Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa
File: df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa (raw, json)
Hash identifier: ZTgTIc977zLJ91mhJuQ0zi48mbKxVcOKK7otiMN+nnY=
Subject key identifier: 42:69:7F:F6:DF:4F:5E:3D:68:91:2E:9D:6C:84:48:86:C3:F5:DC:AC
Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial: 010D0C9F432858488AE09A13C3A213F016F28400
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 46841
IP address blocks: 100.42.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:9a:13:c3:a2:13:f0:16:f2:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=35b7670a-2710-4370-a64e-77385f59038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:cf:a3:7a:e9:48:28:05:a0:05:a5:96:98:
51:29:9f:2f:ba:d1:5b:f6:0d:ef:25:a0:f4:db:af:
15:4e:15:98:8b:db:fc:cb:52:32:9e:2d:c6:f8:7f:
70:ca:47:3e:7c:34:fd:48:de:84:3b:17:96:69:a7:
e5:61:84:b5:d5:db:8b:f9:dd:1c:63:8d:7f:59:00:
cb:35:94:cc:7b:7b:ce:9a:42:f0:16:65:a7:a6:f0:
59:b8:93:66:81:5d:6a:20:8e:d5:89:fe:f3:a3:54:
c7:21:ce:45:4a:6c:ea:ba:96:2a:2a:64:ce:56:51:
ec:64:66:bf:6a:01:b5:e0:15:87:09:f0:79:9b:df:
5a:d8:01:ee:57:23:f4:57:fe:e8:10:45:73:5d:a0:
4f:03:5f:03:6e:45:3d:83:f2:74:8b:11:be:f3:51:
4c:22:ba:21:a7:6a:d4:ba:82:9e:e9:6f:f3:5a:40:
94:34:86:7f:cf:dc:9d:21:6d:d9:3c:dd:e9:fc:3d:
ec:cb:d5:d4:36:67:e1:6e:0f:5e:48:12:8a:27:db:
bd:70:1b:77:3f:82:e0:dc:cc:b0:3b:ce:a5:e9:3e:
95:85:c8:3b:4c:71:08:c7:07:13:9b:65:b1:cd:49:
18:5f:e5:10:20:33:ab:d6:c0:96:4b:51:f7:e0:fb:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:7F:F6:DF:4F:5E:3D:68:91:2E:9D:6C:84:48:86:C3:F5:DC:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
X509v3 Authority Key Identifier:
keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
sbgp-ipAddrBlock: critical
IPv4:
100.42.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:a8:72:76:9c:2d:e9:70:4d:51:6b:7f:e8:9f:c8:91:53:50:
9c:3a:4e:a6:c6:b7:dc:0d:69:bb:28:7d:7e:0b:d1:de:9d:c7:
99:c9:a5:3b:a5:d1:95:b8:90:6a:b5:03:28:62:4f:7b:ce:6d:
2b:bf:92:a4:d8:7d:f0:68:73:ef:89:63:58:7b:42:33:bc:86:
cb:dd:91:a5:63:78:52:ff:0e:f4:c5:0b:79:f3:a0:a9:55:75:
56:c6:e1:6b:46:cf:b6:a2:24:07:71:06:18:79:1f:53:d8:32:
0c:51:45:a6:9e:52:76:f2:bc:cd:19:b3:82:1e:5c:36:dd:ab:
23:a3:84:30:e6:30:e2:5e:51:c7:d4:a0:04:29:9b:9b:b6:4f:
78:55:ea:49:81:17:70:dd:14:b5:55:6e:19:0d:f6:09:20:0a:
7e:55:d8:18:26:cb:31:7b:72:b0:d6:4f:07:1b:73:76:a0:2d:
52:2e:5e:da:26:ab:91:8b:52:c3:e0:85:01:a2:c7:14:99:fa:
a1:63:fb:98:e3:1b:4a:1e:3f:f7:d5:1d:81:30:10:16:9b:9e:
1a:bf:c9:94:44:88:20:8e:f8:f9:dc:df:c0:75:ac:45:18:47:
4a:17:b4:b4:97:04:51:f3:8b:9c:71:8e:c4:1d:ca:c1:85:f7:
73:28:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:05 2025 by rpki-client