Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa
File: 18393493-e621-3412-b61f-128e8405bd3e.roa (raw, json)
Hash identifier: LF2aFmWBQ5Kjc7tAljCAMzIPaHWin6+2thojwMuvt8c=
Subject key identifier: BF:CC:84:9D:4B:79:C4:CF:8D:6D:99:69:C2:CD:35:AB:A1:E5:86:4C
Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial: 010D0C9F432858484945676E5EC76E9C1F7F4A80
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 6597
IP address blocks: 208.88.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:67:6e:5e:c7:6e:9c:1f:7f:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=70942c8e-5df2-4177-9c27-bcd3940fdc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:02:0b:a4:d6:ac:b7:c4:89:1f:3c:cd:fc:
61:90:c2:11:e3:db:ee:50:f5:a5:bb:d2:02:32:59:
11:bd:21:55:23:25:67:cc:30:7a:9a:a0:de:1e:24:
ab:e8:cb:5d:47:0e:8c:53:f2:da:00:86:a9:75:fb:
a6:8b:2f:c3:b0:da:fc:02:62:6b:6e:d4:f5:3b:8e:
85:76:0b:16:15:51:da:09:2c:08:e7:1c:e4:9c:1a:
f6:57:b0:ab:eb:8c:16:2a:51:7e:49:d9:4e:20:0d:
37:2b:8b:90:de:35:60:ea:43:37:06:61:ef:26:d9:
0e:7c:09:5a:8a:b4:f2:25:bf:69:76:c8:86:35:2a:
08:62:89:a6:45:58:53:58:d0:c6:c7:73:c3:98:20:
a7:bd:44:2a:69:3b:0c:3a:20:43:69:e6:0c:58:a4:
b3:79:be:8d:8f:5d:5d:af:aa:6a:0b:d1:0e:03:ca:
bf:4d:16:22:e8:a6:d6:af:d6:a5:bd:c1:75:5d:92:
ee:bc:e9:2c:bc:89:a5:17:ae:ac:ed:cd:10:b8:6f:
b3:9a:c3:1e:58:33:d2:82:1f:11:ea:62:9d:ae:10:
46:46:5e:f4:45:59:ec:33:6a:46:3f:97:29:0a:c0:
2a:91:23:37:be:a0:65:dc:e3:e2:58:10:67:41:9c:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CC:84:9D:4B:79:C4:CF:8D:6D:99:69:C2:CD:35:AB:A1:E5:86:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/18393493-e621-3412-b61f-128e8405bd3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
X509v3 Authority Key Identifier:
keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:cd:6d:6a:35:f1:e8:dd:fc:5f:50:6e:c4:64:6e:d8:c4:7b:
31:af:3e:96:9e:77:8c:d0:e3:a2:b2:71:21:02:ff:fe:94:b0:
ad:78:ee:58:32:c1:1e:8e:21:7d:f0:4a:a0:72:29:20:25:4c:
e2:89:0b:76:07:79:14:a8:43:f0:a0:76:51:8d:03:f0:52:22:
f3:d7:2b:98:fd:f0:08:e2:c6:3f:13:3d:6a:e8:b5:2e:5f:42:
11:7a:e7:2a:1d:2d:5e:f4:1a:51:dc:0c:5e:d2:99:a6:34:da:
96:e3:2d:67:ef:b6:17:c5:a6:2b:73:49:35:e5:f5:76:90:21:
4a:20:99:91:a1:26:57:45:30:72:95:c2:f6:18:29:fc:6c:9f:
99:20:6e:47:60:68:97:2f:dc:f9:13:69:0b:ea:19:21:3e:86:
55:25:a1:4a:ea:05:f4:6a:0a:97:9f:39:7b:17:74:c9:6d:e9:
5e:b6:2c:d1:b1:ac:9b:8a:10:9e:eb:ba:f6:04:b2:4e:84:5f:
fe:a0:6b:1d:99:0d:c2:c4:84:d2:ea:07:af:12:f2:54:a7:7e:
ed:42:16:ec:bc:52:bb:e7:1d:09:66:f1:97:ff:e1:8f:9e:cd:
17:b6:0c:ef:aa:4c:b9:02:88:11:a8:c6:53:da:e7:18:2e:c6:
d7:c1:e1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:22:00 2025 by rpki-client