Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa
File: a943a62e-8af4-3728-ac21-db958b531f7a.roa (raw, json)
Hash identifier: Dg3ohETHvXTxjTG4csBTK3J7V9ULEjd7SldCer9p/kA=
Subject key identifier: CD:7B:D3:EA:5A:98:D6:67:06:F6:EE:74:41:65:B2:98:FA:A5:81:29
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F4328584871C06E11EC15B32302B7DA80
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 46432
IP address blocks: 208.88.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:6e:11:ec:15:b3:23:02:b7:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=b1cb569d-a0ac-4b4b-bcfc-cfe2f8810f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f2:32:37:de:2a:89:89:42:98:44:3f:d1:7e:
0d:17:cc:ea:3b:e2:4d:2a:ac:5b:7f:e6:14:3a:1d:
40:cd:7f:69:c9:f9:0f:d7:54:74:92:80:c6:2c:ee:
53:0a:60:57:de:1b:e9:cf:fa:f9:8e:c4:d8:07:58:
ac:5f:bb:47:c0:c1:fb:2f:87:9c:2c:cd:5f:29:85:
be:d5:71:9e:4e:15:e2:1f:18:d7:2b:09:44:d8:ef:
78:af:f8:37:0e:01:4e:6b:b5:5f:c4:69:63:ab:de:
d5:be:6f:9d:96:f1:6d:7b:b6:81:d1:e7:24:cb:53:
a9:6f:90:99:df:69:d8:e3:c0:45:a9:f9:20:f2:a2:
54:7c:59:07:e0:68:f0:dd:3b:cc:37:3e:19:d9:35:
76:b5:e6:b8:2b:48:21:e5:bc:c1:b8:bd:b0:b1:71:
b8:d1:06:59:19:45:18:55:dc:fe:06:27:f1:e3:bf:
34:e4:7e:87:56:47:dd:73:8e:ce:2e:c0:55:48:2a:
62:78:2e:5e:50:2d:f6:e8:48:55:93:50:be:a7:11:
ee:86:78:8f:c1:b5:64:2f:da:6f:b4:c7:27:ad:e8:
fc:e2:41:99:5c:1d:a6:39:51:e2:9f:19:ef:ab:07:
cb:5d:43:21:74:98:ea:c6:20:2f:09:14:fe:e4:12:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7B:D3:EA:5A:98:D6:67:06:F6:EE:74:41:65:B2:98:FA:A5:81:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:a9:06:76:56:bf:17:41:b2:20:4e:76:95:dd:78:fe:e2:57:
17:ee:df:ef:99:5b:d8:79:a0:a4:6e:40:93:a9:5b:3f:a4:da:
09:d4:e1:6b:5f:20:93:38:74:89:c5:95:c6:02:2f:d6:89:5d:
aa:0a:7d:e5:bb:60:60:a2:ad:99:02:d8:e2:0d:fb:45:3c:b2:
9f:41:9a:b5:5d:21:b4:24:86:89:b1:1c:52:1b:6d:18:5d:3f:
e9:be:21:57:b2:fc:b0:b1:e7:2a:8c:47:b0:69:64:9f:56:25:
42:72:ae:76:bd:60:05:47:25:7f:af:b3:9d:1f:30:f4:e0:3b:
f4:89:76:87:f1:d2:a2:3f:4b:66:49:41:07:9d:2f:eb:bf:5a:
2f:df:bb:b9:77:46:ac:e4:70:92:eb:55:40:f0:d9:29:17:e0:
12:1c:f4:30:4c:66:bc:5c:14:f5:3b:73:74:68:f5:a5:28:22:
6c:f1:3a:ad:b8:0f:92:80:5e:04:88:55:35:c5:67:08:05:62:
2e:82:64:fe:51:ea:37:7e:f3:8a:32:ac:4a:53:e0:06:d7:ed:
44:7b:fe:bc:37:83:73:94:3e:86:c8:be:cf:95:de:9b:d7:db:
d5:14:1d:a5:1f:0e:03:df:43:a8:4c:40:62:b5:ca:b6:fb:ef:
1c:4a:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:46:07 2025 by rpki-client