Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d4979f1-23a5-387b-a154-9e50b5705d9a.roa
File: 8d4979f1-23a5-387b-a154-9e50b5705d9a.roa (raw, json)
Hash identifier: zR0Emr+pUQZ/XVB5RLuAePp1sZxJC4NGSwdaZgdMbNo=
Subject key identifier: B3:8F:55:9E:72:58:1D:E7:CD:7C:97:8B:54:20:4D:43:57:39:D8:6D
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F432858483B5014A62E751DF00F039B00
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d4979f1-23a5-387b-a154-9e50b5705d9a.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 398105
IP address blocks: 208.109.141.0/24 maxlen: 24
208.109.142.0/24 maxlen: 24
2603:4:1016::/48 maxlen: 48
2603:4:1019::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:14:a6:2e:75:1d:f0:0f:03:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=a29c984f-020d-4089-a8f9-6b000cdab89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:08:8d:29:75:d4:db:ce:f6:87:bb:0e:4e:
29:46:94:27:33:fc:45:1d:df:c5:22:97:d7:fb:01:
f0:d6:28:f5:6f:30:48:bb:58:26:ff:bc:53:ad:2f:
38:2f:27:d9:3e:18:08:a1:d9:87:20:f2:cf:21:c0:
dc:fb:c1:2d:9f:6a:3d:73:90:ec:13:a0:14:74:d2:
ad:58:39:3e:d5:f9:2f:21:3f:ab:1f:98:74:c3:fd:
2e:c4:a5:35:19:37:25:cf:19:1d:f9:fa:f4:b5:5c:
75:33:1f:17:84:cc:4e:ba:59:25:c6:2b:5e:3a:0b:
f0:d7:ec:40:85:17:78:d5:66:ac:82:a2:a9:db:c5:
25:ac:27:0c:9a:c4:e3:be:68:f6:b3:c6:29:7d:e3:
30:c9:65:d4:55:52:77:78:19:b8:78:aa:6c:85:19:
03:59:bb:e1:ba:76:d3:c4:44:20:c0:93:8d:18:5d:
f7:40:55:97:57:48:2f:e2:ce:59:d6:8e:3f:7b:a9:
fa:66:b9:d7:32:bc:ea:9d:ce:80:a5:03:a4:3d:61:
13:bd:27:6d:21:83:05:77:17:6d:91:ca:c7:28:f1:
a7:94:97:be:fe:1e:f5:d3:ae:4c:92:13:e5:ed:be:
4b:5e:d1:16:e4:45:e0:4b:e9:ae:2a:9a:c6:00:1d:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8F:55:9E:72:58:1D:E7:CD:7C:97:8B:54:20:4D:43:57:39:D8:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8d4979f1-23a5-387b-a154-9e50b5705d9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.109.141.0-208.109.142.255
IPv6:
2603:4:1016::/48
2603:4:1019::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:f5:4b:bd:f4:01:c3:77:a2:d8:a7:f9:9e:ce:f2:02:bd:08:
f9:9a:da:5f:4b:f7:97:65:c9:29:9d:9d:2e:aa:62:a3:8b:e7:
57:29:b4:81:c8:69:d8:04:8a:9e:98:36:6e:c8:25:11:87:2a:
e5:4e:ea:5b:c2:9c:ae:67:03:6c:62:98:6b:7a:74:54:5b:34:
46:0c:84:9d:ac:90:bb:dd:21:d1:97:e0:1e:38:63:e0:30:72:
99:72:31:f3:f2:19:57:7b:26:2c:aa:cf:a6:f0:6b:63:bc:49:
05:b6:2c:13:69:2e:c3:d2:25:6a:e1:10:dc:8a:e6:23:2b:96:
3b:0d:22:4d:00:60:3d:38:60:8b:93:c1:55:84:75:5f:b4:79:
0f:04:7e:4b:4f:19:e0:ab:bf:f7:2f:ea:c0:67:42:b3:fc:1b:
52:15:3f:18:f2:c0:48:34:fd:c7:5d:98:e5:f7:f2:25:b5:d6:
d4:d9:db:e6:b5:81:15:0a:c3:b6:2b:f8:ef:f7:8e:a4:06:e5:
f0:1e:47:a5:53:81:5c:0b:03:4e:dc:73:63:74:7d:e9:ff:a5:
ef:4a:55:7d:d2:00:80:31:5b:83:0c:3c:2e:a9:03:bf:2b:e9:
f1:aa:df:92:ec:6d:2e:d1:2e:82:65:d8:02:c0:8e:fa:d0:99:
b5:0a:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:42:04 2025 by rpki-client