Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa
File: 507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa (raw, json)
Hash identifier: 8tXJ7Q1nj8uB+323DeQvhznppLI5ICNet6TrLuuAHvk=
Subject key identifier: C6:11:D3:80:66:9E:B8:FE:A0:3A:04:01:FA:00:D1:F5:92:86:95:87
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858489A3B4E97A2BFE179466B5D60
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 208.89.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4e:97:a2:bf:e1:79:46:6b:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=1cb9f6d4-b9a5-4ee5-ac67-5a8a582e0222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2d:a8:b0:85:74:44:37:9f:91:b7:70:70:08:
97:21:78:71:f0:9d:73:92:d1:b4:dd:02:df:1f:fe:
42:d3:77:91:7c:d8:76:9d:a3:59:f4:b9:a8:17:f4:
88:ed:ed:e6:a6:f5:7c:0f:8e:7c:9e:e2:53:89:b4:
4a:b9:55:f4:0f:14:e5:31:38:40:c8:97:95:39:2f:
f7:70:8c:aa:55:89:0a:11:5a:1d:98:74:8c:5f:1d:
d2:2a:8f:d5:4d:bd:ed:d5:a4:39:55:a3:a9:d2:8e:
f3:24:b8:6a:3b:8c:41:4b:98:c7:6d:ae:8b:3a:0c:
ac:eb:9d:2a:51:d2:c0:6f:76:93:93:b9:03:ff:06:
d6:d9:2a:ec:57:8b:8b:1f:65:9f:d0:45:f5:e7:09:
e9:a7:82:a8:d7:53:72:20:58:ce:28:58:f3:f9:42:
4c:21:62:84:a7:77:b9:ce:4b:81:14:2a:a2:ff:cc:
4f:16:b2:a7:4a:84:6d:a4:45:05:fd:7c:c3:95:f2:
70:1e:77:a6:04:34:69:77:a9:63:f3:b9:ff:c1:3d:
e4:a3:6d:4e:0f:24:b9:c9:f3:c0:0e:e6:8e:59:04:
2c:da:18:5d:86:e1:01:08:84:00:07:85:5d:f2:ff:
48:9d:39:34:98:ec:91:ff:14:fc:7f:7e:a7:a1:cd:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:11:D3:80:66:9E:B8:FE:A0:3A:04:01:FA:00:D1:F5:92:86:95:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.54.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:e3:24:27:fd:b5:69:bf:2b:cd:35:9b:12:14:dc:e3:ba:51:
bf:be:c2:e2:9f:5a:d1:36:b9:a3:f1:30:e6:ed:7b:83:17:36:
9e:76:fc:21:dd:07:dd:8d:fb:96:11:f8:0e:00:5b:2e:28:e1:
31:a9:f3:64:0a:a0:92:97:be:67:ef:86:83:42:bb:a8:b6:e1:
93:cc:17:9e:1f:e9:a9:a1:49:c0:87:5d:2b:4a:4b:8d:1e:16:
b4:42:28:f6:af:51:42:f6:e3:93:5f:d7:78:4f:95:13:39:0d:
eb:90:a7:7e:42:65:67:28:19:1f:0c:16:61:3c:6e:69:00:b9:
86:40:9f:51:4c:c4:28:82:a4:6b:fc:20:b3:fb:60:d1:e9:a9:
5e:7f:be:b2:31:d0:62:29:38:0c:0a:f5:52:d7:91:f7:eb:8f:
93:e9:1e:af:dc:27:e6:b8:1d:71:a8:ee:47:9b:30:0d:29:f2:
06:e7:99:14:29:b5:0b:00:48:ce:95:ff:0d:aa:79:7e:56:05:
59:86:7a:57:31:d5:3a:6e:96:0a:3d:75:1f:37:c9:c5:b0:0f:
7d:8e:9b:22:b0:ac:b9:57:cc:2a:7a:9e:95:42:19:96:38:d2:
03:35:30:64:88:08:30:73:8f:b0:a6:91:aa:02:a2:68:29:ce:
06:39:f1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:07 2025 by rpki-client