Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa
File: 0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa (raw, json)
Hash identifier: v7fKYTu9DWxOl8WXbxffoMKfSwDNOAYIsR5xB28eaxQ=
Subject key identifier: D0:38:F1:D5:AA:B5:E9:85:22:49:F0:28:E0:48:01:D8:96:39:79:50
Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial: 010D0C9F4328584827C530D555EA449D13466A00
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 11404
IP address blocks: 121.91.208.0/20 maxlen: 24
121.91.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:30:d5:55:ea:44:9d:13:46:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=f7af906b-de98-4b30-9392-981440da56d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:4b:32:8a:76:d0:50:13:e2:c4:0f:c6:c1:
22:d7:53:e8:59:61:22:05:ff:d0:88:21:7d:9b:04:
d7:d8:31:33:d5:17:6a:ce:12:9f:ca:cd:d2:8f:1f:
06:34:87:69:52:d5:fe:17:df:39:4e:26:b1:2f:d0:
18:79:c0:1b:06:57:6f:78:ab:df:36:ab:f6:7f:ac:
c3:44:3d:01:db:a5:20:84:87:75:83:25:52:14:af:
53:fa:5f:b2:8f:48:dd:55:c2:ad:6b:13:63:39:85:
2a:83:f5:5b:09:5b:6f:0c:4f:8a:0d:e3:93:81:19:
c7:ee:3e:fd:82:cf:81:15:dc:8f:c1:45:cf:be:96:
84:cc:18:74:4d:ae:44:77:cd:a8:40:99:c7:97:9a:
dc:38:09:ba:00:8f:14:e5:cd:8c:bf:43:6a:fb:b9:
b1:96:6e:53:1f:07:3e:20:1a:cf:4e:66:82:06:9e:
4c:00:f3:40:6d:b8:6d:7a:72:fd:f6:6b:df:03:46:
74:7b:2b:a4:d2:b3:b7:20:0f:95:bf:44:98:1d:5a:
92:f1:2a:60:49:b5:98:62:89:98:15:f8:7a:91:dc:
68:92:2c:cb:73:58:ad:d3:8c:4b:bb:d8:9d:82:ee:
e0:10:fb:fa:9a:2b:4f:53:d1:4c:74:ab:92:ee:4a:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:F1:D5:AA:B5:E9:85:22:49:F0:28:E0:48:01:D8:96:39:79:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
X509v3 Authority Key Identifier:
keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
sbgp-ipAddrBlock: critical
IPv4:
121.91.208.0-121.91.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:c7:47:c8:d5:52:8d:70:e9:7a:28:19:b4:9f:f8:04:09:ee:
9e:1e:6a:2a:54:c9:92:f1:56:90:d3:45:d5:3d:b5:42:81:85:
2b:06:15:ce:e9:5f:3e:92:02:2c:f7:68:00:04:d2:23:6d:0c:
1b:2d:6c:3d:3e:66:70:af:f6:80:0a:c5:21:2c:63:91:35:f8:
7c:a9:6d:00:a1:09:71:af:87:76:99:1c:0e:3e:2a:8d:a8:a1:
30:2c:b7:b4:df:68:cd:e6:57:03:36:68:9d:2f:b9:f8:fb:4d:
c6:2d:4a:60:1e:4b:46:1d:f4:be:b3:a6:17:eb:b6:57:6c:5b:
8c:b7:96:54:b8:4f:d0:98:10:3d:f4:2b:34:1e:b3:46:2e:d3:
15:f1:aa:01:88:bd:55:cd:cf:cd:71:e4:47:fb:14:d0:d5:86:
6c:25:78:c2:bc:da:66:90:42:96:15:4a:cb:23:f4:72:c1:87:
bf:49:36:e7:72:ac:a3:a6:fd:70:30:f8:fb:8d:5a:e9:8b:a0:
25:ec:01:a0:b7:9d:91:2d:ed:6e:80:f0:a6:fc:82:5f:49:0d:
15:99:ed:23:86:3b:3d:b3:28:13:66:6a:aa:ae:7f:33:2f:0e:
bd:c9:96:7e:27:a4:d2:6d:68:b8:07:b9:93:9f:28:04:d6:db:
f1:10:af:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:38:18 2025 by rpki-client