Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa
File: 6fd99c21-281a-36a9-bea0-daae7520319b.roa (raw, json)
Hash identifier: QqWxmpGNQXUc+Gc2/f7LNYpJbf3vY2czGiG6HVLNOI4=
Subject key identifier: DC:8D:22:F3:5F:36:A9:B9:6F:D2:33:5E:26:DD:FB:91:9E:44:5A:E8
Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial: 010D0C9F432858481C9A925872542A7873F35080
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 3561
IP address blocks: 208.70.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:92:58:72:54:2a:78:73:f3:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=17a14eef-ffdb-4145-837a-192f2bdb7c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:10:67:eb:a6:6a:44:29:2c:42:39:95:0c:
89:d3:99:c7:e0:f0:98:1f:15:63:1e:02:57:35:7d:
ef:23:40:53:72:cf:87:97:12:43:23:42:0d:a8:97:
72:46:36:72:ec:85:ab:58:d6:79:5d:4e:62:43:d2:
0f:20:bb:70:75:4e:b5:63:1b:ff:83:be:ab:6e:0b:
55:90:c3:37:4d:98:27:f5:47:6a:81:5d:ba:05:04:
53:de:26:f5:38:d2:12:88:0c:db:98:c3:d6:30:c5:
cf:59:93:14:fc:7d:b8:eb:4a:5f:8a:62:a0:c9:53:
aa:9e:45:34:bb:3a:6f:31:e7:91:34:da:0e:d7:57:
47:13:a2:f4:0c:55:a6:d7:16:90:86:81:9c:a9:df:
31:61:8a:41:72:52:29:91:62:14:41:f9:94:33:a2:
d9:9b:b5:7e:88:ab:29:1b:9f:bc:43:93:e7:5f:13:
9a:52:ce:bf:5a:25:f7:08:08:74:b9:29:dd:b6:19:
d8:ba:bf:d9:14:39:45:58:8b:50:26:9f:f0:17:73:
76:55:00:4a:b2:71:3b:3f:aa:6b:6f:72:df:4b:cc:
04:11:83:80:6e:f0:56:7d:8c:6a:ca:5b:ac:92:04:
cb:f1:4e:af:b9:0a:33:a1:32:9d:aa:64:33:27:77:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:22:F3:5F:36:A9:B9:6F:D2:33:5E:26:DD:FB:91:9E:44:5A:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/6fd99c21-281a-36a9-bea0-daae7520319b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
X509v3 Authority Key Identifier:
keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:40:cf:bc:43:89:56:45:28:f8:4b:1c:9a:86:ea:a3:72:d2:
6d:e0:a2:0d:b3:6b:ae:17:62:f0:9e:35:38:34:6e:c5:2a:61:
01:50:a8:1a:5a:3d:e2:88:f5:ef:d6:15:18:4d:05:b9:0e:43:
0b:d5:5c:e6:e6:e5:fd:70:37:08:2a:43:22:cb:f8:0b:96:84:
78:6c:d1:24:cf:e1:f9:be:23:df:be:f7:86:0b:55:4d:22:7d:
49:a5:bd:a6:cf:e2:40:d9:88:79:3d:31:32:e8:6c:59:e6:0a:
ac:87:72:37:04:15:a5:16:a0:f9:fa:b6:f5:f5:60:ff:a9:85:
f6:2f:89:5d:76:f1:c0:28:ec:90:2e:c1:95:b9:b2:4b:d1:e5:
65:a8:c7:2b:e1:4d:21:9f:c9:38:63:57:59:50:4b:20:05:0a:
4a:72:72:0f:5d:b0:b3:e8:c9:3c:7d:9d:e9:46:1b:a6:4a:a4:
04:00:39:16:20:4f:a0:d6:e7:ea:21:b8:66:c5:2f:6f:af:0c:
a4:55:5e:f5:1d:5e:f7:d1:60:40:ad:34:ce:6b:12:e6:fd:f3:
06:56:a3:2c:df:ef:f0:d7:b4:92:03:09:21:6a:94:36:94:70:
0a:7a:7e:52:4d:a0:b5:ff:d5:37:58:b5:db:82:a8:ad:af:17:
60:b5:5f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:06 2025 by rpki-client