Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa
File: 3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa (raw, json)
Hash identifier: kW4ilIrQ2M/V7T6AwIFwjsTYep5QaKMuoEsjecG4JsQ=
Subject key identifier: 25:6A:F6:45:56:57:05:60:CE:DF:63:E2:12:79:C3:04:AF:6F:68:3B
Certificate issuer: /CN=1278dcae-79cc-43c4-b974-7a8df750630c
Certificate serial: 010D0C9F432858483F8026B91F4D56A25FE05E00
Authority key identifier: AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 397550
IP address blocks: 208.91.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:26:b9:1f:4d:56:a2:5f:e0:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1278dcae-79cc-43c4-b974-7a8df750630c
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=18904c48-319e-4811-97c6-0c9fd5928778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:81:13:73:0f:6b:39:dd:d2:3e:1f:f8:80:d3:
09:d2:84:0a:ae:b5:7a:f3:b2:89:43:6a:9a:b1:8a:
5d:72:ad:ae:7d:a2:29:84:48:b0:c9:b7:5a:a9:12:
c0:6b:e8:67:9f:76:68:ac:96:a5:df:7b:a1:bf:e3:
7e:09:8e:84:f5:2b:bb:27:92:84:9c:7e:12:f0:81:
e8:71:1f:ac:83:73:ff:83:2e:36:02:0d:c9:8d:f6:
04:5b:f2:51:e1:e5:c6:4b:dd:84:11:91:58:e0:3e:
43:dd:2e:a7:df:2d:ee:62:2b:b3:cb:91:80:ad:e7:
23:c6:22:04:5b:fc:f7:45:6e:67:d8:a9:6f:9e:a1:
17:67:44:6c:71:13:2b:94:3f:d3:df:b5:50:64:0c:
a6:dd:0c:ab:5f:58:36:8e:d6:4c:b5:d5:32:8c:1a:
58:fb:0b:f0:d3:37:20:65:74:0b:cb:00:b5:49:3e:
b6:8a:92:d0:f9:00:21:a1:f9:17:42:7b:03:2a:f7:
af:38:21:e9:cf:b8:7c:a6:fa:bd:3e:8a:15:e9:0b:
25:1c:bd:fc:83:9e:a0:22:9a:30:27:d4:b4:ba:89:
aa:cd:2f:7b:e0:94:4c:70:bb:7a:8b:6b:37:be:7c:
eb:ea:49:3a:b0:e4:18:15:d7:56:e3:4d:d1:a0:0e:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:F6:45:56:57:05:60:CE:DF:63:E2:12:79:C3:04:AF:6F:68:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/3afa1228-a192-3ab6-85c3-e3eb06ba7375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c/1278dcae-79cc-43c4-b974-7a8df750630c.crl
X509v3 Authority Key Identifier:
keyid:AA:1E:2F:B3:BA:54:76:06:E3:15:82:BE:26:D4:A0:E3:A0:6F:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1278dcae-79cc-43c4-b974-7a8df750630c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.91.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:00:f2:23:38:2b:71:ea:bb:9d:4e:a3:f6:f1:9d:98:5a:7f:
78:83:03:9a:c9:cb:22:53:2f:34:ec:87:5f:52:ce:47:c1:32:
34:3b:a2:4b:d6:eb:b1:7d:2a:04:ce:f0:eb:64:f5:df:07:25:
39:42:96:9f:cf:07:71:78:54:c0:4c:d4:68:49:6a:b4:e7:54:
09:10:6c:54:31:1e:1f:be:96:85:2d:57:6a:6c:44:96:a5:b4:
3d:fa:81:e2:20:82:a0:0b:42:0d:17:35:5e:3b:88:32:fe:e9:
88:79:9a:09:c4:78:bb:28:09:25:13:bd:ea:91:ff:10:e7:e6:
57:7f:e7:a6:74:ae:45:ba:46:84:2c:a4:21:d8:e8:cc:81:7d:
44:75:50:c6:1f:a8:39:4b:1a:cd:54:f9:5b:54:c5:91:c8:26:
7e:c7:76:1e:cb:50:db:ec:5e:3e:e8:a4:3e:a5:72:5b:97:a7:
d1:51:54:15:d0:ae:8e:bc:9e:5a:c6:1c:c5:c9:f3:8c:2e:2b:
95:e4:e6:9c:7d:be:b4:d0:39:fa:ec:67:84:14:b9:b7:97:35:
76:7c:d6:e4:42:c1:f8:9d:0a:a8:5e:41:59:d6:d3:94:78:0f:
30:1c:64:22:3b:24:ef:56:c2:5e:00:dd:e3:e5:6f:b2:b6:43:
c8:cc:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:58:20 2025 by rpki-client