Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/d1f3d780-a87c-36a4-9a73-1dc101c343a0.roa
File: d1f3d780-a87c-36a4-9a73-1dc101c343a0.roa (raw, json)
Hash identifier: wFG/Ef6aEoic9PTyixXmQlYKBH12KyO2+7s4s3BKjIY=
Subject key identifier: 2B:09:48:27:1D:9C:08:B2:21:EF:99:39:29:84:E8:2A:B9:8B:5F:B4
Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial: 010D0C9F43285848897B230B9AB2B7B24FBCB580
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/d1f3d780-a87c-36a4-9a73-1dc101c343a0.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 54027
IP address blocks: 216.186.52.0/22 maxlen: 24
216.186.62.0/23 maxlen: 24
216.186.64.0/23 maxlen: 24
216.186.66.0/24 maxlen: 24
216.186.96.0/23 maxlen: 24
216.210.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:23:0b:9a:b2:b7:b2:4f:bc:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=ccdcf356-689b-4361-b7e3-5243df0f0fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:52:5a:4e:8c:53:28:88:77:d7:86:68:dc:
d1:18:d8:e4:d9:ae:bf:f9:70:4c:55:b6:17:bb:c1:
b9:ec:95:a2:8b:d7:d4:8d:90:02:95:0a:92:2d:23:
45:1e:b2:12:f7:2a:6e:57:be:b8:6a:99:6b:b9:f6:
31:c7:b3:0b:c7:9b:af:09:cf:14:7d:32:8f:51:88:
03:75:2a:f0:6b:85:e1:f9:7b:02:8a:85:55:7f:e9:
47:ee:da:40:3a:5d:d1:11:99:76:76:78:46:43:ef:
88:97:79:4a:99:05:a4:41:df:1b:52:6c:45:14:26:
97:ec:a8:19:6d:7e:05:a0:4f:51:64:d4:0e:3c:59:
07:53:62:52:de:08:2b:ce:e6:eb:65:27:6a:7b:7c:
b9:54:9b:c5:e1:65:01:69:9e:e6:33:79:f2:f9:83:
66:68:6c:69:a3:67:5e:3b:8d:cf:ed:39:00:81:fe:
fe:38:51:e9:60:d1:e2:cd:41:b7:c7:02:48:fa:25:
a3:0b:63:2c:0c:aa:4b:ad:48:da:36:a1:34:42:cf:
f1:5e:26:89:a6:da:3d:51:70:d6:ef:63:e0:bf:02:
59:f5:31:b2:29:d7:b0:74:b9:05:a6:80:8c:09:69:
41:7b:fb:21:10:8b:2a:ff:0b:35:d6:8f:ec:01:91:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:09:48:27:1D:9C:08:B2:21:EF:99:39:29:84:E8:2A:B9:8B:5F:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/d1f3d780-a87c-36a4-9a73-1dc101c343a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
X509v3 Authority Key Identifier:
keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.186.52.0/22
216.186.62.0-216.186.66.255
216.186.96.0/23
216.210.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:71:fc:a6:16:38:cd:d5:a0:e4:e6:91:f8:92:a3:4a:59:06:
63:71:2f:e7:72:70:6d:a2:8e:57:87:31:6d:e7:68:88:72:d4:
3e:2b:de:4d:59:0c:53:1b:11:42:3f:7d:2d:bc:db:20:c2:a2:
0a:2a:97:f5:59:b3:ad:ce:1d:03:4a:56:d1:71:b9:a9:28:d0:
4a:24:d5:2e:66:2d:81:5e:1d:5c:c4:95:29:c8:a1:71:5b:f1:
64:02:3f:6a:b4:60:b0:0a:20:1c:4f:8d:fe:0b:bf:06:ee:8c:
65:e5:40:9a:39:1d:63:c7:84:7f:1a:3b:83:f7:ca:1f:9c:8e:
45:85:23:e8:86:d1:53:f2:94:64:97:c2:ae:59:06:46:18:e6:
65:10:ac:86:bd:75:44:4d:fc:55:cf:1e:95:13:68:9f:af:4e:
89:97:e2:86:5e:be:83:c4:f7:3b:b8:a5:23:85:45:3d:d1:9f:
df:bd:c4:8c:49:49:7f:d4:3d:f6:7c:5f:60:13:59:d0:19:23:
e7:28:5d:ff:87:1e:2c:a0:e9:13:53:d4:6e:ac:fd:d0:ba:93:
29:cf:40:20:32:8d:94:80:05:b4:a0:f7:1a:52:00:dc:03:0a:
3b:7d:da:c8:95:c8:4c:98:5e:30:35:e5:b2:ab:0b:d5:9d:47:
25:31:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:58 2025 by rpki-client