Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/99891767-1d2a-33b2-ae5b-882cf5d6301f.roa
File: 99891767-1d2a-33b2-ae5b-882cf5d6301f.roa (raw, json)
Hash identifier: dCLKsfAXGC6ozyDt2QeiG/y2e+8ugwuIfVAweoIrDRs=
Subject key identifier: A0:71:D5:19:43:3E:46:79:76:FE:F8:9A:E8:35:57:FB:35:40:6D:F9
Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
Certificate serial: 010D0C9F432858487CEB2F9EED1ECEDD0AAAE800
Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/99891767-1d2a-33b2-ae5b-882cf5d6301f.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 396982
IP address blocks: 208.94.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2f:9e:ed:1e:ce:dd:0a:aa:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=f148a515-01a3-4e1c-ae87-d950bf084f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:3c:13:4b:98:14:54:4f:e5:90:9a:7f:72:
5f:29:14:74:12:12:92:78:10:c4:4f:4a:39:79:1c:
ae:9f:61:72:a5:7c:3a:17:47:be:9f:ed:4b:bb:f7:
81:d0:c0:91:a1:dc:fd:bf:8c:44:8a:14:2b:24:bc:
43:cf:f6:c8:ab:61:c5:f3:aa:55:2e:5e:08:13:f1:
e9:18:f5:64:96:39:9c:1f:89:91:27:16:5d:ae:1d:
75:f5:40:fb:c5:71:93:88:99:55:fa:d9:6b:ba:77:
4c:40:b7:55:5e:93:14:b4:c4:32:67:2f:5f:f0:bb:
ee:58:19:87:2c:f6:d0:f3:8e:53:63:b6:9b:46:f7:
76:62:31:c3:ff:62:e5:c8:ba:9c:3e:62:f0:4b:9c:
f5:fc:4b:87:a8:3b:6f:2a:3a:06:f6:22:4b:ff:1f:
f1:9f:2f:2b:84:08:09:f0:82:99:68:1d:59:dd:31:
c3:5e:86:28:c1:18:0a:59:c4:80:8e:8e:87:5b:b7:
00:55:d1:60:a2:55:25:52:e4:82:7c:4d:1c:2d:cf:
35:a0:95:39:17:a6:46:96:2a:3f:06:f5:cd:58:cd:
b7:2e:5b:03:5f:62:93:b4:4e:e4:9d:8f:5d:db:c8:
0f:c9:04:32:ed:af:f2:ac:d0:be:44:b0:f3:1a:60:
86:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:71:D5:19:43:3E:46:79:76:FE:F8:9A:E8:35:57:FB:35:40:6D:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/99891767-1d2a-33b2-ae5b-882cf5d6301f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl
X509v3 Authority Key Identifier:
keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:fd:8c:0c:ec:17:81:ed:b6:66:45:e7:19:79:b9:47:60:b0:
8e:8e:7a:12:3e:cd:f2:56:23:4f:dc:f0:09:16:22:16:e0:80:
84:56:f6:cf:64:cd:e1:de:59:bf:3b:13:b5:63:1a:83:c2:32:
01:de:fe:42:d5:9a:1f:17:d3:3a:cb:ca:80:8a:11:77:79:b6:
92:0c:51:0c:ac:7e:d4:8f:60:72:eb:b7:a3:0a:62:33:6e:3b:
fd:bd:80:a9:a9:0a:e6:cb:38:23:8e:bb:86:f3:b8:ef:15:f8:
08:29:c7:d0:d4:81:7f:f6:ca:38:78:b4:56:b1:2b:5e:4a:e3:
24:3c:60:a7:62:60:5d:27:34:ee:03:37:d8:fb:36:1b:70:72:
a2:d9:d9:56:2a:db:da:88:20:35:ee:76:d1:b1:62:3a:62:59:
5f:c0:5b:6a:76:ab:86:12:6d:aa:c3:44:98:bd:03:c4:ef:9c:
25:2c:1e:3c:db:ed:24:48:ea:7f:6f:81:1a:0c:bd:80:35:f2:
9c:b3:05:cc:de:ee:13:3d:80:3a:21:fe:13:2f:7c:7b:af:78:
c3:0b:63:d8:d5:b1:97:ac:c3:87:a8:cf:23:92:c0:bb:dc:72:
78:71:2d:4e:79:d6:a2:e4:ec:b0:01:ed:ef:a6:88:2f:2a:16:
4d:a6:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:47 2025 by rpki-client