Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a3da25ae-190a-37a3-b07b-f1222b292497.roa
File: a3da25ae-190a-37a3-b07b-f1222b292497.roa (raw, json)
Hash identifier: JQ38slJ+hrfJZnnj0RbJDeG/aRTiKvt3GJFzN7JA3Q4=
Subject key identifier: 5E:92:71:E9:CA:D1:6A:29:2B:8F:E6:3E:B2:42:E0:53:90:0C:27:FB
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285847E62B41E202FFF38BD5928D00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a3da25ae-190a-37a3-b07b-f1222b292497.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 36040
IP address blocks: 208.65.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:41:e2:02:ff:f3:8b:d5:92:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=ef71bdce-8c3c-434c-ba21-7408642bd479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:34:92:73:ed:39:f4:d9:39:e6:9c:c7:44:aa:
a1:ca:be:f4:ff:4c:97:9a:21:ef:3a:fa:e4:69:a7:
d5:4c:74:de:3b:0e:bb:84:47:ff:30:75:80:3a:f7:
e3:18:e5:d8:1c:a7:09:38:0d:3a:d5:4d:d3:33:7f:
de:64:2c:a9:07:dc:6b:9a:e7:53:a3:c0:91:5a:23:
59:a5:72:5e:f5:89:cc:82:e7:4f:56:dd:a8:1b:7c:
8d:31:ba:69:b4:ee:68:fa:ac:59:3b:32:2c:1d:74:
77:61:0d:1a:74:5b:08:88:68:0b:46:20:27:97:a7:
34:1c:9b:30:ad:ae:4e:ea:c4:ce:9b:5d:4a:a5:e0:
29:dc:46:47:97:c1:a4:48:8f:c9:c1:25:69:08:f2:
89:c9:00:a5:50:28:70:d4:a7:35:32:13:95:36:d8:
86:73:2b:fa:3b:ea:0c:0b:18:fb:e2:9d:91:80:38:
ff:db:b0:87:f9:b2:c0:06:de:ae:6b:f3:4a:36:50:
29:13:3c:c7:4f:5f:49:20:a2:7c:5a:82:6f:c2:cd:
60:d1:90:a4:f6:e3:39:60:e8:b2:1f:68:91:00:dc:
4b:92:1b:16:1d:1c:c8:65:c2:5a:b4:b0:a1:05:b1:
66:1b:0d:2f:90:07:75:30:70:aa:7e:2e:b7:8c:b5:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:92:71:E9:CA:D1:6A:29:2B:8F:E6:3E:B2:42:E0:53:90:0C:27:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a3da25ae-190a-37a3-b07b-f1222b292497.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.65.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:97:1a:5e:9e:bd:83:d7:cb:3f:99:d5:d8:2e:cb:aa:a9:15:
ad:ce:88:34:e1:8e:b2:95:61:1b:9f:63:07:8a:31:d0:1b:2c:
2a:e1:20:a3:4d:68:ad:b7:a4:c1:b4:60:f5:c8:79:da:c8:c0:
71:6c:96:0e:72:07:2b:23:a2:4b:15:28:84:15:8b:3d:5f:13:
48:49:96:99:54:8c:0f:34:d3:95:ca:aa:40:dc:29:ae:c4:6c:
0e:3a:78:08:4d:5f:20:24:ac:39:2d:c6:a8:84:67:ca:47:44:
08:49:54:f1:f2:3e:d9:00:6a:4b:28:6d:fe:2a:db:b3:0f:d2:
c4:6a:be:4e:2f:6e:20:20:9e:92:85:3b:7d:41:d7:48:30:de:
f5:53:8b:12:91:d2:4d:e6:fc:3f:38:e2:9b:57:a1:c2:48:03:
ea:c4:27:95:0a:d8:4c:71:a9:55:18:ec:02:e2:35:b4:42:72:
2d:67:94:26:0f:d9:b1:aa:d0:ae:40:64:9a:88:cc:b6:ff:4a:
25:4c:6c:42:2f:a5:59:74:1c:04:7a:0d:c1:81:1a:71:76:67:
55:32:62:0e:24:8b:bb:3b:f0:bb:6e:97:26:18:db:99:a5:9e:
9a:b2:64:6e:68:df:7b:4f:2a:51:f6:96:2b:d9:a7:a7:29:b0:
b2:72:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:45 2025 by rpki-client