Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa
File: 3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa (raw, json)
Hash identifier: eJ1ftAKUQ4fH4OhuZwkwWAKIS76yKVKC2Hnl9ScOwR0=
Subject key identifier: E0:72:15:89:FD:C5:6E:52:EA:4C:0B:71:80:40:58:6C:5F:09:BA:E5
Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial: 010D0C9F432858481C9A9278F441B72F78CB6F00
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 208.70.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:92:78:f4:41:b7:2f:78:cb:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=be5c6f8f-c6e5-4b85-9ee6-e3b097c34e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:52:e4:98:77:bc:22:bb:46:ee:de:16:19:
1e:03:66:82:52:76:d5:15:ea:33:03:03:52:6d:f3:
73:08:88:11:ad:1f:27:1a:14:35:58:57:04:fb:60:
29:d7:c1:22:18:ca:21:10:2a:eb:03:39:a1:77:a8:
b1:d6:e3:fd:d4:d7:5b:37:28:b6:38:b5:a3:02:9b:
2a:e0:2f:c3:eb:83:c8:60:89:13:d0:99:f1:ec:ac:
f9:22:e1:b7:db:4a:b6:3f:1d:50:9c:64:f2:cd:89:
da:d7:3b:88:45:c7:3d:e7:1e:3f:dd:42:eb:75:f6:
bd:9c:12:10:1e:fd:a2:c5:82:aa:e0:a5:c6:66:cd:
79:a9:d3:6b:ec:a4:53:67:23:1a:09:dd:32:06:ee:
bc:81:e9:0a:15:d6:6d:b3:68:4b:5a:72:4e:fb:dd:
2f:18:a1:02:15:cc:66:b4:35:0b:85:be:db:ee:1e:
f6:ed:b2:87:2d:b4:9f:ae:c0:49:4d:e9:bf:62:d3:
c3:55:89:af:7a:8e:d7:16:89:e1:1d:2d:cb:7f:22:
8b:f6:ea:05:2c:5a:dd:e7:f9:65:96:39:70:42:70:
5f:31:ff:c6:a1:2f:12:21:c5:b1:67:b4:12:70:76:
11:5a:ad:30:a3:88:8e:6b:68:fa:e9:f7:5f:64:9c:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:72:15:89:FD:C5:6E:52:EA:4C:0B:71:80:40:58:6C:5F:09:BA:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
X509v3 Authority Key Identifier:
keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:2f:00:62:48:8a:0e:94:02:45:ec:07:27:d5:1b:95:ca:17:
e1:48:5e:26:97:d8:b3:2a:60:2a:52:f9:a0:e9:ed:69:c7:5e:
2a:bd:df:99:66:75:11:6d:d8:e4:50:54:c4:15:d4:b6:1f:11:
6c:41:3b:42:b9:47:d7:f9:6b:f3:d6:f5:cd:49:cb:20:2d:c2:
d0:98:fc:e1:77:04:f1:aa:f1:36:6e:56:33:33:de:46:02:f3:
18:b5:11:00:a9:6d:7a:e9:43:3a:23:00:be:f3:f1:dd:f9:e8:
54:6d:20:79:69:a9:03:d4:ed:4e:a2:72:c3:b6:f9:50:13:6d:
e9:a1:a9:f2:9a:d9:cf:96:a7:bf:b6:e3:f9:19:98:30:1d:8c:
5a:af:19:a2:28:82:b5:a6:80:d1:37:48:12:05:d3:b6:e3:58:
ae:47:6c:eb:3e:b7:c2:a8:61:a6:b2:f5:cd:5b:06:29:cd:75:
10:04:78:97:78:ca:14:3b:14:53:f0:24:0e:40:51:e5:20:b8:
b5:30:04:9b:23:f9:81:82:70:46:0f:c7:57:46:90:18:be:aa:
7b:3b:69:e7:89:ec:d9:05:12:62:dc:7b:41:17:b5:b0:c2:46:
d9:14:0d:18:6d:81:04:59:ee:12:26:54:21:38:be:1d:c3:9b:
4b:be:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:41 2025 by rpki-client