Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa
File: de7f958e-9b5b-3cec-a597-047e298cf30f.roa (raw, json)
Hash identifier: djDj9ytPUWJFD0MeLhypZinOVeOJ2vocF3GvG46wLzE=
Subject key identifier: DD:FD:62:C1:7B:89:C0:01:CA:3C:5B:CE:52:A8:99:CC:3C:8E:00:06
Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial: 010D0C9F432858487325B5EF5030F1F294BFD160
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 14618
IP address blocks: 208.70.136.0/23 maxlen: 23
208.70.138.0/24 maxlen: 24
208.70.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b5:ef:50:30:f1:f2:94:bf:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=687daea1-1078-4eab-bdb1-d50146ca43b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4e:37:5a:09:96:1e:66:f4:b3:47:b4:01:8d:
a9:02:90:1b:4e:44:75:35:0f:fb:f2:bc:7b:e5:eb:
f5:eb:91:19:e1:c8:f1:83:a5:75:8c:fb:c7:ea:d3:
00:e1:74:ff:7c:7c:74:1a:8c:6c:fc:58:a2:bc:88:
23:1a:7d:a9:67:a3:2a:e1:2f:b7:23:94:f1:ef:a2:
b2:36:1f:fc:07:20:40:4d:fc:0b:37:3e:f7:e7:36:
14:00:25:05:b9:8c:81:8e:67:97:63:77:80:d5:92:
97:b8:dd:0b:84:36:ce:c5:b8:7e:0e:bd:09:4f:8e:
02:e2:57:56:6a:8e:f0:9b:54:37:70:dc:8f:26:24:
a4:cf:16:97:88:58:72:7d:f0:31:0d:8a:65:05:5f:
4d:bd:74:0c:65:8e:a5:48:29:99:e9:85:14:74:71:
3d:38:99:30:8c:8a:77:9d:37:e3:5d:83:fc:87:a2:
1c:12:73:9f:72:6a:46:c2:09:e4:97:45:93:e0:33:
02:ce:4e:44:1c:68:b6:e6:e2:ef:6f:ca:ff:5c:43:
cd:de:5a:c7:d9:02:1c:e1:f0:8e:ac:33:7e:0f:8c:
18:34:4b:e0:7d:6b:3c:69:f8:08:d5:a0:a3:16:03:
08:6c:9a:d5:f1:d0:e5:d0:b7:d8:ef:bb:94:32:4a:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:62:C1:7B:89:C0:01:CA:3C:5B:CE:52:A8:99:CC:3C:8E:00:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/de7f958e-9b5b-3cec-a597-047e298cf30f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
X509v3 Authority Key Identifier:
keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:5c:8b:a1:ab:d0:54:26:e2:e7:8d:c7:53:b4:f7:ae:ec:e5:
5d:43:07:09:41:45:b6:c9:82:68:4d:ca:b2:1f:0c:af:14:9c:
01:46:dc:aa:a0:e8:30:2f:dd:1b:2b:34:41:96:6b:91:d7:a9:
b8:90:c8:e2:30:2b:5f:b4:71:76:46:6a:8e:18:af:04:4c:40:
b1:4f:99:20:4a:a0:01:65:41:d4:23:b2:59:6c:72:d2:2c:72:
05:35:d4:7c:62:66:da:cd:64:d3:e8:5c:ea:62:fb:dc:31:a8:
2d:c4:a2:18:8f:0f:d2:3b:e1:96:2a:ae:cb:1f:8a:19:93:01:
eb:6e:90:f3:13:a2:86:b7:06:cf:74:ea:c6:fd:c0:5b:10:7d:
4b:de:88:e1:34:4e:21:87:0c:45:d2:62:fd:0c:db:89:45:20:
ba:d9:bf:46:f7:48:0a:4e:62:f3:08:61:a6:b5:65:08:43:84:
0c:3c:d7:34:38:56:d2:c4:59:c5:91:d0:75:cc:b5:0a:56:27:
10:ae:7c:3a:98:d2:21:ee:b6:ab:a9:2f:cf:fa:f6:bf:ed:75:
c3:d6:87:06:54:d5:06:ae:93:30:d8:91:fd:84:8a:83:19:27:
97:5e:c4:a9:dd:3a:6a:24:a3:67:16:1e:15:ea:88:9f:ef:f9:
ce:42:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:26:31 2025 by rpki-client