Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa
File: 3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa (raw, json)
Hash identifier: +DEAxiWwy6+5UxmRYcA1552zyvypsTocORue/PdF5N0=
Subject key identifier: 5C:44:55:9E:51:70:17:D3:19:57:A7:16:62:1A:54:5A:D4:A4:88:6D
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848159FF2A363F4F1AC102FD480
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 396982
IP address blocks: 208.127.208.0/20 maxlen: 24
208.127.224.0/21 maxlen: 24
208.127.232.0/21 maxlen: 24
208.127.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f2:a3:63:f4:f1:ac:10:2f:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=4445fd82-aec4-4848-828d-2c23db068eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:7e:a6:9e:a0:42:24:f2:15:f1:0c:b4:07:
bd:9f:5a:8b:4f:cd:16:77:c1:c4:0b:62:4e:7d:8a:
ca:63:04:2c:6f:fb:47:c7:70:c9:e2:0e:1e:00:ba:
0d:2a:69:4b:75:d4:c6:f0:71:14:c5:20:1e:b6:31:
3f:71:df:d9:97:e9:e3:cc:ca:f0:80:8e:94:62:9b:
10:c1:46:0a:9c:88:db:e5:51:d2:18:e5:c6:eb:99:
cc:84:7c:02:e5:05:6c:bf:33:0c:ce:31:cc:ee:54:
6b:cb:67:ff:36:f5:40:1d:03:79:e3:96:2f:98:8b:
45:33:68:be:cb:cb:07:45:92:6e:9b:fd:54:21:d8:
f6:64:72:71:6c:f3:a3:99:6c:87:f3:d5:4d:62:cf:
3b:0d:e4:fd:9d:2f:1f:79:76:67:f5:1e:61:91:28:
4d:47:8b:ae:4d:98:97:4e:87:f9:10:de:c6:ac:58:
19:03:62:9c:d0:6f:81:87:f5:0a:6f:a5:0e:97:d2:
a4:31:cb:80:25:ec:21:35:38:4e:e4:7c:61:f2:f2:
ff:11:d4:02:c0:93:54:14:09:b9:a8:6f:cb:cc:72:
3c:d2:a6:a8:e3:8c:92:de:cd:39:90:0e:04:a8:b5:
66:10:fc:8b:b9:bc:83:8a:41:77:16:7d:fe:c6:ff:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:44:55:9E:51:70:17:D3:19:57:A7:16:62:1A:54:5A:D4:A4:88:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.127.208.0-208.127.247.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:7f:29:e4:d8:3c:19:8c:d4:bf:25:e7:4b:38:ee:78:84:a3:
06:5e:73:fc:b3:9f:2e:d9:bf:74:12:61:e3:d5:0c:2b:e1:7e:
48:b8:f1:65:cb:e8:4a:78:07:72:9c:0d:6a:7e:bd:58:7b:4c:
de:4e:c3:86:14:83:7a:f5:45:0b:01:92:0b:7b:9e:ff:c8:c7:
ba:73:b4:ea:11:99:56:6c:d3:cc:06:ed:67:bf:11:1f:92:2d:
ab:d3:9b:d5:be:5a:22:d9:c7:15:39:f3:96:0e:07:64:1f:4e:
3d:df:04:9d:24:c1:3c:19:ce:6c:37:e6:e2:d6:92:cc:60:2b:
2b:82:4f:49:21:cf:7c:ff:2e:c7:cb:51:f2:a0:c1:3c:b0:96:
fd:97:d5:1b:a6:81:7a:08:a5:01:f1:38:88:ad:92:6c:ad:83:
f6:9e:1a:be:5e:af:9d:23:ab:c6:88:fd:23:5b:26:71:79:81:
63:b8:21:90:31:8b:72:b4:5b:ca:35:18:75:33:41:01:10:c2:
ef:5c:df:a2:67:0c:00:22:b5:ae:f9:eb:86:8b:25:8c:4f:3a:
2d:d5:25:2c:5b:d9:dd:b3:97:31:28:b4:4d:0e:a7:6c:63:4f:
dd:d7:92:c8:1b:69:d6:70:89:25:84:0c:65:f1:37:6d:30:7e:
d0:e1:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:15 2025 by rpki-client