Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa
File: ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa (raw, json)
Hash identifier: CqDpG3pxa00JdMDMSlsjJ0XUV/Eb7G/q3PDVx6X6QUo=
Subject key identifier: 3B:7F:04:6E:3E:D7:B7:43:62:97:9D:20:FE:48:ED:BF:5A:8B:BE:E5
Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial: 010D0C9F43285847E62B37588021BB7B7390C8D4
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 36040
IP address blocks: 208.117.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:37:58:80:21:bb:7b:73:90:c8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=5eeea072-080f-4fec-a146-d4815d5c452f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4a:f6:59:0f:2f:e2:fe:b7:0d:06:42:7b:81:
f5:5c:c2:84:b1:22:72:7a:03:11:a9:9c:a1:4f:ea:
04:bb:05:f1:4e:ea:04:03:a4:38:ff:12:11:8c:35:
e1:ef:d1:1f:40:07:71:73:fd:46:78:3d:0f:b2:87:
2f:f2:fb:48:fa:df:5e:d3:2a:83:c9:31:f2:01:0b:
9c:f7:27:71:f9:e7:e4:03:6c:00:1b:e8:fb:8e:c3:
44:7b:2b:a4:d9:54:eb:cb:0d:34:0e:77:16:8b:5f:
42:03:a1:9d:8d:3a:a7:dc:53:63:1e:c8:c6:76:d3:
3a:0e:01:64:ff:c2:56:c8:ff:df:f9:13:4f:13:42:
a6:ed:1f:62:3d:f8:cf:3b:8a:c2:3c:bd:24:35:cb:
f0:29:54:21:f8:e5:00:37:cb:a4:8c:c7:ea:08:aa:
fc:82:15:82:ca:fa:6f:dd:1a:9b:99:ee:38:2c:cd:
cc:2e:32:05:3f:76:cc:0a:c5:69:c6:d7:b0:58:3a:
99:c7:95:71:de:08:08:30:45:6c:4b:21:bc:8c:92:
c1:ae:1b:81:88:30:93:71:2e:1d:9c:17:25:32:61:
e3:a7:5f:97:73:91:95:f4:08:bf:7e:7b:e3:7e:7b:
5f:ff:13:3f:1b:60:d7:52:e5:a5:17:76:3b:3d:82:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7F:04:6E:3E:D7:B7:43:62:97:9D:20:FE:48:ED:BF:5A:8B:BE:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
X509v3 Authority Key Identifier:
keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.117.240.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:59:05:d6:54:82:0e:a6:cc:3e:2d:ce:63:49:f3:94:36:54:
a1:94:e3:68:1c:8e:df:0f:4a:57:c5:7b:35:55:4c:0e:f8:58:
c2:8d:0a:38:19:e9:14:77:40:c6:ca:c0:a0:ff:ea:05:e6:64:
43:01:8b:7d:80:8a:99:8a:04:7b:f7:7c:22:e2:01:00:93:25:
68:5a:5e:9f:37:73:c3:91:86:05:ec:f4:2b:0f:26:15:bf:a9:
81:d4:9f:b4:5b:22:52:38:a1:7a:93:dd:20:cc:76:42:97:8f:
e2:1f:2a:33:91:d6:4f:d4:bf:b1:b1:bc:43:09:e6:8f:0f:2b:
79:13:3f:f6:50:9a:f1:9d:b9:99:c8:58:91:22:64:89:aa:8b:
30:f4:e2:a5:f7:4d:7a:dd:ec:b2:53:fa:42:a1:ce:5d:e6:e7:
3b:0c:65:f5:a6:cd:f7:8f:36:18:00:c9:27:b3:aa:6d:70:5f:
7e:e7:4b:7e:ef:c0:d0:2f:d9:a9:53:25:c5:4d:ce:0e:42:ea:
25:b1:9b:95:26:a2:65:5e:e3:17:ab:7e:3c:2b:cb:a9:cd:f6:
43:15:a1:c6:69:30:22:94:10:e3:27:83:75:e5:84:29:c2:9c:
e3:73:e0:71:d3:0a:35:81:cf:16:fd:58:08:bb:da:43:d2:ec:
45:a9:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:52:07 2025 by rpki-client