Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa
File: 6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa (raw, json)
Hash identifier: scDapzjpvDqPQE+2miTxjNgBJoHEgK9CZZ5js3HXyGs=
Subject key identifier: E9:D5:94:BC:97:F4:28:18:79:3A:5E:C1:3A:17:37:6B:93:52:53:20
Certificate issuer: /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Certificate serial: 010D0C9F4328584838854759BF927A249A20980C
Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 40100
IP address blocks: 208.68.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:47:59:bf:92:7a:24:9a:20:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=83ed618e-e30c-4f76-a0fa-2b5d1d10ce50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:77:1f:94:ef:86:34:d6:08:3f:61:8d:fd:96:
3a:03:e3:7d:da:f0:a1:c9:f7:d7:8c:44:15:f3:c7:
18:3b:37:8d:db:bb:7c:1e:21:09:5b:ca:d2:f0:79:
62:58:23:7c:01:88:6c:08:f9:43:37:f4:25:bb:87:
9b:90:c4:1b:86:5f:5e:54:67:53:5e:96:1e:39:ab:
5b:2e:2d:26:00:02:30:8b:f8:94:65:71:02:52:2d:
7f:ba:c2:39:f2:b8:4a:4d:05:80:13:20:8e:7d:57:
c6:b1:2c:36:c9:de:39:a9:ea:7a:0a:47:36:7b:d7:
db:30:55:22:60:5b:26:ee:14:d9:fe:fb:ae:2d:c9:
f1:bf:3d:33:6f:d1:33:ba:dd:53:e9:b5:ed:90:3b:
a6:71:ce:32:67:9e:47:9a:8f:4d:fc:df:e4:33:8f:
0e:95:06:d5:bc:5e:62:52:b9:85:f6:32:dd:2c:05:
a2:7b:5f:6b:18:13:25:a3:5a:65:d1:c8:6a:e4:49:
26:27:ad:c3:2c:c8:83:62:75:5e:c2:3f:36:c1:87:
7f:88:05:d1:03:20:79:e7:e7:10:a4:7e:fd:7b:26:
bf:ad:14:90:88:cb:68:c0:14:e9:f9:92:01:d5:a1:
17:e2:27:5b:0f:2f:ef:37:da:38:83:d5:fc:3e:ed:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D5:94:BC:97:F4:28:18:79:3A:5E:C1:3A:17:37:6B:93:52:53:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/6d392fb4-8a7d-38b4-8efa-97939fa91b8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl
X509v3 Authority Key Identifier:
keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:60:d0:ca:d2:1c:d2:e6:b7:a8:9b:11:d5:1a:34:05:78:50:
81:85:41:df:ea:e2:f5:8b:0f:94:d6:95:07:00:8f:87:ae:52:
2a:62:1c:ce:0b:92:a6:86:00:4c:bd:33:65:5d:2a:78:29:d5:
f9:bc:fb:70:2b:6f:05:75:51:41:37:ca:4a:a1:80:a1:21:1d:
01:00:8b:bb:92:89:1e:d9:10:6c:e0:5b:02:e1:b2:b7:0a:2e:
bd:e8:ad:92:ac:b1:92:47:d2:24:72:71:e1:bc:46:ff:eb:e9:
ba:05:79:9b:cd:80:d8:a6:50:32:56:c7:86:20:08:4c:f2:60:
da:2c:3b:50:bb:09:3a:27:07:18:7e:2e:ae:d8:96:36:53:bd:
49:a7:a8:f1:ed:70:4f:81:b0:f8:ca:cb:9f:ec:c9:cf:a2:7c:
57:30:0d:0e:c1:64:89:24:c4:49:61:31:90:e5:ce:ff:bf:6f:
05:0c:4f:a5:63:ef:5d:d3:90:83:48:dd:16:b3:4c:a2:12:73:
ee:31:ac:2d:7b:87:04:93:7e:86:5f:34:08:de:bc:54:11:5f:
44:11:8a:bc:16:dc:17:14:d4:52:1d:e1:94:1a:a5:7e:e8:8a:
23:9e:2e:10:4f:09:92:e5:ea:f2:b7:70:16:46:8b:b0:fb:c7:
24:a5:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:59 2025 by rpki-client