Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa
File: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (raw, json)
Hash identifier: 4WxmAdGpQRFOtW1RmdIIm7HLdTGBsbv8WOPpLr56BR8=
Subject key identifier: E2:BF:2F:F6:EE:FF:F5:8E:EA:A9:1C:97:9F:DC:A9:26:7A:6B:43:66
Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
Certificate serial: 010D0C9F4328584824FA8BDB0D859B31DDB93F00
Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 6079
IP address blocks: 208.99.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8b:db:0d:85:9b:31:dd:b9:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=2c5a6ca8-6bbe-478c-a78a-f4f9a6247ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:3b:6b:0e:b5:4d:4c:de:66:9e:43:b5:6c:
39:e9:d7:24:84:3d:ad:a3:6d:6f:8f:76:a0:d0:c2:
21:e9:2c:dd:f1:01:28:e0:09:55:f4:e0:91:55:61:
6e:ce:3d:3b:a3:9e:bb:9d:a3:e9:24:b3:60:9f:76:
6a:e1:82:40:f7:65:2d:31:08:1e:7a:ab:73:85:b2:
d4:7d:a5:7d:0e:17:97:ea:63:84:27:95:98:1f:30:
38:bc:01:41:52:04:7e:1c:8d:59:92:42:69:7e:2e:
45:e2:e9:ed:b8:2e:07:fb:f2:6d:3c:e5:f2:6d:e6:
9a:61:f9:01:8d:56:63:39:67:ca:d2:03:9b:05:e0:
5f:69:e6:1b:7f:7b:5a:58:8a:24:4e:25:a2:0d:2a:
ad:6e:e9:11:ce:f9:14:18:6f:e5:67:12:64:ee:7f:
95:b3:3a:57:27:fa:01:60:de:0e:36:e6:9d:b1:af:
e9:7a:d6:ea:3a:b8:cc:07:1e:cb:90:b7:1e:36:b6:
92:cd:5a:dd:82:a8:8e:60:5f:93:e0:68:a4:60:ab:
83:e4:6f:b1:50:a6:7b:ea:df:c4:24:42:c3:c6:6e:
b4:27:4a:c7:df:31:97:ff:4d:2b:d3:03:aa:fe:0d:
7f:94:18:ea:df:a2:b8:62:ed:ed:e6:b1:82:42:3d:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BF:2F:F6:EE:FF:F5:8E:EA:A9:1C:97:9F:DC:A9:26:7A:6B:43:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl
X509v3 Authority Key Identifier:
keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d6:7c:e4:64:17:c8:ad:95:11:0f:34:9b:8c:86:e7:db:93:
5d:4b:91:89:1c:e1:0c:a1:13:65:91:9d:be:63:f6:96:4a:10:
9f:1c:94:f4:47:3a:55:0c:eb:6c:a8:9f:06:ce:a1:94:a2:de:
28:4a:e8:49:f1:36:d3:71:8e:30:95:00:52:a9:f6:e6:a2:92:
08:28:ea:40:72:b4:25:e2:b0:90:b3:55:2c:d8:f2:bc:cf:b9:
d2:79:3b:cc:75:7f:ce:d5:dd:c9:0b:6c:c6:53:3b:ae:19:45:
cb:39:46:0a:cf:33:42:f9:e3:15:84:87:65:37:b1:6a:89:8a:
7d:92:c2:0a:0b:04:5c:30:b0:e2:bb:b8:63:b4:61:e8:2f:f3:
6d:79:49:df:a7:ca:91:b5:6e:4d:8d:be:71:85:f7:4f:f7:6d:
47:ba:bb:18:2a:c5:b3:a2:3d:23:6b:8c:f5:7c:5b:7e:0a:84:
5c:8f:a8:4a:25:25:0c:53:b9:71:9e:36:4f:3b:00:4c:22:cc:
b3:37:2d:c3:4e:ad:ce:d8:6c:c6:bb:9a:0a:4d:7a:40:bf:02:
73:35:64:72:c2:19:87:f1:78:68:a4:37:68:c2:41:f2:c1:04:
90:74:47:1f:1e:17:3d:2b:d0:58:b4:3b:6f:5f:c3:f5:23:35:
13:7f:d5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:40:25 2025 by rpki-client