Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/31d9d835-72eb-3df1-b107-708439cd323f.roa
File: 31d9d835-72eb-3df1-b107-708439cd323f.roa (raw, json)
Hash identifier: YxM+XsV2IAcNvXh8Kko+IvP/iwrIYDlgUypNCS3Azg4=
Subject key identifier: 54:A3:B5:A5:F8:43:1C:62:7D:C7:DF:94:1B:C9:05:70:65:05:B0:07
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865303E5639464DDB36D9E000
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/31d9d835-72eb-3df1-b107-708439cd323f.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 216.30.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3e:56:39:46:4d:db:36:d9:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=5c68ae9e-c89f-45f2-b677-e4c63d8d4596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:12:2b:fc:ec:bc:58:d5:f9:81:2a:2e:4b:
5c:4e:1c:4f:53:18:a9:5d:4c:26:d4:49:e8:bf:b6:
0b:3c:32:be:69:27:61:e4:3b:66:e8:40:60:67:2d:
d5:2e:aa:d5:fe:67:5a:61:e8:dc:98:2a:46:66:9a:
1c:87:56:24:ce:7a:17:4f:75:73:66:ba:f8:44:fd:
40:66:86:cd:99:05:4f:f4:87:b4:e2:2d:71:e9:6e:
17:11:82:da:d8:f3:7c:d5:cc:44:b4:5d:d4:e8:c3:
68:ff:e2:39:58:b1:17:f3:e0:01:2b:22:5e:f1:e3:
71:40:e0:e1:79:8d:fc:ed:06:3c:26:7c:39:ac:82:
77:17:08:67:b7:d7:9c:5a:31:f7:ce:73:84:9b:b8:
db:c2:37:0c:38:18:0a:7f:b2:56:0a:27:bd:36:3e:
7b:77:9b:a5:0d:f7:d6:57:a4:8f:c1:7b:bc:3e:d7:
43:e6:51:83:f1:44:f4:27:a6:2f:86:b2:c7:87:85:
b6:35:98:87:4f:e0:40:fd:f3:1d:75:fb:f1:52:59:
b5:ef:2e:88:93:ba:2b:6a:45:92:e3:dc:a4:fb:46:
25:df:db:05:7a:88:c1:38:d6:5d:60:95:44:06:b6:
7a:3c:30:a2:c5:4e:5e:da:e5:d1:4c:2d:67:66:a7:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A3:B5:A5:F8:43:1C:62:7D:C7:DF:94:1B:C9:05:70:65:05:B0:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/31d9d835-72eb-3df1-b107-708439cd323f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
216.30.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:ba:1e:b4:d6:df:a7:e8:c7:b7:1a:1d:88:b4:9e:50:3c:fa:
b1:0c:1b:ca:34:ad:06:7b:a7:96:d0:dd:58:9a:49:18:0c:32:
eb:6a:c9:e6:27:7c:9c:73:7c:0b:2a:f8:1f:ef:c7:66:ff:ec:
12:74:44:3f:d8:65:6f:19:70:6c:02:01:8c:0d:fb:74:f5:1b:
71:5d:6f:e3:06:7d:29:95:cf:b6:ac:96:98:f7:ab:62:d8:ff:
d1:7a:7b:b2:dd:d3:76:ce:d3:23:53:96:92:f8:1e:64:2f:ce:
83:fe:0a:30:61:a8:86:4b:92:a3:96:79:97:84:0c:43:78:7f:
70:f7:db:b2:81:10:7c:e1:b4:7c:f2:26:34:6f:71:e1:ea:f2:
8b:4e:c1:ce:da:ec:da:26:d8:e2:e4:58:49:bb:46:29:14:dd:
85:d6:ab:41:00:af:01:c1:32:d0:aa:47:bc:93:21:6e:a0:b8:
00:96:fc:08:9a:cf:28:bd:ea:d9:1b:2f:7e:31:e4:8d:16:7d:
b4:36:a3:a0:f6:fb:fe:bd:5d:4f:7d:24:f5:ad:ba:cb:b4:5b:
c8:7a:9a:94:ff:a7:85:bb:8b:17:2b:71:e7:36:06:c1:7a:5e:
4a:bf:4e:30:ec:61:d3:49:70:71:20:c5:41:fa:e0:7e:27:d8:
7e:5c:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:35:43 2025 by rpki-client