Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/60fb16ff-2f8e-33d2-9559-388bab380853.roa
File: 60fb16ff-2f8e-33d2-9559-388bab380853.roa (raw, json)
Hash identifier: TG9nWTfQxarMXaYUi6tzdlJB4hSTgR1z1GxU/MSIkeM=
Subject key identifier: E7:49:7F:08:39:F9:DD:6B:29:18:77:91:F4:2E:38:C1:53:15:00:E6
Certificate issuer: /CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Certificate serial: 010D0C9F432858486D905A39493E1E0AE34C7000
Authority key identifier: DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/60fb16ff-2f8e-33d2-9559-388bab380853.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 40772
IP address blocks: 208.89.36.0/22 maxlen: 22
208.89.36.0/23 maxlen: 23
208.89.36.0/24 maxlen: 24
208.89.37.0/24 maxlen: 24
208.89.38.0/23 maxlen: 23
208.89.38.0/24 maxlen: 24
208.89.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5a:39:49:3e:1e:0a:e3:4c:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0b0d1e-f26b-47ed-968e-d30c9e0eba98
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=26752b66-4b55-4f01-8032-bbdbf7a775a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:26:9d:a3:20:df:b6:1e:4c:3d:be:9f:00:
73:6e:d9:fa:a4:1b:f6:45:f5:59:60:ab:bb:77:ff:
06:5b:d5:3a:92:f0:29:34:2f:d6:0d:aa:d5:23:89:
02:5a:6e:b7:96:dd:b1:8e:f3:2f:a2:48:43:d5:7c:
b4:6c:5c:d8:6a:66:18:ed:35:69:0b:ca:f9:73:3a:
93:ce:a4:df:73:4c:e0:a6:44:1e:3e:36:00:31:8a:
61:7e:b1:38:34:51:02:16:c2:67:bf:5b:a2:4e:89:
52:8a:48:98:52:6b:5c:62:f3:5d:47:f4:e1:12:8a:
30:ff:5a:32:48:56:cf:67:3e:c6:4b:24:f1:31:f2:
97:8d:89:6b:f4:89:db:c7:39:8d:12:28:f8:e0:9d:
26:f2:0a:b7:e6:f8:71:2d:da:f2:d0:63:2e:29:98:
f7:b2:7c:82:bd:8f:c7:09:96:a4:17:27:82:b8:e5:
ff:1a:01:3f:ad:c1:e4:81:2e:6a:a5:34:5e:ac:d3:
7e:68:d2:58:11:cb:15:46:e7:a8:70:72:c9:34:9a:
4d:06:9d:ef:88:4e:3d:ca:81:9d:6e:58:75:b3:e8:
2d:48:46:f2:d8:8c:d2:50:1b:8f:64:10:7d:1d:f9:
1f:cd:80:76:89:89:16:4b:68:1c:a6:9e:ff:9f:b0:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:7F:08:39:F9:DD:6B:29:18:77:91:F4:2E:38:C1:53:15:00:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/60fb16ff-2f8e-33d2-9559-388bab380853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.crl
X509v3 Authority Key Identifier:
keyid:DC:EF:9F:AF:43:6A:21:4F:4F:33:22:B4:AE:A3:9C:8E:8F:24:E6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9f0b0d1e-f26b-47ed-968e-d30c9e0eba98.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:7a:1a:34:56:53:18:ac:a8:5d:20:7f:a1:83:c1:89:43:0d:
68:fd:56:30:96:0b:bf:07:d3:bc:1d:f9:c4:48:1d:45:ac:96:
6c:60:d9:5a:06:ba:3e:a8:d4:b8:01:53:e2:21:b9:29:55:26:
a7:ff:fa:c2:37:19:09:cc:a1:20:dd:34:6c:5c:9a:6e:18:c4:
76:0e:2d:c6:06:b2:01:7e:a8:9a:ce:ac:f2:b5:21:11:33:f9:
54:d8:c5:11:a8:43:86:08:8b:3a:e7:51:4f:ce:0a:d3:a7:51:
a3:f9:5e:a8:c0:8a:df:0f:06:0a:a0:37:8a:30:de:5f:ac:1f:
99:d2:d4:bd:78:bd:ff:23:f4:7c:08:29:a6:cf:cc:c4:7b:29:
9a:77:d7:42:b2:03:3a:34:06:25:a5:fa:13:10:5b:18:e3:c7:
af:15:0c:14:bf:0e:2b:16:73:8c:61:85:a0:10:2d:0e:6e:29:
56:51:8a:3a:ee:eb:4a:6b:3f:50:a5:b7:62:d2:b2:b9:4e:f0:
96:bc:f8:96:1d:bf:28:3c:bb:34:28:47:50:c6:82:28:b6:a1:
3c:16:21:11:cf:85:22:52:dd:99:2d:fd:c6:28:cd:e8:f1:e3:
3d:f9:59:96:21:fa:fa:2d:90:90:42:63:80:3d:af:1a:92:f4:
09:e5:84:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:45 2025 by rpki-client