Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa
File: 27fb50ad-2b05-3265-be7c-7d3d367f8588.roa (raw, json)
Hash identifier: rlj1EPmgjibNV6yAG7ZORrKeSOUYnVKjQpkfLgsZqKQ=
Subject key identifier: B6:DD:37:89:CA:0A:30:68:70:FD:D8:37:97:E7:36:E9:14:46:43:8E
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584845157FF8B139B02A00F66D40
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14061
IP address blocks: 208.68.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7f:f8:b1:39:b0:2a:00:f6:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=bb092b83-c1fb-4a94-a6a2-af80e8d975dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2f:3d:e7:86:d7:3f:cb:b3:a0:93:97:d6:28:
53:53:39:4e:6f:19:e8:6f:bc:a9:5f:67:c2:1e:9a:
11:17:c3:1e:f1:b4:f1:eb:53:7a:cd:c2:a0:33:d7:
68:bb:40:0f:85:6e:7a:a9:35:db:0e:84:0d:7b:70:
8e:73:53:58:dc:58:56:37:47:58:c9:a1:d3:1b:5f:
c6:67:e3:6a:01:87:ec:8e:16:dc:6b:5c:d9:39:ed:
5a:5c:e5:1a:01:c4:16:c9:59:16:d3:8a:22:87:83:
71:f5:b3:22:0d:1c:49:24:23:f0:2d:10:a7:f9:61:
40:2f:4d:6d:6c:4d:1e:fa:98:4a:78:c0:10:df:29:
ef:e3:05:e1:da:5d:86:1b:7c:4c:8b:6d:13:76:18:
e6:b3:d3:59:f5:cf:11:c3:50:29:50:90:c8:9d:fd:
42:90:a9:d7:58:1c:b5:db:37:2c:69:0c:cc:e4:0c:
72:e9:7c:c3:35:d3:c3:6e:33:ed:05:20:d9:bb:04:
4b:78:6a:b3:cb:6d:8d:b6:03:67:ea:03:a3:f7:e6:
dd:0b:0c:6b:b4:ec:b5:6a:b8:10:88:64:bc:e0:fb:
b4:4d:a5:2b:10:3e:3e:02:03:b7:f4:14:68:c9:02:
5f:47:f6:83:0d:77:64:f2:9a:8f:b0:62:9c:15:e3:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DD:37:89:CA:0A:30:68:70:FD:D8:37:97:E7:36:E9:14:46:43:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:64:5e:05:30:05:61:e5:57:8b:fb:ea:fe:8d:f2:93:e0:cb:
77:4e:c7:ce:71:bf:15:2f:ac:96:e3:5e:1f:c4:ee:b9:1e:9d:
c3:fc:9f:57:40:12:31:5c:28:7f:ed:62:e1:50:35:97:f2:59:
02:87:2e:b5:ad:b7:a0:da:fc:c6:25:64:cb:d2:51:e6:57:53:
5e:05:7f:1f:6f:81:65:90:c9:3e:8c:5a:98:a5:37:c5:f7:17:
92:9c:9c:ac:37:e0:fd:60:13:7d:2a:ef:8e:b9:d9:91:e1:79:
b1:d8:41:e9:cb:89:69:a2:fd:84:26:a0:07:37:c6:43:d7:22:
62:31:e0:8a:cd:f8:b3:0f:fe:53:5e:b7:17:0a:44:75:77:4a:
2b:3a:16:47:43:c7:cc:4d:41:97:94:fd:95:71:ec:b1:9f:9d:
2c:83:0b:43:48:16:ec:72:ae:ff:24:5f:ee:b8:9b:13:65:10:
7c:9e:58:57:6c:e6:3b:19:88:eb:f3:e9:30:cd:69:45:24:de:
db:45:07:0b:29:df:0f:c6:df:6d:f5:16:ae:7c:16:52:dd:5b:
91:c5:15:ec:36:31:fd:56:5b:fb:65:21:6c:21:8a:b9:9d:85:
c2:19:20:5e:f0:8b:7f:4c:ac:a1:6f:a4:4b:61:f3:2c:5a:d3:
c3:1e:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:45 2025 by rpki-client