Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa
File: a3c913bd-38a7-3113-91a3-43cfa8207222.roa (raw, json)
Hash identifier: 2VStxkoBdPYRVAbjrY9o4toqpZhfreV/C0Q74zNXKyA=
Subject key identifier: 47:5A:68:C4:A3:94:D7:87:B9:A0:50:B6:7A:C0:CD:8C:29:53:10:A1
Certificate issuer: /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial: 010D0C9F43285848037B64DB53F87E8B891942A0
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 33717
IP address blocks: 208.70.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:64:db:53:f8:7e:8b:89:19:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=29d02149-86ed-434e-8838-bdea6299b943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:f5:5b:40:b6:9a:e6:95:ca:64:10:ce:93:
42:f8:30:1b:88:f5:94:e0:d4:ad:38:0b:ea:f6:9b:
c5:85:f9:3d:88:5b:78:25:50:0f:91:98:24:4a:24:
4e:ba:5d:34:d7:ae:e6:4f:6c:10:77:84:3c:04:14:
29:86:dd:e2:27:e7:be:a6:46:a9:bc:22:66:7b:73:
1d:c1:56:a1:09:6f:86:8c:95:59:0e:16:e3:ad:2c:
d7:62:d3:58:19:1c:8b:6f:8a:96:b5:4c:8d:32:d1:
4b:15:30:72:29:7f:00:2e:45:2d:3a:6b:d6:64:6a:
c0:bf:05:7c:dd:23:c7:59:a6:7f:59:d3:2e:45:13:
c1:10:ef:71:dc:03:7c:33:de:b5:54:b3:1c:ee:9c:
45:af:c9:ae:30:25:a4:90:ae:24:46:2a:9b:a9:15:
87:f9:6f:41:dd:5a:7c:6b:fe:90:aa:be:69:96:cb:
ce:02:17:83:aa:00:ca:4e:97:d0:84:ce:d1:25:79:
59:77:4e:64:f6:27:76:ab:28:43:d9:aa:93:7e:21:
fd:f1:7a:ba:cb:a5:e2:67:b0:a7:e4:9c:3d:9a:62:
5e:93:68:6f:61:55:df:73:58:f7:03:26:70:10:5b:
dc:0d:32:86:1b:53:fa:72:af:7b:e6:04:24:cd:d7:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5A:68:C4:A3:94:D7:87:B9:A0:50:B6:7A:C0:CD:8C:29:53:10:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
X509v3 Authority Key Identifier:
keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:7e:f9:a7:e6:a3:c0:2a:35:1e:9e:4f:63:23:e5:7a:27:8c:
ca:61:73:ee:f5:84:34:c3:d8:e5:72:27:4b:cc:a4:22:97:fb:
d9:f5:41:5a:aa:87:59:34:9b:13:85:35:cd:d0:68:15:09:14:
1b:f6:37:d5:fa:c4:0b:c9:58:53:c2:23:be:8b:36:6b:32:8c:
26:76:ef:ec:d8:fb:7e:99:73:dc:a8:03:50:c0:85:4c:10:16:
78:56:00:5a:e0:d6:e8:d3:48:49:86:db:08:f2:7c:93:e1:68:
1f:4f:c6:d9:26:8f:a3:0a:d0:c3:31:26:cd:ef:ea:ba:a0:55:
3d:51:5e:4d:d5:43:e5:e3:16:e7:2f:cc:f8:83:04:88:6a:f1:
ea:c0:27:df:db:f1:17:8d:f1:50:c8:ed:65:a0:c5:89:7d:2f:
0f:66:0b:b2:11:33:4f:ed:3f:a9:17:fe:2f:b9:b1:8d:b5:88:
e0:de:9b:ed:ca:ae:9f:e2:c2:42:58:7d:b4:92:88:f0:2e:7b:
c8:72:7f:22:70:3f:5c:29:a2:26:1f:24:69:49:67:7e:9a:28:
fb:37:95:3a:59:3b:c7:7f:45:fb:ee:ae:b0:9d:3b:ce:40:d5:
f4:0e:6c:df:e0:2c:6a:ba:34:39:8a:d0:df:19:bc:f0:81:fa:
df:4f:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:14:39 2025 by rpki-client