Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/d315dc11-8c39-3cfa-a375-f75c9baa6a96.roa
File: d315dc11-8c39-3cfa-a375-f75c9baa6a96.roa (raw, json)
Hash identifier: dzLKqzJUvnmmiL/O+lxyro462HPS7dHMqT8mg3mpGks=
Subject key identifier: 98:D8:1F:C2:6D:00:75:81:FA:D0:5C:86:ED:53:9F:AF:C8:13:5A:32
Certificate issuer: /CN=b366c6bd-92d1-4a02-8969-83018f1caca6
Certificate serial: 010D0C9F432858484D758EBA2F476DEF76BF69C0
Authority key identifier: 93:F5:98:8D:EF:29:05:D1:03:71:DA:F4:25:9A:62:04:AB:5E:BA:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/d315dc11-8c39-3cfa-a375-f75c9baa6a96.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 29749
IP address blocks: 208.99.40.0/22 maxlen: 24
2604:2f40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:8e:ba:2f:47:6d:ef:76:bf:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b366c6bd-92d1-4a02-8969-83018f1caca6
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=ed24cece-b970-4a8d-81ea-77a00a8db87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:75:f9:7c:6f:de:73:f2:fc:1d:7f:65:04:
37:51:88:cc:d3:14:95:63:38:8a:13:21:43:af:85:
bc:54:b0:eb:82:e5:20:6f:83:f8:ac:e0:95:86:5f:
cd:22:58:e9:88:35:a5:4e:8e:97:82:44:71:cf:6a:
db:89:20:4d:0a:49:1d:79:26:56:1d:a7:bf:ba:6a:
98:19:8b:1f:4f:ed:37:ba:6b:dc:c5:29:ab:56:27:
3d:52:6b:3e:80:03:ec:15:a3:46:58:45:14:da:82:
30:bc:b9:5c:3a:9f:cf:f2:c0:c9:b4:f0:c0:e9:c9:
02:27:36:c0:6c:aa:b2:5d:5c:73:57:a6:6a:7a:19:
bd:ed:db:0e:53:dd:b1:8c:83:da:93:06:cf:29:4d:
bb:28:f9:a2:b5:56:7a:d1:16:4d:5f:ff:c1:31:3d:
f0:c8:a5:f1:26:39:66:e2:0f:de:10:26:78:de:96:
bd:a7:2d:b4:79:15:5e:1d:86:21:10:44:01:b3:f8:
d3:4b:e7:1b:6b:0d:52:42:1e:25:bb:58:bc:e9:96:
1b:90:cd:f0:04:f2:aa:0b:fc:96:fa:d7:23:33:34:
8a:fe:7c:cb:bf:9e:4a:dc:ce:03:73:4b:ed:6d:bb:
b4:c3:07:b0:4c:8d:2d:d2:ff:c1:cb:de:d7:47:ba:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D8:1F:C2:6D:00:75:81:FA:D0:5C:86:ED:53:9F:AF:C8:13:5A:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/d315dc11-8c39-3cfa-a375-f75c9baa6a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/b366c6bd-92d1-4a02-8969-83018f1caca6.crl
X509v3 Authority Key Identifier:
keyid:93:F5:98:8D:EF:29:05:D1:03:71:DA:F4:25:9A:62:04:AB:5E:BA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.40.0/22
IPv6:
2604:2f40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:e8:b2:80:51:28:88:3d:a6:9e:5e:db:bd:f9:5c:c6:99:a1:
83:24:01:65:d5:ae:67:5f:b0:93:ff:6c:7a:68:45:95:a8:84:
c2:9a:0c:10:96:be:6f:ba:c3:1b:6a:92:c8:29:e4:21:30:6a:
95:d9:82:27:7f:13:46:69:e9:a0:dc:12:e7:be:28:57:b6:a6:
a1:25:ff:79:9e:5b:2f:60:47:5c:3f:3c:8b:60:03:77:20:3f:
dd:17:3d:5d:a6:59:c1:e1:d0:5c:bd:20:cd:5a:21:4b:f7:ca:
f7:66:43:f7:4b:aa:b5:c8:18:99:38:d5:6b:73:a9:e0:91:3b:
70:5a:14:6d:a7:78:f6:91:ae:dc:fa:fe:d2:71:f9:f4:87:82:
00:f7:bd:30:ac:b0:ed:e4:9d:48:39:71:e9:56:b7:b4:5e:66:
25:08:e1:bb:8d:5e:66:a1:60:93:b7:96:0f:e5:a5:0d:85:e1:
53:bf:5d:a3:e8:96:bf:c6:fe:30:4d:08:af:a2:09:b9:d4:35:
f4:d0:49:fe:01:da:43:eb:55:56:7a:b4:86:c0:f3:51:4f:b2:
81:01:53:a0:4b:7b:9a:19:4a:ef:d6:56:92:62:6b:4a:61:11:
f7:a5:63:c6:47:f7:fd:5f:15:e2:05:93:29:2d:49:7a:9e:7f:
b8:f9:58:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:41:05 2025 by rpki-client