Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa
File: f851c4bc-a18d-3492-9e35-2d61175cac7b.roa (raw, json)
Hash identifier: FoE4/fx/ekdSqRSKwayUZAXvEtndgfyNkbxYfuYNj7A=
Subject key identifier: F3:73:45:9D:33:13:BC:0C:CA:88:61:48:A4:F0:9C:86:AD:B5:16:6A
Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial: 010D0C9F43285848A1360E83B4515E941860F2C0
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 29909
IP address blocks: 216.157.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0e:83:b4:51:5e:94:18:60:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=66d5193f-3b50-46fd-86be-aefa6f670879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:a7:fd:96:49:46:31:d7:a0:ae:be:00:25:
c1:1d:89:7e:2b:01:f6:8a:cc:6a:09:8a:b6:29:48:
9a:37:0b:f9:f3:88:e2:05:7c:40:d0:c4:68:70:33:
71:5b:3b:46:17:0c:ba:cb:c8:b3:eb:8b:fb:29:7e:
18:b9:57:4a:ff:b3:47:45:f0:cf:b2:2f:58:28:72:
62:57:81:cb:03:ae:10:be:ef:de:04:88:72:3e:ca:
da:87:91:b2:f5:e1:fd:58:fc:24:aa:e0:c6:04:24:
70:6a:3b:06:eb:53:a5:ed:e5:1b:66:cc:f8:17:bf:
7d:65:f1:a5:41:b4:8a:4f:24:c2:42:c6:ea:61:f6:
68:8d:9e:ce:61:80:aa:a9:81:8b:ef:b5:1c:c6:e4:
c0:58:74:d8:a6:7f:04:c7:30:8e:1a:9c:71:ca:c2:
5e:40:bc:57:a1:6d:aa:ad:99:6d:6b:20:4b:8e:ee:
00:38:ea:b0:c3:80:20:19:5a:f0:ec:1b:1d:e8:af:
ef:f3:d5:c1:25:25:82:33:d1:d9:95:26:51:38:7b:
3b:71:cb:1d:1a:ba:ce:83:94:1e:88:10:ba:a0:75:
ea:b0:d2:8e:fd:55:56:a4:81:08:58:eb:a0:f7:af:
14:5b:c9:28:42:c1:a5:62:14:3c:ea:98:c3:43:35:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:45:9D:33:13:BC:0C:CA:88:61:48:A4:F0:9C:86:AD:B5:16:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/f851c4bc-a18d-3492-9e35-2d61175cac7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
X509v3 Authority Key Identifier:
keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
sbgp-ipAddrBlock: critical
IPv4:
216.157.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:44:9e:68:4c:a4:a7:c4:50:73:61:b2:4d:5e:7c:89:8e:8f:
35:e4:5b:ce:84:15:88:41:1c:ed:30:2d:54:36:eb:f9:6e:7e:
23:cb:69:d7:9e:17:02:84:0c:18:e9:d0:61:34:85:bc:77:9e:
ae:2f:00:66:0b:d1:47:f3:a9:d2:00:d0:94:43:cc:a3:61:40:
13:41:c0:1a:31:b0:88:16:29:dc:47:52:35:7b:6d:53:9d:21:
6e:fd:89:d1:d5:46:c8:3a:87:59:3f:d4:32:17:d3:d3:c2:d9:
67:cd:9a:62:91:7d:eb:76:97:c5:b7:1f:21:ab:2f:6d:c0:1d:
05:e8:3d:90:06:81:0d:e7:cd:86:62:cf:5b:85:04:d9:cf:6c:
0a:d6:fc:68:fe:e7:95:d7:31:91:6f:d8:98:f4:95:10:63:dc:
fd:9b:13:99:d1:75:7d:61:42:49:dc:b1:f2:da:5d:9a:ba:8b:
b5:be:d6:79:17:1f:ca:98:fd:78:30:cb:52:3b:3f:71:5a:5d:
26:e3:38:a5:4b:8c:e9:70:ff:72:2f:03:59:d6:8e:b8:67:69:
50:02:57:86:72:69:93:68:da:83:f0:ba:01:0f:d4:63:d6:e9:
3b:fe:1d:59:3d:21:87:6f:43:40:f3:11:a0:a4:2f:15:6a:79:
cd:68:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:04:31 2025 by rpki-client