Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/59290798-9493-3ea4-bf43-c976b41225f6.roa
File: 59290798-9493-3ea4-bf43-c976b41225f6.roa (raw, json)
Hash identifier: TYYqm9NNOTbl/9KAPD2+GKxl7gu1lbRnRM2ZjBWU45E=
Subject key identifier: F1:47:87:51:B7:6B:3E:49:46:5D:07:8D:60:FE:A1:8C:4C:94:8D:0C
Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial: 010D0C9F43285848417E1E7FB6370E7E1BAB7B00
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/59290798-9493-3ea4-bf43-c976b41225f6.roa
Signing time: Thu 19 Dec 2024 07:08:33 +0000
ROA not before: Thu 19 Dec 2024 07:08:33 +0000
ROA not after: Wed 19 Mar 2025 06:08:33 +0000
asID: 6597
IP address blocks: 208.73.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:41:7e:1e:7f:b6:37:0e:7e:1b:ab:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Validity
Not Before: Dec 19 07:08:33 2024 GMT
Not After : Mar 19 06:08:33 2025 GMT
Subject: CN=70d920ec-7f82-4968-b074-ea89b3234adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:70:21:95:75:e1:c0:bb:cb:9f:2d:46:98:
f7:68:30:b4:54:3b:02:7f:9a:40:f1:0f:66:6f:b1:
00:0e:21:f8:0a:96:44:be:57:8f:98:69:9b:5f:53:
8a:f1:2f:b1:83:2d:bd:50:0e:2b:79:56:73:44:da:
37:d3:92:0d:f5:86:4d:1a:01:5a:26:c0:f3:1a:05:
7d:50:41:91:bb:96:b3:6c:ad:be:9c:a8:7a:fa:62:
4f:8a:cd:af:e1:27:4b:40:20:7a:3b:d1:3e:6b:31:
ab:88:53:0e:1a:b8:dd:fe:92:f9:d1:38:57:c4:91:
fb:0c:e9:98:a2:39:59:bc:62:2c:ca:f2:bc:4a:e0:
23:50:d0:f9:a7:d5:f3:3d:d8:90:22:59:2c:65:7d:
58:06:e9:d1:f7:e8:65:b4:14:91:a8:02:9e:fb:99:
48:20:19:f8:61:e5:aa:9a:91:85:f4:73:e5:ef:b8:
39:37:42:52:24:d3:ec:a6:7f:e2:cf:d4:52:ae:3e:
8d:a3:02:65:ca:94:28:e0:d2:49:29:c1:0f:e9:0a:
a4:90:3e:f9:7f:ff:27:57:f0:5f:e7:fa:dc:53:b3:
53:5d:f4:04:76:0a:39:6b:84:21:c3:f1:bb:b4:44:
83:a8:86:00:76:68:b8:9b:8b:50:20:6b:7d:59:9c:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:87:51:B7:6B:3E:49:46:5D:07:8D:60:FE:A1:8C:4C:94:8D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/59290798-9493-3ea4-bf43-c976b41225f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
X509v3 Authority Key Identifier:
keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
sbgp-ipAddrBlock: critical
IPv4:
208.73.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:cc:b9:d7:c9:e9:3f:f7:11:07:82:c7:d3:36:5c:e6:82:22:
70:71:5e:11:f1:5b:c5:e7:e5:d7:b4:5a:97:f1:67:33:e7:9f:
70:3c:a6:50:f6:20:db:e5:a6:68:a9:15:75:cc:7c:e6:93:36:
e9:8a:65:6b:dd:c7:cb:f3:a6:0d:3a:a5:69:53:54:f7:eb:97:
75:68:96:59:9f:7f:0f:9f:9a:f9:cd:42:d4:e2:e2:4d:15:1b:
b0:01:94:a6:ff:7a:ee:31:3b:51:43:0f:09:4b:85:ff:fd:95:
18:33:51:49:e4:18:de:0c:d9:28:b0:3a:c0:cb:34:a3:75:82:
d6:b1:32:f2:fb:4e:c7:6b:34:1d:75:8f:b3:6f:99:30:ad:9c:
5e:c8:2a:2a:2f:ae:64:aa:7e:f0:59:d8:b6:92:f0:33:ab:39:
f7:4d:e8:a5:35:61:4b:f8:8d:e3:c3:f9:62:f9:6c:c9:30:4d:
86:bb:ca:b3:cd:ac:6c:c8:9f:52:a1:b7:b9:3b:19:13:f8:bf:
e2:67:dd:94:80:9d:f4:f5:b9:8b:3f:c2:76:25:ae:0e:85:35:
0c:6f:b3:5a:63:b5:83:02:86:ab:97:f0:87:89:40:d1:29:7b:
c3:bf:4a:c5:f3:49:9d:b6:ae:f6:95:c0:41:67:85:ad:69:01:
84:4e:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:43 2025 by rpki-client