Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa
File: 868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa (raw, json)
Hash identifier: O4vdWnpmB9HZBI/gMuPt/UTBKM7tEqbVSuY31AtS644=
Subject key identifier: 6D:D1:FC:65:85:E9:79:AF:C1:72:BC:2E:E5:6E:88:E2:4D:7F:8F:97
Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Certificate serial: 010D0C9F4328584849456DDCBEBC1A5B41450780
Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 16671
IP address blocks: 208.88.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:6d:dc:be:bc:1a:5b:41:45:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=ff540ddf-c52f-441b-b684-8d62460cc513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:fb:c0:ed:60:c4:b0:d5:90:d4:40:ab:5b:
b8:60:80:3c:8d:a7:74:94:93:3c:f0:82:1c:21:97:
03:d0:83:cb:b2:87:9d:e7:18:91:d2:70:cc:0d:e1:
88:4a:49:83:89:7b:ba:99:98:3a:61:a3:78:fd:03:
61:28:3a:da:29:a9:6a:22:19:e6:cf:e6:22:d3:cc:
78:54:26:e3:b0:ee:1b:38:5f:03:d5:98:01:d0:55:
26:8e:5e:a5:b6:2d:cb:2f:92:11:1f:2b:4a:62:2f:
59:e3:a4:45:90:c2:f7:69:1a:1e:e9:94:3b:5d:e4:
c7:54:39:bd:8b:6e:c2:ad:8d:93:51:a4:0e:76:94:
56:23:a2:86:8a:43:1d:4d:ce:bd:49:97:72:33:3b:
a5:65:de:4a:43:37:d0:bd:b6:91:b7:03:e8:13:0e:
a6:a1:b7:5e:bc:7e:4c:99:0e:6c:02:cc:23:fc:5e:
21:14:1e:bc:25:a7:9f:d3:a4:91:0a:c2:da:4a:e9:
ec:68:3f:92:36:de:b1:b8:8e:a3:5c:08:c3:f0:45:
ce:35:84:1a:a3:91:ca:c8:24:0a:bd:11:38:61:0e:
67:ce:16:f0:6c:30:7c:72:4f:cb:c0:03:62:b5:be:
83:21:10:08:99:4d:50:88:ce:7d:ba:6c:34:90:93:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D1:FC:65:85:E9:79:AF:C1:72:BC:2E:E5:6E:88:E2:4D:7F:8F:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl
X509v3 Authority Key Identifier:
keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:e7:9c:f3:7f:50:2b:4b:85:b5:68:49:eb:f0:ba:68:f2:e8:
60:9f:90:f0:22:59:3f:12:db:91:3f:31:14:94:1c:21:dc:cd:
4e:38:94:97:fb:10:fb:5b:33:4a:18:4c:71:d1:2f:dd:c3:00:
1c:5e:0d:80:e4:21:69:73:f7:b6:d0:52:c1:6d:44:45:d0:4c:
af:3a:5c:ac:c9:4b:a9:4c:b8:ec:8b:7c:46:7d:d1:7a:93:9a:
31:33:82:42:9f:10:11:82:f6:91:dc:93:b2:3e:33:6d:98:44:
df:98:45:71:8d:71:cc:30:ab:68:54:65:51:53:88:9e:cb:c2:
6d:8f:9e:fd:58:ff:e0:60:06:d2:06:91:8c:c0:23:15:9d:ad:
c3:a0:f7:07:1a:1c:a7:57:55:1b:86:1b:12:56:67:40:3a:c3:
ce:dd:b9:eb:32:c8:2c:d0:04:45:6e:f2:03:c9:6c:56:4f:4c:
25:42:d2:e0:ed:c6:ea:00:e3:a9:a6:5f:50:1f:eb:bb:fd:de:
01:4a:5a:35:a8:5b:5a:5f:8a:89:55:45:3c:b9:fe:16:87:0f:
d6:ee:cc:09:f1:b2:40:9c:f5:5e:53:45:b3:74:1c:ff:0f:47:
e4:67:fb:da:2e:86:c0:a7:09:92:3f:8c:6b:e1:32:f8:a2:e3:
5e:49:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:55:14 2025 by rpki-client