3f60-a167-5552b8cc9d25.roa (raw, json)
Hash identifier: Zj3P4uMUJiQ1SooQiiAYT+0SX/bbZrz+wLTLg6u4Jmo=
Subject key identifier: 4C:E9:7C:08:6A:7F:12:68:D6:EB:0B:4C:15:14:2C:A7:6F:E6:E1:95
Certificate issuer: /CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
Certificate serial: 010D0C9F432858484C1032267E40594758C2EB00
Authority key identifier: 20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 32121
IP address blocks: 142.152.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:32:26:7e:40:59:47:58:c2:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716b3f91-4d9d-4520-8ca9-ce2616c37f4d
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=ff31cff7-5bd4-4dec-b628-88a0e365fa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:b5:83:eb:49:7a:c8:c6:90:5c:9e:41:0d:
a0:9f:b3:c4:2b:59:97:a4:bf:a1:4f:fd:77:ad:c4:
db:03:ab:96:01:9c:d6:da:15:f9:c6:0d:ea:d7:18:
e8:9b:bd:35:39:43:c8:02:58:a4:18:50:e9:8a:19:
c9:92:ff:a9:5d:51:a3:ca:f1:90:ba:60:6a:a1:d8:
88:2c:ba:25:3a:41:cb:60:2d:43:44:77:34:be:f4:
6e:19:c6:12:b3:a8:55:3f:2a:4b:56:ff:65:d8:78:
3c:0e:05:f6:20:61:4a:c2:6a:10:7d:45:2a:35:c5:
f5:eb:c4:f5:78:1d:18:1b:d4:a9:0b:ad:36:eb:1f:
60:05:b5:33:a8:fa:23:7d:83:f7:99:68:24:68:78:
2a:76:08:dd:53:aa:02:e8:f0:8d:38:e6:66:c5:20:
85:4e:ca:eb:0a:1c:81:e3:3c:30:78:54:a9:dd:d8:
06:9c:62:0f:0f:a6:78:cf:ac:31:6c:00:aa:a9:ae:
be:ca:68:1e:9c:c8:87:b8:b7:37:b8:24:08:24:10:
52:93:4b:27:eb:ac:8e:89:66:41:fa:60:89:d4:5f:
12:be:95:be:93:b5:9e:cb:bf:4d:31:07:ec:a8:4b:
c8:7f:7f:73:4d:5a:77:7b:e8:62:1b:05:6c:e2:b3:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E9:7C:08:6A:7F:12:68:D6:EB:0B:4C:15:14:2C:A7:6F:E6:E1:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/c96c620b-bc50-3f60-a167-5552b8cc9d25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.crl
X509v3 Authority Key Identifier:
keyid:20:88:03:9F:88:66:67:DA:41:69:64:9B:9F:45:0B:5F:A1:5B:5C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/716b3f91-4d9d-4520-8ca9-ce2616c37f4d.cer
sbgp-ipAddrBlock: critical
IPv4:
142.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:c0:97:2f:91:fd:79:fd:92:8f:63:64:5b:7f:ef:66:fe:ff:
5f:df:f2:d9:52:c8:ee:4b:86:b7:c2:75:dc:05:dd:1b:12:25:
47:70:f4:17:00:44:0a:f3:ce:94:a1:b0:62:92:d9:0d:d1:7b:
9c:f3:8a:15:b2:24:6c:e0:5d:53:f9:6e:5a:62:52:47:49:3b:
fc:d6:6d:6d:2b:88:4d:fe:39:d6:d5:c1:41:16:de:f9:c4:97:
74:89:dc:90:4d:ef:42:0d:87:75:26:54:53:38:dc:ce:14:9e:
f4:a5:49:09:0e:eb:45:a3:16:f3:0d:3c:5d:fb:6b:40:0d:0e:
41:c1:7c:18:d9:b3:f7:ec:1c:d5:3b:c6:77:67:9d:a1:d4:66:
7d:96:f6:bb:88:ce:1d:8c:9d:8a:b2:f8:c9:f8:9f:46:85:19:
eb:84:8e:df:50:24:e5:e9:9e:ce:c8:ef:98:7f:ff:62:01:fc:
9b:2d:bb:32:04:ad:5f:83:a4:1f:37:6d:6f:13:fe:96:a5:b2:
b7:f4:51:3b:3e:10:c0:dd:af:25:4a:16:bc:3b:e8:f4:82:a1:
9e:31:f0:89:39:4a:9c:85:aa:fd:76:d8:61:60:56:6c:3e:19:
d5:d2:d0:ca:98:47:62:6c:31:1b:05:a6:06:6b:7a:03:cc:7f:
ae:1e:b8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:51 2025 by rpki-client