Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
File: d4129661-2570-39b6-8a42-e8a60bf56818.roa (raw, json)
Hash identifier: nhDaqKmRBGFDIffv93PX8qKXhAqU5WIEHWMmVE0rfU8=
Subject key identifier: D5:E6:DF:CB:0F:6D:2F:E7:16:3F:BE:F3:9D:DE:3A:02:99:DF:80:B8
Certificate issuer: /CN=fe8b65a3-820c-495e-8142-f185c536467c
Certificate serial: 010D0C9F432858485E35ACEF0BF172DDFD83AD80
Authority key identifier: C9:DA:C4:3E:33:C9:7C:A7:7E:13:91:75:9B:C6:CF:D0:04:C8:D4:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 8075
IP address blocks: 208.80.20.0/24 maxlen: 24
208.80.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:ac:ef:0b:f1:72:dd:fd:83:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b65a3-820c-495e-8142-f185c536467c
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=2e3f8218-0c19-43d2-b7cc-6c083f5ff28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ac:56:21:5e:73:a7:81:92:5b:aa:72:b0:d2:
c2:2f:c9:24:d3:fd:b1:37:50:ab:2c:e8:7f:ec:94:
04:c9:40:0b:c7:7b:c1:77:9a:ff:20:4e:e9:66:f7:
ff:53:73:65:a2:63:3d:fb:6e:b6:59:d9:fa:76:ef:
98:45:79:19:e6:a4:31:d9:bd:6f:b5:af:47:34:7b:
7c:0c:cd:9e:15:90:08:90:22:74:c2:d0:f6:c2:77:
d9:2d:30:43:9e:81:6f:ff:82:fa:0a:7f:db:48:b6:
99:77:2e:34:f5:86:7c:68:14:f0:8c:08:f9:56:35:
bd:6e:98:b0:4a:26:29:bf:9b:0f:76:55:fe:33:e8:
68:43:74:f2:83:b6:27:a0:2c:bf:6a:a2:98:c3:72:
00:a7:31:3c:0a:91:09:34:5b:df:fa:71:14:f0:a5:
95:61:2b:74:17:df:e7:ff:0d:c2:71:a7:61:bf:b7:
93:db:4a:ff:cb:c7:a5:74:f0:93:78:45:f4:21:66:
18:1f:2f:87:b4:20:f8:d1:aa:74:2f:ca:f7:ac:78:
e7:5e:6f:eb:df:4a:72:9f:f2:b1:e6:e4:28:50:86:
e7:1d:07:c8:d2:d7:62:fc:ae:e2:6f:12:b7:27:40:
f7:2c:7b:db:12:78:a1:c1:09:80:0d:cd:0f:ed:42:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:DF:CB:0F:6D:2F:E7:16:3F:BE:F3:9D:DE:3A:02:99:DF:80:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/fe8b65a3-820c-495e-8142-f185c536467c.crl
X509v3 Authority Key Identifier:
keyid:C9:DA:C4:3E:33:C9:7C:A7:7E:13:91:75:9B:C6:CF:D0:04:C8:D4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.80.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:80:ef:aa:70:f4:35:ca:f4:4b:49:e2:e5:60:e8:56:9b:ff:
d2:76:b5:ba:55:7c:96:21:cf:95:98:4d:91:64:fb:9e:4c:6d:
e7:ac:10:c1:be:d1:78:de:44:5a:cc:f8:29:d1:4c:8e:48:f4:
3a:d0:a1:7f:c5:9d:f9:1c:f9:a4:89:c6:8d:e3:22:02:72:9b:
1c:5b:d7:52:62:3a:93:fc:c0:b1:bc:62:65:9a:c8:9f:74:11:
79:bf:56:fc:29:ac:db:87:d4:be:1d:90:0b:97:44:c7:94:da:
a8:88:c2:a8:49:85:d4:07:68:72:f6:d6:ed:1c:6b:d2:b3:3b:
ef:cb:2b:c1:9e:7c:85:1e:0a:5e:94:eb:6d:49:c0:89:37:53:
10:db:51:11:80:f0:1d:28:0e:21:52:73:33:bb:50:bc:13:24:
e1:71:07:b4:3a:d8:e0:5b:a4:15:b6:89:fe:0c:7c:44:c2:fe:
dc:fb:1e:76:79:67:26:85:b0:aa:a9:d8:52:25:73:8b:30:3e:
d9:e6:fb:59:8c:63:c0:3c:5b:1f:27:4b:9d:f5:26:75:ea:23:
63:16:81:a3:49:37:7a:9e:98:13:06:14:92:68:19:80:84:f8:
3e:da:a8:91:8e:fb:ca:2f:5c:fa:50:a5:11:b1:4f:ed:95:0f:
03:55:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:36:54 2025 by rpki-client