Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa
File: f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa (raw, json)
Hash identifier: wT9OIA0WDgwqXOtQdh1iaxPK7ARPyVK7JiC0zlBhfRA=
Subject key identifier: 5B:83:08:22:D4:A5:54:CF:37:45:07:BE:67:90:45:66:83:63:6A:57
Certificate issuer: /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial: 010D0C9F432858488F107E96D5023C7DAC766200
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 237
IP address blocks: 198.108.5.0/24 maxlen: 24
207.75.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:7e:96:d5:02:3c:7d:ac:76:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=8a962e49-5679-4e47-8e92-9baf4807b90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:90:10:ae:55:e5:cf:f6:17:36:a2:44:03:
e9:91:75:4d:bf:2e:5c:e5:b4:c9:5b:3b:b7:98:11:
4d:d8:e2:6f:7c:bd:81:bf:31:80:16:bf:4e:56:b7:
21:9f:d9:8a:ee:10:b4:d6:98:dc:3a:d4:73:c0:4e:
f9:ed:f2:bf:30:51:e3:c7:6d:20:56:e2:5b:55:e4:
cf:bd:9c:25:fa:87:a6:33:93:70:19:38:bf:8d:8c:
a6:8e:49:8b:00:5a:7c:15:bc:fb:a2:4a:f7:17:87:
50:99:26:2d:65:41:f9:3c:de:b9:8b:7f:c5:59:21:
ce:1d:c5:66:23:3d:99:53:eb:3d:63:1e:fb:c2:c4:
b9:66:ed:6f:00:59:f7:d0:c0:da:ab:6d:14:b4:3f:
6f:52:2e:89:41:ff:9a:3d:7f:f5:37:52:a7:cb:22:
78:5f:fa:25:d3:54:55:72:5c:69:15:1b:67:76:85:
65:94:ae:04:85:fe:2b:ed:1e:c9:1f:69:27:16:54:
74:f8:24:d0:74:d1:f6:1e:83:fe:e8:91:f8:13:00:
d4:11:8f:3c:fc:02:c6:9d:74:71:3a:ff:05:f3:a1:
de:4f:69:65:f9:12:6e:21:8c:a2:27:0d:d3:5c:1a:
18:b8:58:a9:47:01:0a:8e:b0:4a:25:3c:61:0f:4c:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:83:08:22:D4:A5:54:CF:37:45:07:BE:67:90:45:66:83:63:6A:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
X509v3 Authority Key Identifier:
keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
sbgp-ipAddrBlock: critical
IPv4:
198.108.5.0/24
207.75.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:f0:20:7c:29:f2:35:dd:73:d4:c7:74:64:fb:c0:47:d4:96:
3b:b1:55:73:19:85:d5:a3:8a:b0:03:53:d9:6a:84:19:84:d4:
02:38:c8:6d:d4:df:65:80:70:56:e8:41:7b:6a:a3:b7:10:6c:
76:dd:46:c0:be:d4:04:be:35:50:ce:9e:7b:d0:71:48:c8:8a:
c1:60:f0:f6:6b:50:98:11:f8:51:18:f0:e1:07:9b:21:02:4e:
88:46:24:9a:f0:fe:8d:64:fd:4b:5c:87:11:f6:6b:6b:26:cf:
50:9f:79:04:a3:48:2f:b3:5f:1b:1c:3b:7b:bf:a0:5c:d8:c3:
f9:29:d8:dc:5f:64:5c:a6:8d:b7:92:3e:b1:73:5e:b7:d3:79:
c2:de:eb:9e:e2:4e:52:b1:4f:48:0e:17:e7:8b:b6:6c:ce:fd:
aa:4a:8e:0a:56:79:fc:70:c4:41:0e:7c:f8:61:44:78:1c:03:
87:29:36:ec:c2:d2:99:60:51:8d:b7:15:43:72:46:1f:33:f9:
ab:66:33:3d:06:25:ab:32:88:1b:2f:fc:71:45:bc:d1:fb:bf:
5e:1e:3d:1e:5e:f3:ab:52:50:1b:19:76:fd:85:b4:53:9e:b9:
96:5b:a9:90:de:d8:76:8e:6b:ec:83:d6:de:21:f6:8e:c5:75:
04:a9:59:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:15:52 2025 by rpki-client