Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/0116482f-4344-303c-8e57-f8e40b8d46aa.roa
File: 0116482f-4344-303c-8e57-f8e40b8d46aa.roa (raw, json)
Hash identifier: jYIOvJSDK8dZWY96bWvtpjUsWCeHpcuo6QhzUU6lnYQ=
Subject key identifier: 40:2C:6C:7D:B2:E9:1A:18:57:D1:FE:E0:93:C1:31:E2:EA:C6:42:BB
Certificate issuer: /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Certificate serial: 010D0C9F43285848186A82E988B1C3E7D79C7800
Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/0116482f-4344-303c-8e57-f8e40b8d46aa.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 20259
IP address blocks: 209.71.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:82:e9:88:b1:c3:e7:d7:9c:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=8b35c349-d0df-4e82-b6c3-bc41b5187658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:60:a0:20:64:b5:6d:b4:67:98:be:f2:fd:
43:98:eb:7b:9b:90:c2:8e:e8:94:6b:5a:50:9c:64:
90:a2:33:82:1a:38:cb:2f:0f:3f:4a:72:71:8b:14:
d9:5a:af:dd:4f:d1:fb:f7:5c:94:98:f3:af:45:df:
6d:92:87:0c:f8:ec:a1:b3:d4:a0:7a:78:65:4d:0c:
39:1a:33:b5:7f:d7:54:ab:2c:34:57:6d:9c:67:dc:
42:bf:ee:fb:7e:dc:3c:a1:16:ee:ce:73:1d:87:61:
e7:b3:9c:9c:1b:36:f2:c7:4c:47:2d:32:b2:6c:85:
09:dd:57:89:b9:71:74:7d:a8:d4:26:92:ea:17:34:
9c:f8:98:1e:71:c5:9f:99:23:8c:32:66:b2:b8:a4:
ac:e8:c3:a3:9c:fd:6f:ad:7a:bd:6c:39:34:80:ab:
c8:5c:6e:c7:70:4f:46:4c:af:fa:39:65:f7:85:ad:
99:b9:ed:06:c2:a9:bc:3e:b3:8c:4e:27:10:72:0f:
b0:df:c2:35:11:0f:da:0e:42:62:10:ba:32:9f:3b:
b9:e2:67:db:02:e7:a9:85:2a:b2:6f:78:6c:0b:1a:
0b:cb:74:ce:df:0e:ec:93:64:58:61:c6:99:5b:63:
3e:be:b5:5b:7e:3a:fc:6f:01:71:bf:95:2f:91:72:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2C:6C:7D:B2:E9:1A:18:57:D1:FE:E0:93:C1:31:E2:EA:C6:42:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/0116482f-4344-303c-8e57-f8e40b8d46aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl
X509v3 Authority Key Identifier:
keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
sbgp-ipAddrBlock: critical
IPv4:
209.71.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:48:8c:73:23:1b:a3:fc:2e:3b:78:0b:fd:57:27:0a:d6:53:
89:3b:a4:89:ba:e0:9c:1b:66:5b:d8:a3:ae:7f:57:50:5c:4a:
20:2f:16:f1:e7:6a:1c:ce:78:e8:26:c8:1b:33:f3:f9:2d:f8:
50:ac:b1:5c:d9:af:5b:5e:fe:91:54:e6:cf:c6:5a:5d:1e:4f:
4f:0a:b6:b8:27:b0:55:08:63:f2:c5:ae:9f:90:b6:ec:57:83:
d7:d7:24:82:df:2e:60:51:b9:82:fe:ce:e8:43:88:3d:00:6f:
8f:f2:55:cd:c8:cc:cf:9f:89:3d:42:ce:1f:15:76:e2:9e:49:
c3:ca:ed:91:92:bc:e2:9c:70:d6:28:25:ab:ba:51:08:d3:47:
c9:b8:ea:f4:d0:3c:76:64:ec:8c:24:52:32:70:9f:89:03:ac:
a9:2c:f9:85:5c:0d:31:8c:00:d3:45:8b:60:0d:92:08:c6:0e:
06:18:cd:5f:9a:c8:d2:11:bc:27:0b:68:1d:cf:26:2f:b0:f0:
78:2d:71:e2:d3:d8:10:03:72:ea:bb:a5:5e:a5:d3:1c:cd:f0:
4b:7a:64:d0:9d:bd:16:51:bd:15:d8:ab:bb:b6:0d:76:8d:d8:
84:53:58:cf:0f:6b:f9:58:53:c8:2c:21:53:b2:38:cd:2e:95:
0f:34:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:33:49 2025 by rpki-client