Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/509ad8ba-ddc0-3861-ae8b-b2a83a07b923.roa
File: 509ad8ba-ddc0-3861-ae8b-b2a83a07b923.roa (raw, json)
Hash identifier: 0xQXXrjK8Gb1FTBkj9/v5rjUshxRfZZCUj+1ZOZSRzU=
Subject key identifier: 56:37:6E:E9:9F:FE:40:AE:89:C9:47:1A:3D:18:15:8A:B8:87:F6:03
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285847E62B321198244379195E1940
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/509ad8ba-ddc0-3861-ae8b-b2a83a07b923.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 36040
IP address blocks: 208.117.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:32:11:98:24:43:79:19:5e:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=e1610966-5ba9-4771-91f9-1d2017adace9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:e9:b7:7c:80:1d:04:11:fb:bf:26:fb:01:
bb:31:55:4e:a7:ae:77:5d:16:ff:a9:9f:ee:9b:c2:
38:b7:fb:21:9b:bb:06:ec:f0:5c:6f:eb:44:ad:c0:
f0:bb:98:0f:2d:dd:48:c0:97:2a:18:69:bc:eb:7c:
9f:90:12:a7:31:91:d1:ae:bc:9a:3f:34:c4:7c:9c:
b6:5b:1a:f4:75:24:d0:8a:81:2e:7e:a6:5b:bc:86:
19:9f:af:79:da:e0:d0:e4:e3:4e:f4:ce:47:fe:69:
cb:a0:f4:8f:c7:d9:04:fc:f5:1d:a0:da:8c:61:ae:
a0:a5:d9:38:1c:38:00:99:b3:8f:af:ab:fc:b5:e3:
76:40:b5:2e:4d:ce:63:ab:e6:93:16:9b:07:1f:a2:
54:d2:3b:9b:92:31:c8:c3:c0:b6:5c:37:32:cd:2d:
e4:87:7a:f6:ba:73:6c:f2:ca:3c:f6:93:34:40:d8:
42:ba:c7:0c:42:75:f3:c3:38:2d:4c:65:6a:8b:f0:
0c:48:34:31:31:4a:27:16:ac:77:47:0b:9d:36:33:
d6:71:69:10:60:d4:c2:20:17:2e:2f:1e:69:27:02:
18:1b:94:2f:ad:0a:ed:90:34:cb:bb:1b:85:7a:04:
3a:06:0f:fb:86:55:76:9a:ce:2b:1e:fd:3c:f4:a3:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:6E:E9:9F:FE:40:AE:89:C9:47:1A:3D:18:15:8A:B8:87:F6:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/509ad8ba-ddc0-3861-ae8b-b2a83a07b923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:38:5f:6a:06:de:a3:02:a0:a9:e7:77:c3:9d:ea:d1:56:f2:
5d:c2:5e:67:b6:ac:83:3b:7d:e9:ac:cc:26:99:5e:07:e3:0d:
75:7f:7e:cd:40:3d:70:6c:af:4a:ac:72:d5:af:f4:65:28:d9:
4e:e6:64:4e:99:cb:2f:f0:61:c5:42:40:52:15:51:eb:18:d5:
ec:49:73:a1:c7:08:0b:1b:84:b5:db:96:93:d7:d6:b8:cd:8a:
5e:3e:b7:a0:19:58:67:64:0d:fe:a3:e7:83:56:22:d5:03:e3:
43:1c:f1:a7:7f:08:40:33:d3:77:e8:b0:49:90:47:00:ba:af:
98:74:ee:2e:2d:fe:a5:dd:e1:b0:f3:64:0b:1c:99:4a:da:08:
cd:bf:e3:b0:aa:6b:28:96:aa:21:c3:0f:91:81:5f:dc:e4:f3:
6b:ad:41:6c:90:21:ab:18:58:f5:76:85:94:b0:d6:b6:57:5f:
74:cf:05:0b:2c:a3:d0:ea:3a:79:b4:43:a6:61:e7:6c:93:5b:
a9:91:f4:9c:94:c7:61:80:52:9d:53:15:53:d9:4f:e9:67:aa:
c7:05:01:f6:c3:ad:0d:69:cd:fb:9e:47:01:f4:79:06:52:76:
46:9d:df:26:85:77:a5:fb:07:2c:41:d4:a7:35:58:65:ff:ef:
18:47:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:14:09 2025 by rpki-client