Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/bb64f222-c40a-3670-827b-6f5e2818ecee.roa
File: bb64f222-c40a-3670-827b-6f5e2818ecee.roa (raw, json)
Hash identifier: lqf/AKtUUouS9UX9a54Lzr1HUn2yJdUCAnf5LrrURzA=
Subject key identifier: 41:22:DF:D4:D4:DA:DC:8E:17:E6:4C:47:67:4C:6B:BE:9E:09:22:A4
Certificate issuer: /CN=39fea962-7ffb-4d29-beb1-e588e6436410
Certificate serial: 010D0C9F43285848748B17AE4E2238D8689A6900
Authority key identifier: C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/bb64f222-c40a-3670-827b-6f5e2818ecee.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 30247
IP address blocks: 208.97.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:17:ae:4e:22:38:d8:68:9a:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fea962-7ffb-4d29-beb1-e588e6436410
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=bfea3192-2ebf-470e-90c9-2caf2b5d6531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:b5:4a:db:18:36:81:b5:c7:74:b7:3c:af:
cf:21:72:b1:5c:27:a6:9b:d4:5a:d1:99:49:e3:f4:
31:02:d9:8c:c5:e9:f5:10:47:4b:bd:e6:8f:a0:47:
ef:66:f2:22:c6:57:24:43:20:ef:fb:4f:b6:4e:20:
62:51:1c:bd:75:c0:4a:93:e5:df:47:40:b1:97:43:
f4:8b:c9:8a:84:ab:91:8c:06:01:f4:4e:2e:fd:23:
df:66:fe:18:16:32:90:e5:bd:aa:d6:1b:55:d7:47:
d6:36:60:85:a9:92:18:04:6c:4e:c2:3c:b4:57:49:
47:d6:a5:89:4b:7d:24:d0:5f:a6:9b:4b:fa:44:33:
27:a0:fd:a5:2d:36:55:0e:f3:d8:67:31:9c:ae:20:
15:0c:38:0e:10:62:70:c9:49:9c:f3:c8:44:6e:6a:
ce:ed:b1:12:aa:59:9d:c8:06:03:aa:8d:fd:d5:84:
05:f0:d7:46:c7:66:72:08:05:ce:87:47:68:b4:b4:
4f:8f:7b:ff:56:d4:66:24:8b:58:89:ec:e0:ed:1e:
6c:7a:70:b8:fb:8b:db:27:94:46:12:a1:8f:65:b7:
3b:02:b6:56:80:84:05:48:f3:73:15:46:99:1c:f2:
2d:2d:ca:42:cd:ef:ae:fe:ee:0f:22:37:b8:4a:88:
8c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:22:DF:D4:D4:DA:DC:8E:17:E6:4C:47:67:4C:6B:BE:9E:09:22:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/bb64f222-c40a-3670-827b-6f5e2818ecee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410/39fea962-7ffb-4d29-beb1-e588e6436410.crl
X509v3 Authority Key Identifier:
keyid:C9:50:7A:AC:66:77:E6:E4:6B:E5:A1:44:C7:1C:D8:8C:25:C2:9E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39fea962-7ffb-4d29-beb1-e588e6436410.cer
sbgp-ipAddrBlock: critical
IPv4:
208.97.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:18:69:d8:39:bf:09:bb:74:80:a4:5e:1c:86:81:38:94:a7:
45:e5:46:b6:cd:d1:f5:6e:64:20:63:46:be:b4:ff:58:01:f0:
30:5e:dd:4a:98:0e:9d:11:ba:a2:2b:9f:5e:fa:c3:2e:c3:f5:
56:e4:41:4b:94:49:b3:77:d3:bb:1e:9d:c1:31:d4:46:98:bc:
46:b4:c3:02:e1:aa:d3:e4:be:07:f2:42:7b:44:cd:09:47:a1:
07:64:e6:47:82:c8:dc:7e:e8:f5:4b:4e:16:33:8a:0b:a1:c4:
08:06:11:97:52:2d:6a:cb:72:92:60:ef:d7:bf:74:8d:76:42:
95:ba:fc:f7:5c:3d:18:10:7e:70:d7:33:0a:ff:07:02:1e:64:
f4:ba:7a:ec:64:eb:d0:f4:22:f5:3d:06:78:d4:b6:76:f5:d2:
a1:eb:a3:3f:c1:f7:ed:22:b1:e2:51:76:5f:9f:f2:ae:52:49:
d1:23:9f:71:dc:d7:9b:9f:3e:bd:a7:eb:d2:ce:68:54:ef:b7:
a8:2f:02:00:a5:a9:09:7e:e9:b2:4f:90:9f:a3:5f:46:e8:20:
06:62:43:7c:b0:03:d6:cc:3a:8f:a9:02:ff:b0:9d:cf:f8:1d:
c8:80:f0:72:f3:45:ff:1b:40:39:4d:94:eb:20:6e:b5:3b:3a:
c1:35:75:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:17:08 2025 by rpki-client