Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa
File: 86d09460-5741-3d94-9563-aa1b63fd4a6d.roa (raw, json)
Hash identifier: ztbuaP6cLJco17fY6Zw932cPjvRbt+bzDmQ2a6Rxjxw=
Subject key identifier: 65:7B:9E:28:00:05:15:C1:66:09:A0:48:A8:CD:64:FF:AC:98:EE:57
Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213
Certificate serial: 010D0C9F4328584886B06D5C248093942A4D4B00
Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 401348
IP address blocks: 208.73.208.0/24 maxlen: 24
208.73.209.0/24 maxlen: 24
208.73.210.0/24 maxlen: 24
208.73.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:6d:5c:24:80:93:94:2a:4d:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=2cb03b50-bb54-4718-b611-914879888085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:2b:25:56:3f:25:f6:cf:72:56:6c:61:98:
b5:38:c2:ab:9d:0c:32:48:79:f9:6d:ad:2a:23:b1:
6c:29:90:ab:ad:44:8f:a7:43:92:0a:64:7d:95:7e:
b4:34:fd:bf:c3:31:52:74:00:d3:e2:38:ef:ec:ac:
5d:81:28:c2:10:9e:a5:a7:66:6a:34:41:ca:29:15:
64:e4:64:55:bf:3c:a1:d3:9e:06:b9:7c:b4:2e:d1:
22:57:32:98:9b:01:93:68:22:69:e9:22:3d:35:04:
16:33:26:5e:a4:4a:7e:7b:1a:90:17:70:c7:ef:bd:
cc:d4:b4:c0:61:21:a3:a1:f1:cc:0c:c7:0c:91:16:
42:55:8b:ad:65:41:e0:ba:b4:31:e4:d2:ea:b9:30:
85:3f:16:b6:48:0b:60:67:e3:bf:ad:27:25:ce:67:
62:8f:33:0b:07:72:84:f0:60:94:99:48:dc:7f:3a:
2f:81:33:24:09:2b:ae:d9:b4:24:e0:f7:49:3f:dd:
e9:ec:41:02:36:2f:c8:41:08:cb:4f:9a:2a:8f:11:
b7:cf:76:bb:33:bf:5a:f6:4a:0e:fa:31:b5:1e:b4:
6f:b0:e3:9c:56:b1:68:70:7d:68:98:5b:24:a0:0c:
eb:af:0d:1f:fb:7a:e1:d9:d1:c3:29:95:e9:db:48:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7B:9E:28:00:05:15:C1:66:09:A0:48:A8:CD:64:FF:AC:98:EE:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl
X509v3 Authority Key Identifier:
keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer
sbgp-ipAddrBlock: critical
IPv4:
208.73.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:bf:f0:de:c3:16:b6:ff:06:71:97:ba:41:63:7d:ab:9a:c5:
80:ab:34:7d:38:d2:47:00:e0:ca:2e:ea:4c:e5:64:75:90:50:
b7:9a:d5:1e:a2:c8:70:eb:a2:fc:cd:32:74:c7:d3:0a:c4:f8:
34:33:f4:ee:2f:3d:88:87:02:31:be:67:e9:73:81:06:7d:6d:
fb:f1:ee:a4:aa:7c:c1:b6:3f:39:23:5c:3c:89:1c:e5:a8:84:
7b:42:60:6c:0c:38:35:c5:d7:d5:0b:ef:51:4b:c9:10:0e:49:
22:79:b7:00:87:53:05:a5:1f:6d:12:52:a8:b6:44:21:bd:5e:
c5:02:89:f3:2c:82:c2:af:7b:e9:a0:31:90:1d:31:4a:97:4b:
aa:f7:2e:cc:0e:29:bd:b2:d6:27:03:6c:ef:8a:0b:38:a3:62:
11:c6:70:ad:d4:f9:b7:42:dc:6b:59:70:26:67:ab:9f:0c:ac:
d5:27:fc:b8:5f:69:fb:84:b4:70:1e:72:18:af:c4:66:86:70:
e8:aa:4a:f9:89:62:9f:91:93:b6:b2:15:22:e1:be:c6:d8:27:
a5:8e:14:69:f0:6d:db:98:10:32:81:c2:69:88:31:20:2d:84:
6a:9d:45:a6:b1:52:77:ad:d8:6e:e7:1c:da:d4:64:a3:5d:84:
2d:b4:3b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:45:06 2025 by rpki-client