Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/dc103ac2-331e-31c8-a327-a57dcb3f6433.roa
File: dc103ac2-331e-31c8-a327-a57dcb3f6433.roa (raw, json)
Hash identifier: JUmmlp7eWIQo1sRECHgTJlFe4o8tK7WPEZR1PdqpbB4=
Subject key identifier: 8F:F8:96:E3:26:17:1B:D7:98:FF:E1:F6:56:09:BB:10:41:32:0D:42
Certificate issuer: /CN=cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0
Certificate serial: 010D0C9F43285848186A8C729FE75BEFEEFA6F80
Authority key identifier: AE:FE:3F:1F:93:EA:39:58:6E:45:50:10:E7:00:77:6E:7A:D6:29:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/dc103ac2-331e-31c8-a327-a57dcb3f6433.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 14220
IP address blocks: 208.94.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:8c:72:9f:e7:5b:ef:ee:fa:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=a6c16bc4-f1ea-40c0-91f3-a86744d082e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:b8:79:13:c5:0b:68:a6:c9:d8:30:10:ae:
fb:c5:55:d3:ed:c4:5d:24:8c:01:7d:f0:82:10:3b:
cb:72:93:32:68:b0:3c:e5:4d:74:d8:af:d1:8d:4f:
1e:48:47:cd:bf:38:95:8b:1a:49:09:ba:4f:91:9c:
bb:e9:69:4f:8d:e6:a0:4e:5a:39:04:da:17:8e:5a:
79:13:7c:6d:82:22:67:4d:ba:09:a3:83:8a:10:a0:
13:82:31:af:2b:ab:e2:69:66:02:e6:b4:7b:b0:88:
8d:fb:ec:59:31:c6:5d:86:4c:72:9f:18:3c:f0:76:
51:44:73:b3:88:80:2a:e6:c0:52:cc:3a:33:da:87:
84:05:ec:15:14:b9:c0:9b:b4:0f:b0:21:4b:7a:42:
b6:0a:c1:7a:b9:5e:35:98:a1:91:be:b6:bf:73:ab:
ca:f9:d0:63:82:5e:02:10:21:85:58:40:a3:85:79:
f0:c3:d0:a8:42:1f:73:80:bf:b4:fd:b8:64:d2:50:
0e:ae:82:26:4c:f4:75:91:cf:ca:55:d3:05:cd:14:
dc:33:77:c8:ef:bf:78:11:f6:81:80:cb:f9:95:9f:
16:8d:ee:37:af:dc:a0:7a:e7:24:55:f3:53:d6:fe:
02:04:44:76:e9:14:ad:2c:07:4a:15:2c:fd:96:c5:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:96:E3:26:17:1B:D7:98:FF:E1:F6:56:09:BB:10:41:32:0D:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/dc103ac2-331e-31c8-a327-a57dcb3f6433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.crl
X509v3 Authority Key Identifier:
keyid:AE:FE:3F:1F:93:EA:39:58:6E:45:50:10:E7:00:77:6E:7A:D6:29:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:40:eb:64:9a:7f:ba:88:14:ab:5e:29:d0:38:c6:d9:ca:18:
be:e8:c8:5f:4f:8d:9d:54:a4:d1:39:2d:1e:01:19:b6:be:2c:
e3:51:a3:bf:56:f7:e9:5f:e0:44:bf:36:94:6a:e1:34:2b:ec:
0d:2e:b7:30:09:c3:d0:b9:d9:20:9f:3d:97:60:73:01:82:6f:
ce:60:9b:92:08:35:2a:2b:74:b7:6f:fb:72:71:0b:63:cb:bf:
f3:c8:6a:ef:82:f1:ea:9c:e1:c1:fb:3e:78:36:b1:99:a8:ac:
1a:ec:d9:31:8e:a7:e6:58:72:30:cc:6d:54:4e:cd:6d:9b:76:
e6:7b:96:34:9e:00:e5:02:35:22:4f:c1:2d:39:fa:d7:1b:f2:
69:c6:9a:04:27:98:f3:1c:8a:3f:9c:2a:6a:f5:c3:ae:45:07:
30:ea:8f:7b:d2:f8:c2:23:e7:23:7e:9b:bf:e9:8d:33:1c:1f:
cc:fd:24:d4:17:ba:ae:8c:60:27:ca:9f:fc:e1:40:63:d2:84:
b6:0d:02:14:8f:e8:bc:ec:0e:62:86:97:da:0e:87:e5:29:cf:
c4:f1:fe:bc:f2:71:4f:d2:5a:f8:a8:ed:1e:b5:3a:52:e7:56:
77:c0:e2:60:2b:27:bc:5f:01:9e:fa:cb:5c:e5:0d:81:33:b3:
9f:90:8c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:20 2025 by rpki-client