Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa
File: 2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa (raw, json)
Hash identifier: nK3J2qoTbc6a55zqhTX1N3OHJXEMpIz44zzU09mEE/I=
Subject key identifier: C6:D0:C3:84:77:33:28:45:39:58:90:EA:AA:97:18:54:74:43:7B:30
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858489A3B4E85C4B8A13D1B8DF0C0
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 208.89.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4e:85:c4:b8:a1:3d:1b:8d:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=c3bb9066-7360-45a6-8ab7-c4b7deb7c1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:b5:0e:8a:15:85:00:d6:53:d8:44:00:c7:
05:99:f5:d0:73:49:64:0f:aa:59:75:0d:79:5c:06:
ed:3d:63:cd:32:1b:6a:c7:4d:a9:48:54:31:20:9b:
2c:cf:96:2a:0a:ff:14:c0:be:2d:78:d5:e8:31:ca:
5c:52:0b:a7:f1:ee:da:40:60:6e:b1:ad:46:ce:fe:
db:b9:f1:3b:92:ad:ef:3c:86:20:64:08:d8:5d:61:
72:3d:f6:61:5c:ab:f7:8d:3e:0a:af:25:28:d2:39:
a1:06:5b:01:2c:ee:6a:cf:c1:b3:ef:0d:26:0e:9d:
f9:f4:1c:14:9d:be:7d:91:ab:64:5c:fd:93:88:84:
85:93:c4:b8:46:c4:80:5d:94:c2:d3:02:a4:bc:98:
db:97:bc:b7:20:4f:f9:24:58:89:a3:ca:3d:1d:ff:
13:51:ff:ab:96:54:fe:ef:29:cc:20:d0:6d:07:ca:
f6:8e:27:f9:08:f3:40:f0:f2:d9:e0:49:a6:ab:7f:
9f:e1:33:a7:2e:1d:1a:af:0e:d4:aa:40:21:9d:f7:
b2:f0:e7:39:82:93:b5:fc:27:a5:83:5d:47:1f:7e:
a3:cc:91:8f:99:fb:0c:53:34:af:d2:f6:02:14:10:
6f:cc:85:f6:7e:77:3e:64:f0:83:72:b3:80:94:65:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D0:C3:84:77:33:28:45:39:58:90:EA:AA:97:18:54:74:43:7B:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:2b:1a:78:83:09:2a:08:5e:07:77:91:c3:a2:c8:76:3d:ac:
da:69:aa:44:74:34:f2:27:df:98:c9:04:f9:09:88:89:25:1c:
e1:fc:6e:d8:6b:ef:2a:0f:9e:45:a5:ec:f7:98:63:a3:7d:c3:
64:31:16:74:ae:5b:75:df:86:e9:c1:24:83:27:2c:04:54:97:
79:17:f1:97:76:46:f4:06:7a:d4:73:00:1c:fb:df:2d:76:9d:
0b:f6:79:ec:41:1f:b7:e9:8a:1b:e6:43:cf:d2:fc:04:48:48:
de:3c:4d:98:8c:61:6c:b5:41:d2:ae:45:c3:44:7d:a3:0a:37:
3c:1b:d4:48:05:d5:df:ff:ff:87:61:45:2b:00:32:8d:da:24:
e4:f6:d7:ee:db:7c:df:5f:0a:aa:31:2e:23:68:1f:90:49:18:
a2:89:31:b5:f6:7e:8b:73:d8:c2:d7:77:2e:3a:1a:49:d1:29:
01:5a:f9:2d:01:4d:7a:b0:2b:ad:a2:ae:15:33:19:5d:b1:56:
8c:b3:3a:a1:d7:c5:e7:ed:d5:39:5d:df:57:ab:07:a1:5c:ff:
70:c7:f8:ad:ef:3f:c7:c0:c9:f2:fb:76:be:da:c1:16:fe:e0:
f6:c5:ae:3e:92:cf:75:98:5b:e5:86:97:0e:19:3e:b7:f8:09:
ea:9b:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:40:48 2025 by rpki-client