Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
File: fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa (raw, json)
Hash identifier: r/ccUbeFpVUXp1iIM4ynnjla3MaGjng6HHjQEPsvKIg=
Subject key identifier: 43:A0:20:AD:69:2A:77:A2:C0:AF:ED:16:79:4B:BD:A1:2B:E4:2D:53
Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial: 010D0C9F432858481C9A926827902241F3FD8B40
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16941
IP address blocks: 208.70.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:92:68:27:90:22:41:f3:fd:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=c12cbd45-1cca-4c0a-8ae8-324e89190cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:eb:7c:87:99:38:81:a7:76:98:34:ae:fb:
d7:8e:8e:74:5a:02:85:e3:a3:c7:6c:e1:43:62:41:
33:f8:7c:0d:97:ae:ac:b1:9c:56:3b:76:be:af:19:
36:b0:70:ee:b4:ba:98:5c:5c:13:b5:d3:eb:fb:d6:
17:72:36:03:5b:3e:e5:e4:c2:22:97:b0:52:f9:28:
47:3d:cd:51:2d:4a:5c:65:d4:d1:cb:b8:a6:10:59:
a0:f5:54:43:f0:43:94:0e:83:fb:87:f0:f4:ea:6b:
24:ac:3e:89:8f:31:53:61:a5:8c:17:0f:84:96:a2:
94:15:ec:2f:6a:27:1d:0f:b3:fc:57:f9:60:85:82:
a8:a3:aa:b5:b6:7b:13:17:bb:da:6a:87:41:fd:82:
2c:78:2e:95:63:35:53:b2:3a:3c:ca:6f:03:b0:be:
00:30:da:25:b4:8d:60:62:2c:44:5a:e8:6a:b0:f1:
17:49:43:11:b8:53:ef:8a:2b:7e:25:45:4c:51:56:
fc:f9:ae:03:9d:42:ab:53:ea:69:55:43:03:ce:68:
02:e9:e3:31:23:f9:5f:b6:1a:eb:34:52:40:b6:07:
7b:bf:53:3e:38:3b:dd:ca:4a:c0:4c:9b:7c:bd:47:
40:cd:cf:f8:d0:d7:06:3a:16:e1:9c:47:e4:3d:dc:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A0:20:AD:69:2A:77:A2:C0:AF:ED:16:79:4B:BD:A1:2B:E4:2D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/fcbe76c4-4956-3edc-b31b-ecfc978f0e41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
X509v3 Authority Key Identifier:
keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b8:55:7f:8d:03:20:fe:87:52:9b:7d:e3:a5:5d:ab:66:12:
7a:c7:b6:41:16:bb:56:1f:dd:09:1e:63:3e:fc:86:99:4b:21:
91:c6:21:c3:78:3e:9a:64:1a:be:bf:5d:0c:3e:7b:17:12:62:
e4:5d:d9:67:ac:e2:20:b4:78:02:7d:00:a1:ad:ab:aa:aa:97:
ef:ca:16:fb:9d:ac:50:c5:f9:81:7b:e0:c0:6f:78:10:3e:1c:
f9:70:ea:fe:a6:a3:33:9e:ac:52:e2:71:ef:10:c4:a2:d8:31:
c5:89:55:33:5c:a7:54:1f:61:2b:f0:90:a8:b6:c0:86:75:a4:
19:9c:78:7d:14:62:4b:aa:0c:06:f2:39:84:6e:39:c8:17:52:
0e:d3:d6:b9:39:42:41:97:5d:3f:d6:fa:4d:0e:03:64:52:64:
85:e5:2c:0a:6d:fe:9e:12:40:95:89:96:fc:f3:4e:0b:9d:b5:
94:6c:2c:a0:05:f8:3c:28:ce:41:c3:61:5b:a8:dd:89:d5:0a:
20:bf:0c:38:a4:cd:b5:73:56:2c:23:04:63:75:d0:6a:d5:d4:
07:eb:7f:17:df:01:e7:6f:0f:f0:87:ce:f5:28:c9:76:e4:0a:
a2:f6:cd:85:b5:37:d4:dd:ad:c6:d5:87:7d:f0:62:a2:f5:9a:
df:5b:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:09:57 2025 by rpki-client