Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa
File: cc943514-3509-33b3-b2dc-359af22b1dea.roa (raw, json)
Hash identifier: X2KQN9rQUrJgyG+Qwq0vedIbVJ9+83OxhOqatGj6lpA=
Subject key identifier: 23:11:4A:F3:96:4F:03:6F:F9:5B:10:BE:33:1E:6E:CA:9D:42:F7:54
Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial: 010D0C9F4328584898D609A5D47D795F6A0E3180
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 202
IP address blocks: 216.168.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:09:a5:d4:7d:79:5f:6a:0e:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=b4cceb83-d5ad-491a-a919-9a2717af63dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:d0:3b:c3:3d:a2:76:d3:7a:5a:72:5f:f7:
03:14:36:cc:b8:ef:bf:26:0e:04:8e:67:89:ff:f2:
9c:4e:65:89:42:9e:35:85:08:2c:e8:84:d6:3b:61:
25:bf:1b:25:a1:4a:41:52:16:35:3e:e6:c6:48:01:
17:0c:07:0d:ad:8a:13:02:98:3f:6e:85:15:7c:43:
23:cf:ea:79:24:12:d3:e3:07:34:ce:1c:a0:97:be:
2a:05:44:7b:fc:ea:66:89:e6:d7:85:2e:ed:f7:99:
a0:b7:a7:24:84:5e:93:be:62:25:f4:51:c8:a6:2b:
ce:71:7c:f5:08:4d:63:82:bf:d2:bf:76:4a:d9:68:
00:a1:5a:1f:cd:f9:2a:ff:5c:ef:ae:e5:07:be:a0:
96:66:50:15:ac:ff:db:a9:57:76:6b:6b:77:21:10:
ae:a5:a2:f3:f9:91:f2:9d:d6:23:09:bf:1e:45:6e:
df:41:de:13:01:34:c5:51:e5:50:79:5b:8d:1a:d5:
b7:cf:d2:aa:b9:04:b2:0e:ac:23:c6:f1:e9:e6:78:
ef:16:66:a7:8e:6b:b6:6b:77:b8:ed:8c:79:08:03:
c0:4f:75:fb:36:ef:11:6c:af:83:d8:64:ec:86:8f:
2b:b7:f7:c7:8c:7c:87:89:6f:42:9b:c0:89:33:67:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:4A:F3:96:4F:03:6F:F9:5B:10:BE:33:1E:6E:CA:9D:42:F7:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
X509v3 Authority Key Identifier:
keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:33:79:cc:8d:0f:40:7c:e3:1d:51:e2:4e:21:11:2e:e4:12:
c6:66:eb:66:a0:e6:cc:fa:44:85:ce:f1:c9:67:dc:0b:20:9b:
bc:a6:7d:d4:49:3f:db:d4:a6:4c:07:05:5c:79:5f:5b:b8:2c:
2d:34:c4:ba:85:95:2f:6e:59:d1:19:3b:65:88:54:92:6b:bb:
3f:ba:9d:15:1d:16:6a:37:48:73:49:d3:a1:4c:34:2d:ef:37:
aa:e2:05:86:e9:95:e4:06:36:d5:68:a2:22:63:3f:f2:03:d6:
b6:91:71:72:d9:c8:fb:d6:89:50:8a:06:65:4f:d8:30:18:27:
e3:44:ef:bc:1c:e8:18:44:ac:bf:fc:d0:72:34:9a:c6:75:2d:
07:6a:1c:11:0a:90:3e:6d:dc:76:ef:b0:3e:75:22:8d:e5:8f:
50:08:e8:86:27:d6:b9:37:9a:a4:8f:96:87:07:2f:4a:ba:ad:
ff:95:ca:aa:31:91:2b:eb:5b:72:66:33:6d:db:6b:d7:a0:d1:
cd:9d:f5:b5:e0:48:b6:34:04:c4:f8:df:5b:c0:4c:ee:95:4f:
9e:a7:d5:0b:35:21:f7:4a:b7:ff:19:51:d8:27:ab:50:ad:cb:
d0:88:15:29:72:ef:aa:14:29:0c:78:da:27:6c:ce:54:66:e8:
5e:99:0d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:29:07 2025 by rpki-client