Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/52b76acb-b513-33d2-9a7e-ff09fbbd1570.roa
File: 52b76acb-b513-33d2-9a7e-ff09fbbd1570.roa (raw, json)
Hash identifier: fmLxbT0gPWrhMCB5Md048lLzr4DyHA1vrog5/E5vlFk=
Subject key identifier: CC:09:D3:AD:9D:D6:4E:FB:8C:8C:CD:B1:D6:D0:E0:4A:30:A1:8A:06
Certificate issuer: /CN=900d3223-79ad-4ee2-af23-163d305bdd0a
Certificate serial: 010D0C9F4328584819CFBF66C390424609A0CA60
Authority key identifier: 7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/52b76acb-b513-33d2-9a7e-ff09fbbd1570.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 208.64.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:bf:66:c3:90:42:46:09:a0:ca:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900d3223-79ad-4ee2-af23-163d305bdd0a
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=3215e8f6-e8a8-4c46-9df6-6b0693316b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:87:70:3b:b3:6b:8e:cb:24:fd:7f:eb:6e:
8f:21:2e:f6:40:e9:63:30:8f:de:50:65:9c:7e:a3:
2e:eb:05:ae:b9:01:9e:68:09:b2:cd:0f:3b:0a:f8:
bc:8c:24:9d:d2:4a:3b:d7:f4:80:53:bf:26:46:17:
6c:fb:86:a7:34:3d:08:84:7c:ef:a5:29:c4:dd:46:
16:3c:1b:db:8d:b9:7c:8a:aa:48:78:bf:9d:19:3f:
df:3d:53:00:7c:ea:cc:76:f1:da:87:34:38:d5:0b:
20:25:da:54:4c:f4:bc:fd:dd:81:fb:15:de:be:5e:
54:7e:fe:22:8f:1b:0f:8b:b6:7e:12:b6:c9:35:a6:
ae:74:11:4b:ec:f0:cb:60:1e:fe:42:36:f3:db:33:
70:5c:5e:f9:57:2e:eb:6a:1d:50:e1:bc:b3:85:fd:
58:29:ac:f9:65:86:b9:61:e7:90:b8:17:a6:b5:ca:
34:55:ba:fa:e1:22:bc:92:6c:31:92:8f:55:87:3c:
53:65:09:1b:0a:0e:13:9e:bd:61:62:36:98:ef:18:
63:b6:a8:9d:08:6d:cf:63:53:22:8b:f8:d1:7d:32:
0d:2e:b4:52:5e:e6:1b:15:c4:d4:ee:27:fc:3a:f4:
9e:b6:e6:46:ba:3d:f6:23:3b:3b:89:87:03:ed:e9:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:09:D3:AD:9D:D6:4E:FB:8C:8C:CD:B1:D6:D0:E0:4A:30:A1:8A:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/52b76acb-b513-33d2-9a7e-ff09fbbd1570.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl
X509v3 Authority Key Identifier:
keyid:7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.64.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:b8:07:92:04:1c:64:28:7f:11:8d:af:8f:c7:88:bf:cc:dc:
e7:1c:81:5b:87:7f:75:ff:4e:d1:4c:63:dc:93:ab:1d:ef:99:
57:55:01:6e:36:0c:9a:c9:6a:2a:89:cb:68:34:ab:a2:4a:ff:
85:1f:df:4a:83:84:c4:25:e6:5c:3c:d7:fc:f5:a6:fe:36:c0:
af:f2:98:56:55:16:47:81:f5:79:96:8b:86:3a:bb:a1:54:7e:
42:c3:ff:e3:d3:e1:c9:9c:37:b9:36:24:60:e3:e4:14:41:fc:
cf:64:dc:d9:09:6c:b0:aa:6f:dd:89:c5:4b:c4:ea:c1:b0:46:
5b:b0:32:3f:30:fa:d5:41:bf:3e:31:ce:95:fe:5e:bb:d8:db:
c2:53:85:c2:44:6d:39:f2:44:df:ef:c6:7b:b5:90:3c:95:34:
06:9c:10:82:c3:c9:23:ca:e5:6f:f5:35:4c:d7:36:b1:0c:42:
2d:f1:82:13:c2:53:f7:36:87:5f:a2:65:6e:98:51:dd:22:c5:
60:56:c7:8e:6a:8d:e2:5c:79:2a:59:80:f9:74:56:b0:65:6c:
b8:0b:fc:3a:2d:24:bf:ed:15:06:77:78:d6:4a:f5:08:0b:8b:
29:a4:34:95:0b:1e:f7:6f:84:da:6b:d8:e5:99:0f:de:90:63:
1f:a5:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:19 2025 by rpki-client