Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa
File: 02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (raw, json)
Hash identifier: lFrvWeaVavtsgq71shDbL91BLDBMEQI5ujSRcnXAiEA=
Subject key identifier: DA:3C:C5:1B:6E:83:C7:87:74:47:87:41:3F:98:4C:C2:9E:D4:C3:48
Certificate issuer: /CN=b0217be3-0b99-45d9-9156-e23551753455
Certificate serial: 010D0C9F432858483F80263191B9A840480096C0
Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 395019
IP address blocks: 208.76.208.0/22 maxlen: 22
2602:fbfd::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:26:31:91:b9:a8:40:48:00:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=6d43445c-08ed-4e6d-b703-fd25654a899d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:30:bb:ec:38:17:db:37:1d:79:0a:ca:ee:
e4:e2:b6:d8:a9:07:3c:4a:1d:19:e2:8d:0a:32:2f:
9d:18:a4:08:2f:8c:f4:f1:a2:be:d3:4e:c1:5c:fd:
b6:50:1b:0a:ed:82:af:27:af:9d:07:51:be:11:40:
65:6f:0c:1a:17:5d:34:89:85:6f:2f:39:fa:aa:02:
29:bf:51:80:bd:9c:dd:17:27:27:bc:63:ea:d7:1e:
06:8d:d1:29:35:1e:f4:e5:dd:77:39:a1:0f:6e:51:
e6:53:06:0b:03:5c:94:9f:ae:bd:6d:a7:8d:f6:00:
45:f2:f8:31:3b:d8:66:d7:03:4d:80:49:a7:85:59:
8c:a8:60:68:20:e2:ba:2b:0c:68:34:21:52:8f:29:
85:5b:ac:a4:18:df:af:d4:0a:1b:73:45:bc:ed:c4:
73:a4:65:e7:40:61:e8:9e:ec:98:37:0a:b5:c5:50:
cd:52:df:02:62:9e:44:23:de:4b:48:9c:52:64:4e:
8f:32:3b:5d:e1:f6:18:61:d1:c7:47:dc:7b:21:c4:
05:cf:f9:8c:fc:b7:a1:ba:a5:01:ac:a2:20:f4:9b:
d9:11:c9:9a:de:74:04:46:44:df:69:12:3a:fb:b7:
2b:a3:08:90:ee:04:07:c6:66:f0:16:85:09:a6:40:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3C:C5:1B:6E:83:C7:87:74:47:87:41:3F:98:4C:C2:9E:D4:C3:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl
X509v3 Authority Key Identifier:
keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.208.0/22
IPv6:
2602:fbfd::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:b9:ea:4f:ca:a2:1a:8d:22:ae:d1:f2:69:27:63:5e:1b:60:
3e:3b:21:84:38:e3:fb:c4:6d:6c:31:ed:89:17:41:0e:7a:93:
47:55:a0:a0:91:c2:20:3a:3b:96:f4:4e:e4:da:0d:5a:cc:04:
49:2e:69:55:10:df:1e:62:7d:1f:0e:66:39:f1:19:86:a9:c3:
e9:5b:71:fa:86:79:28:c2:a3:c3:aa:97:f0:ce:6b:12:bc:3e:
5f:d3:b4:89:d4:10:d1:60:de:6d:a5:13:f5:09:98:4e:a6:c0:
eb:46:67:ba:5c:03:c1:b2:da:2d:f6:55:bd:61:e6:b4:73:31:
35:e1:b6:e7:30:ea:1a:b2:49:32:cc:35:60:f5:2c:f6:d6:4a:
c8:c7:54:21:b2:80:c6:70:d2:b3:7a:42:0c:80:50:a8:29:0d:
d1:56:51:6c:3a:b5:96:84:3f:b1:e7:2a:74:35:8a:9f:b7:47:
43:96:33:54:20:cd:e2:2e:74:9f:3f:ec:47:d4:c0:de:7e:0c:
a0:47:bd:c4:83:52:ab:4b:50:95:da:22:99:15:da:54:5b:eb:
ef:d6:10:19:aa:01:da:3c:34:b5:22:9b:e5:fc:02:f2:23:d8:
26:23:d8:08:4d:d2:61:84:d8:a7:b1:eb:8c:6f:af:5c:1b:90:
c9:e8:71:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:38 2025 by rpki-client