Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d7bceaef-03cf-3290-b626-eeb3b9301f3c.roa
File: d7bceaef-03cf-3290-b626-eeb3b9301f3c.roa (raw, json)
Hash identifier: vSXRJ9Rguc/yzwWgeEa/fE3O3Cy1u02hxSPYrVKq2Fo=
Subject key identifier: 62:E2:D6:B2:8C:41:AA:8A:E6:1D:22:F4:D1:9C:A1:90:BF:F2:06:42
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584865303E2E1A2512D4D3E1C300
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d7bceaef-03cf-3290-b626-eeb3b9301f3c.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 216.30.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:3e:2e:1a:25:12:d4:d3:e1:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=5bb8cee7-386b-471b-9c27-ee073112b151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:3a:45:66:11:d2:e8:ec:97:60:d8:6d:b8:
4e:f7:24:80:b1:b4:79:b9:51:c7:b1:68:28:33:21:
58:14:2d:06:f7:13:15:01:49:04:aa:41:40:6a:e6:
66:4e:74:bb:fd:b7:46:a7:3c:c9:3a:7e:7e:cf:73:
91:5f:5d:23:9e:3a:ca:eb:0d:6d:39:10:42:10:ba:
94:22:cb:4a:81:68:46:86:2d:dc:b1:cb:f9:fa:af:
42:14:d0:68:81:07:b7:be:14:c7:d4:4b:dd:a3:4e:
d1:11:6e:e2:5c:dc:38:2c:53:88:5c:11:82:fb:9d:
e9:1a:b3:fc:c2:7f:d2:ec:be:49:04:b2:70:53:2c:
a9:d4:3d:0e:2b:dc:5c:65:4d:90:92:e1:e4:ea:03:
37:f4:49:3f:28:fc:02:59:f4:4a:a6:c8:69:ec:83:
eb:f8:b6:b0:3f:3f:bd:32:de:00:04:02:92:32:2b:
d9:58:ed:d1:2f:89:eb:5d:96:a0:10:c1:bc:36:9c:
06:4a:ef:71:c1:d0:4c:60:e4:0a:39:a6:27:da:56:
02:8d:e4:85:d0:a4:cd:52:73:a0:4f:b3:99:15:35:
cd:72:20:9a:74:50:c4:27:cb:6f:60:7b:02:88:2f:
2a:54:bd:84:dd:67:8b:63:d9:ca:2b:19:1b:13:6f:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E2:D6:B2:8C:41:AA:8A:E6:1D:22:F4:D1:9C:A1:90:BF:F2:06:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d7bceaef-03cf-3290-b626-eeb3b9301f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
216.30.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:40:d5:04:91:6c:0e:09:65:2f:ff:f6:c0:6d:10:f5:23:d3:
d0:ba:5f:a8:56:8f:d3:2e:92:a2:b0:88:13:8e:af:f6:c0:c3:
a5:cb:2b:de:a4:7c:8f:47:dc:cf:2b:4e:6a:dc:69:4f:12:7e:
38:2f:80:98:bc:aa:da:8c:c1:73:87:30:d5:e2:a0:85:12:b5:
f9:9c:e9:c2:87:d9:d5:a3:23:51:c7:dd:ed:20:8c:dc:d3:ca:
72:04:66:11:65:12:93:b4:ba:ef:2d:24:fe:78:a0:2d:60:9b:
80:f5:6e:b0:40:0b:00:89:a1:6d:4a:9e:5a:2a:3d:24:59:5a:
6a:56:4a:f0:c4:80:e6:1f:28:6c:2d:0d:d4:71:0c:88:5c:25:
fc:17:16:70:b6:02:50:83:5f:2c:83:c2:56:72:55:1e:06:2f:
40:3d:a0:24:53:42:2e:22:54:b2:05:8d:ab:f3:b7:87:29:04:
02:d3:25:8c:15:e6:2c:0a:06:28:e9:fe:35:14:35:d8:fd:31:
54:72:00:cb:b3:58:d6:c5:f3:7d:4e:12:c1:05:32:5c:1b:ca:
52:eb:2d:43:37:04:b1:c6:38:3d:f0:d5:34:c5:81:0c:c5:0a:
e6:e9:75:c8:20:6c:3a:b3:a5:5d:df:86:dc:27:e8:8d:0a:6f:
8d:59:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:58 2025 by rpki-client