Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/0cba3dd1-1b04-3f7a-aeb3-5381ee5b7c8e.roa
File: 0cba3dd1-1b04-3f7a-aeb3-5381ee5b7c8e.roa (raw, json)
Hash identifier: lwl3+jQtcn5gTzDSskJxx/7Z0n/ZxbZFSIomV+Q/CGc=
Subject key identifier: C4:D9:05:9E:1D:8A:CE:FD:8B:F9:A4:F9:C7:FD:CD:07:2A:36:E5:FA
Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial: 010D0C9F43285849AD61EF0D4898E375AA06DE80
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/0cba3dd1-1b04-3f7a-aeb3-5381ee5b7c8e.roa
Signing time: Mon 28 Apr 2025 15:26:00 +0000
ROA not before: Mon 28 Apr 2025 15:26:00 +0000
ROA not after: Sun 27 Jul 2025 15:26:00 +0000
asID: 5065
IP address blocks: 216.132.8.0/24 maxlen: 24
216.132.9.0/24 maxlen: 24
216.132.10.0/24 maxlen: 24
216.132.11.0/24 maxlen: 24
216.132.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ad:61:ef:0d:48:98:e3:75:aa:06:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Validity
Not Before: Apr 28 15:26:00 2025 GMT
Not After : Jul 27 15:26:00 2025 GMT
Subject: CN=6630e190-56a5-4a9f-ac41-045e4a34c3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:4e:ba:dd:ad:22:f7:57:09:82:4e:8c:b4:
82:e3:44:42:d9:2e:d1:30:cc:ee:99:ac:e2:60:ac:
ef:dd:6d:16:f4:23:0a:2b:10:0e:50:9e:45:4f:04:
e6:bf:6b:aa:5a:f0:1b:fb:12:02:05:83:b8:c1:78:
43:c4:d5:5a:f2:6d:fa:99:f6:31:9a:63:33:5a:c8:
64:74:c3:2f:21:5e:cb:28:9f:33:68:7d:0d:3c:b7:
be:ff:45:12:6a:63:c9:b8:b1:1f:90:3e:a2:c2:c5:
61:df:f2:2f:37:25:68:93:d7:92:41:06:66:3f:69:
23:05:0f:06:a8:81:d4:f5:5f:ff:ae:51:49:8d:5d:
4e:b7:ef:e4:3c:6b:0c:a4:ab:53:7a:64:3c:7b:e0:
13:e1:d1:dc:30:4c:72:dc:45:e9:96:ca:fb:6d:89:
8f:a0:76:d4:61:83:78:43:4e:a8:92:35:7b:7e:25:
4c:d2:89:93:b7:ba:c3:e9:32:ec:e9:4c:02:5b:47:
b9:87:17:c3:32:3e:59:e9:97:ff:9d:09:ff:f8:45:
15:1f:6a:98:d6:b9:b7:92:c6:d6:09:1a:8e:0a:11:
24:93:3a:3a:ae:ec:50:09:41:10:6f:7d:4c:4f:d4:
ed:9e:45:18:e5:5e:6a:4a:2a:92:25:bd:05:58:8c:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D9:05:9E:1D:8A:CE:FD:8B:F9:A4:F9:C7:FD:CD:07:2A:36:E5:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/0cba3dd1-1b04-3f7a-aeb3-5381ee5b7c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
X509v3 Authority Key Identifier:
keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
sbgp-ipAddrBlock: critical
IPv4:
216.132.8.0/22
216.132.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:9c:5c:e1:76:f2:9e:01:12:bb:4d:11:de:74:29:54:7f:57:
a8:b2:c8:ce:ed:d8:17:f8:1a:46:89:8b:f2:8e:d3:3a:7e:03:
03:04:eb:d6:3e:d0:4b:ec:49:50:00:40:15:b9:99:4d:74:e8:
5f:a3:b7:30:4b:81:74:98:7d:ea:89:09:51:a1:23:a5:e3:fb:
a3:b5:d2:89:44:31:86:cc:90:1a:25:7e:42:d5:24:4f:0d:0f:
03:db:db:10:e8:b7:59:68:b0:7e:9e:85:2a:c7:94:15:e6:82:
53:21:d1:a4:c7:3e:33:63:8f:0a:3b:ea:39:af:af:59:b2:5a:
58:ad:3c:ed:f3:72:52:43:20:67:9e:75:19:63:ca:a3:43:c8:
4a:19:58:17:85:29:04:76:08:e5:35:ba:cc:00:83:20:bc:86:
51:ff:16:77:75:3d:03:8b:92:29:ef:a2:a1:62:71:d5:e8:92:
cb:8a:55:f3:00:61:fb:67:7b:50:7d:23:68:fc:3f:02:2b:3c:
57:08:5f:d1:0f:43:7c:3a:aa:cb:bd:3c:c2:88:d9:b3:f8:dd:
72:39:18:c8:82:00:2f:ea:2c:fd:ec:62:bd:61:f5:67:24:03:
eb:e8:a0:c0:20:62:99:8b:ca:3e:3d:6c:c8:70:3d:89:58:f0:
a4:13:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:25:14 2025 by rpki-client