Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
File: ab83317e-d613-3cc0-837d-292716cc95ae.roa (raw, json)
Hash identifier: SjuGYKYbe/3okneG3puF/o8GB7Iza0fKYOfO/vTJ2Os=
Subject key identifier: F0:66:FE:8A:DC:22:9B:C6:A7:A3:BA:D7:83:BA:71:D3:AF:22:36:B3
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584891DB30593614B3F1B6839DA0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 397518
IP address blocks: 208.109.143.0/24 maxlen: 24
208.109.145.0/24 maxlen: 24
2603:4:1017::/64 maxlen: 64
2603:4:1018::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:30:59:36:14:b3:f1:b6:83:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=72737328-d24b-4347-bebd-9263ede4851e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:1d:78:99:54:ad:20:43:ed:ef:90:2b:1c:
25:80:ef:20:c9:b5:d3:d0:dc:09:c9:22:50:6c:c6:
f2:2c:ef:65:6e:6b:77:28:8c:5d:73:8c:9f:f8:be:
35:c0:23:fc:2f:2d:c5:74:55:6c:fa:cc:90:5a:ea:
63:1f:cd:f4:dc:8c:ef:4b:e3:7e:cd:fe:09:dd:f1:
8e:d9:4e:ba:7d:39:32:e2:a5:29:48:ac:28:81:1d:
37:51:28:a1:cf:2e:af:71:e0:24:15:2c:2e:76:8c:
5f:2b:d8:d5:32:8a:e5:c6:3f:43:49:93:87:67:2f:
7d:cf:73:6e:fd:db:ee:b9:31:8a:dc:f0:fc:76:f5:
5b:69:02:1e:82:16:db:00:fc:f3:30:9b:c1:6c:86:
fa:71:3d:b2:3f:fd:b8:d7:86:29:ec:3a:64:dd:b2:
20:81:75:21:51:af:58:d6:53:e9:78:a2:cb:bf:73:
27:59:34:5a:24:75:12:c8:ee:6b:9d:b8:11:83:ac:
e0:b8:eb:c6:22:d2:7a:fe:61:f1:02:9d:5c:a9:5d:
13:34:04:80:5f:01:dd:5c:39:3f:5c:79:06:f7:b7:
05:9b:b6:16:7b:48:3e:8b:52:15:1f:76:d9:44:18:
0f:5e:f3:7f:94:8a:c4:23:20:b7:c6:54:1b:fb:15:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:66:FE:8A:DC:22:9B:C6:A7:A3:BA:D7:83:BA:71:D3:AF:22:36:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.109.143.0/24
208.109.145.0/24
IPv6:
2603:4:1017::/64
2603:4:1018::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:0d:7f:d1:58:7b:af:5f:ce:27:b3:9a:93:8b:f3:e2:f7:7e:
a8:56:41:c7:fb:59:c4:6e:2a:6c:7b:4f:7a:ee:cf:3b:a1:3c:
e5:eb:15:ca:f7:40:52:e6:51:99:e6:65:36:a8:d8:fb:d4:b9:
ec:23:f0:9f:8c:91:cd:8a:9c:f0:4e:01:5b:9d:2f:9e:6f:0f:
c3:9b:b0:17:5f:5a:46:e7:0b:71:dd:45:df:cf:e2:72:21:09:
07:f8:34:0f:3b:a3:63:a6:15:7f:b0:93:ac:18:9d:10:41:5e:
e8:cb:4f:12:2a:91:22:72:02:ca:22:b8:e9:2d:1e:b4:b7:76:
f4:4c:1b:ae:6b:77:68:3a:d4:5b:f2:10:c2:c5:5e:3c:29:90:
83:62:4c:26:aa:14:4b:3b:07:af:56:8d:31:b8:a7:2e:70:04:
45:4a:84:ee:86:14:18:16:65:1d:2f:c8:d4:17:80:2c:1e:06:
2a:d3:44:c3:8e:8e:73:e2:12:09:0a:b4:23:59:9f:e3:72:99:
7e:6d:c3:64:b9:e2:85:46:b9:01:87:03:19:ea:ca:68:d2:c5:
4e:4a:62:e4:c4:bf:8d:9e:5f:1f:c7:af:b9:6a:73:ec:6e:e2:
9c:b9:af:ce:7d:33:2e:e5:1a:fb:4b:2c:4e:8e:31:13:6d:c8:
b0:bc:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:23:29 2025 by rpki-client