Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1f48e073-6e9a-3a08-828d-3cd18bc3564b.roa
File: 1f48e073-6e9a-3a08-828d-3cd18bc3564b.roa (raw, json)
Hash identifier: COPEcyUQ8KZQW1bvY1UlfgZ7yg6FKpLCMsi6lov1iZk=
Subject key identifier: 45:D2:CB:6A:0C:B4:3D:C3:99:72:BD:78:07:53:C2:54:7C:47:BC:E1
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F432858486AC59EA97C5C1077B9854380
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1f48e073-6e9a-3a08-828d-3cd18bc3564b.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 398109
IP address blocks: 208.109.139.0/24 maxlen: 24
208.109.140.0/24 maxlen: 24
2603:4:1014::/48 maxlen: 48
2603:4:1015::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9e:a9:7c:5c:10:77:b9:85:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=60b49c15-22a0-4538-a333-02d788b501af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:c1:bd:c9:e4:3f:45:86:7d:63:54:15:0f:
ad:10:3b:ba:c2:03:38:1f:13:13:d0:38:93:88:dd:
fa:0e:c2:eb:34:5b:d8:44:cf:6b:2b:ad:00:ff:95:
74:e5:4d:ff:4d:90:e7:ca:7c:4d:2d:5a:43:33:98:
92:06:37:23:bf:04:13:70:77:a0:04:66:d0:4f:fb:
1c:b2:71:80:5a:f2:9f:a1:86:b0:7c:ae:06:3a:b7:
93:2e:c8:5c:81:f8:2d:16:67:59:35:74:46:50:d7:
41:5b:4c:ce:9d:9f:e4:7b:2c:ab:27:4e:a7:89:b4:
85:38:31:c3:c5:b1:21:f7:87:3c:0d:6d:3a:d5:11:
5f:0f:1b:8a:3a:cf:3f:ee:b1:30:9c:9b:c3:4c:98:
10:10:37:63:35:3a:2a:fb:6d:32:84:8f:ee:88:66:
fb:b5:1c:e5:2e:c9:f6:b9:63:05:87:9b:94:e3:37:
25:99:57:01:38:ee:e8:fb:d6:43:92:f3:64:2d:46:
ac:5c:3d:d2:0f:c2:1a:d6:e7:06:9d:89:30:68:cc:
95:14:ac:bb:6a:da:1a:aa:15:c7:e4:af:a2:c0:f6:
9f:77:0c:ed:48:f4:71:86:d5:01:d1:e9:79:b2:54:
67:d7:fa:b4:bf:b5:c3:36:d4:b2:43:39:8b:1b:f1:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:CB:6A:0C:B4:3D:C3:99:72:BD:78:07:53:C2:54:7C:47:BC:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1f48e073-6e9a-3a08-828d-3cd18bc3564b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.109.139.0-208.109.140.255
IPv6:
2603:4:1014::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:7e:67:5e:fb:c6:42:5b:06:8c:97:4d:80:e7:1c:35:0d:0b:
35:e2:a3:35:c0:37:15:17:27:57:e4:36:e9:57:63:9d:f8:fb:
6f:c3:87:9f:6c:73:bb:bd:3b:f5:42:26:f2:cf:f3:37:06:9b:
10:03:56:f6:b2:45:03:78:3e:13:48:3c:67:b1:41:ce:f7:08:
09:c4:ee:02:e0:aa:30:20:04:ae:dd:51:49:94:19:0a:e4:03:
d1:dc:4b:3f:16:f5:e6:db:37:17:e8:52:d8:87:ea:a4:78:6c:
23:6e:3f:f9:50:db:70:15:55:b4:6b:2d:17:11:d4:b4:1f:da:
e1:95:0f:34:49:98:eb:4d:d5:9c:12:8b:01:74:69:f6:e9:26:
27:c6:98:e8:6e:6a:9c:01:79:a1:18:07:8b:e0:a2:b2:84:49:
6a:01:da:ae:4a:a4:8f:a1:4d:a7:fa:e0:ed:06:2e:99:d6:2c:
61:7d:1e:06:d3:ef:98:f5:32:6c:f6:97:d3:d5:f7:da:1c:f8:
a1:69:ef:e0:50:15:fd:b3:1b:d6:99:f6:ec:1e:2b:d9:61:fa:
93:9a:47:ec:1b:8b:a5:e9:b0:ff:ae:5e:44:9d:87:0d:25:e0:
b8:28:87:68:eb:84:cf:72:e7:2a:6d:71:7c:02:ea:38:c1:fd:
86:34:29:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:14:45 2025 by rpki-client