Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cae089a3-5e09-33b8-8828-122471b2e81f.roa
File: cae089a3-5e09-33b8-8828-122471b2e81f.roa (raw, json)
Hash identifier: HCT3PvhBc9JTrQxv1Aqh2dIZT0s5V5/pAhc5oDsxa0E=
Subject key identifier: 88:7B:02:8A:90:93:A8:08:CA:93:37:2B:CE:4C:97:A7:91:BD:C1:A0
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848100A89DD1DEF8C15BC1E9080
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cae089a3-5e09-33b8-8828-122471b2e81f.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 396982
IP address blocks: 208.127.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:89:dd:1d:ef:8c:15:bc:1e:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=56e19bfc-976e-4a2d-af12-68537275427a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:30:a4:cf:bf:e5:21:07:b5:f3:36:db:69:
d1:0a:88:5b:65:a0:20:1d:62:e1:27:43:45:db:ea:
6a:99:4f:4a:76:f9:c4:ff:0c:a7:bb:66:2d:27:a7:
77:fb:be:f3:49:a8:62:d2:d9:56:4c:7a:db:55:bb:
0d:b1:1f:28:1a:a9:1d:b2:cf:22:bb:b1:f2:e8:3b:
33:12:dc:44:76:4a:15:4c:3f:16:07:90:69:6f:3d:
fb:39:48:ad:1d:fe:b5:4f:fd:4b:28:e3:2f:2e:8a:
58:05:34:52:78:cc:65:ea:b0:3d:4b:e1:85:bf:0f:
9a:4f:ed:5b:50:21:ca:40:59:bc:00:c0:9a:74:28:
c6:8b:78:6e:dd:33:7a:d1:5d:5f:87:75:ae:c2:24:
74:d3:05:93:d7:36:39:c7:00:d6:e5:31:43:7d:5a:
44:95:31:cb:a6:03:73:9c:ad:ba:e4:aa:67:d2:51:
61:aa:af:50:fd:f5:74:78:89:50:b8:8a:5c:fb:de:
db:81:33:bb:15:ec:87:a0:d6:0b:d4:08:0a:be:22:
ab:f5:c0:1e:38:5b:f3:9c:99:86:f2:32:19:b2:99:
7f:50:91:93:c4:03:0f:58:33:8a:12:32:f4:29:ea:
6f:4d:1b:ad:b2:d6:3f:c6:c6:13:11:51:d7:d0:90:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:02:8A:90:93:A8:08:CA:93:37:2B:CE:4C:97:A7:91:BD:C1:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cae089a3-5e09-33b8-8828-122471b2e81f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.127.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:f0:bd:49:e1:be:eb:ee:80:66:56:db:33:e1:30:38:63:92:
41:d4:54:f6:a9:1c:8f:c9:c4:93:3e:de:df:81:a3:de:cd:79:
b0:f6:96:49:c5:5b:68:1d:a2:f0:e7:34:f6:e5:a8:ed:b3:f4:
1f:94:38:1a:d4:d9:42:49:4f:d6:da:8d:3f:20:b9:94:68:27:
f1:13:63:f4:c8:ba:72:ac:1c:1e:99:0b:0a:af:4f:e5:ad:c7:
3d:d7:ea:71:71:c3:bc:cc:e4:71:8a:13:0a:e5:30:ec:a4:74:
9d:34:01:90:a0:d0:39:03:79:4f:d3:7c:47:fa:b2:2e:f5:36:
c9:61:75:8e:ef:2a:b6:db:f0:3a:65:f6:cd:7b:a5:21:49:26:
28:e9:d5:da:33:f1:34:0c:78:ca:81:6a:61:09:5e:a1:aa:7f:
73:c6:3d:d3:8f:e6:ed:dd:4c:30:16:92:75:f4:92:d4:69:e3:
de:26:6f:db:45:23:2f:de:17:2b:cc:b7:88:91:3e:9c:73:b4:
81:15:a8:1e:1b:87:aa:e5:41:f5:fa:77:0f:00:38:be:15:07:
81:db:af:e9:08:f2:19:db:fd:51:31:69:fc:40:58:79:10:20:
b7:47:5e:30:23:42:6c:83:12:ae:e5:51:55:17:f1:f6:5e:10:
3d:cc:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:24 2025 by rpki-client