Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa
File: 3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa (raw, json)
Hash identifier: hxCEPRrABl2W3LF2H6wyx9DXcOHDHNw4q1X6dPPf1vY=
Subject key identifier: 71:A0:E6:0B:40:55:24:5A:82:4A:98:F2:9A:AD:70:B4:1A:02:EC:11
Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71
Certificate serial: 010D0C9F432858484C101CBB27728A95C8DDB480
Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 398125
IP address blocks: 208.71.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:1c:bb:27:72:8a:95:c8:dd:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d630f7ef-f514-4f83-91c4-7827a6397158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:c6:47:8d:92:57:7a:71:25:6d:d3:56:29:
86:59:22:57:24:95:ae:21:67:32:0b:97:f9:ba:2b:
6c:17:11:60:3b:9f:39:94:2a:24:99:a4:a6:e1:c4:
ac:f8:0e:75:ce:44:66:34:79:40:1d:42:eb:40:e1:
99:c8:89:ed:2a:7b:7c:4c:c5:68:16:e1:2f:1b:ce:
af:38:cb:7d:0d:3c:c8:0d:2b:e2:b1:3d:77:c2:0f:
43:81:01:5f:a7:d5:f3:b8:aa:59:fc:31:b8:8b:5d:
ff:81:8e:e7:0f:22:c0:2c:69:cf:35:03:45:44:bf:
07:87:1b:09:fb:0b:18:72:04:be:c2:b1:ff:9e:21:
5c:2d:2a:d7:ee:94:7f:75:6d:d8:0d:fc:e0:36:23:
1a:38:7e:85:10:60:0e:69:b4:9d:b0:1c:71:95:2d:
dc:17:d9:94:d8:36:c1:49:54:5b:9d:ae:2d:49:81:
dd:bb:ff:a4:06:57:bf:a8:ad:99:fc:40:7c:1c:f2:
a0:c2:80:a6:07:99:2a:95:27:11:99:b7:8b:a8:12:
1a:a9:6e:f7:7a:0a:7b:dd:51:2a:67:92:f8:22:c0:
81:bf:35:c8:dc:32:42:73:48:e1:59:23:34:e9:9d:
d0:cc:92:a0:07:d6:71:6e:c8:63:82:0c:ab:cc:84:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A0:E6:0B:40:55:24:5A:82:4A:98:F2:9A:AD:70:B4:1A:02:EC:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl
X509v3 Authority Key Identifier:
keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:5c:0d:69:95:21:b4:25:64:72:9a:02:f1:a9:1c:76:c8:b3:
60:11:34:bb:db:13:df:f3:df:cb:af:ca:d3:c8:ab:58:63:da:
ca:b0:b9:6f:45:ba:38:4c:48:6d:8c:92:b6:f3:32:8b:8c:06:
3a:be:6c:9e:a9:14:28:81:de:7e:bb:2b:63:bf:a0:61:67:d2:
30:6b:64:b8:8b:ab:b3:bb:a1:e7:25:51:a6:75:79:18:22:a5:
ab:9c:e5:9d:1b:7b:da:0d:22:c5:de:e0:ef:4a:26:c7:b5:d5:
c1:57:ad:0c:d7:e5:42:f6:f4:d8:d1:77:b9:a7:df:36:ba:0f:
cd:40:af:ec:be:30:a7:06:cd:c7:1f:88:67:fb:3a:36:10:4d:
d7:d1:48:01:7e:dc:8d:ef:8b:99:7c:01:7a:82:82:d4:d4:7f:
ee:73:91:13:81:08:d4:d5:ec:fb:53:e4:41:cc:d7:f5:89:bf:
1e:38:1a:32:bd:c0:c1:49:94:46:f5:10:b2:bb:57:f1:28:cb:
77:c5:67:92:32:61:ee:88:2f:16:80:3c:8a:3e:4e:7a:7b:ff:
4f:81:a5:d9:ff:df:2a:55:a9:b0:61:17:e5:96:17:2e:92:2f:
19:eb:cb:61:a5:a4:56:dc:fb:b2:78:28:99:3e:83:29:2a:81:
68:ac:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:29:57 2025 by rpki-client