Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa
File: d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa (raw, json)
Hash identifier: M6uQ/A6UyGC3KRBOnlkAAloKZ5b6VcL+xPdmDAqTOIk=
Subject key identifier: D5:E8:A6:46:F4:B5:32:7D:37:FE:C7:08:5C:3C:6C:83:DB:8D:14:0E
Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial: 010D0C9F43285848318AA8FBE46730F02228F900
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa
Signing time: Fri 13 Dec 2024 14:00:50 +0000
ROA not before: Fri 13 Dec 2024 14:00:50 +0000
ROA not after: Thu 13 Mar 2025 13:00:50 +0000
asID: 5065
IP address blocks: 208.123.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:8a:a8:fb:e4:67:30:f0:22:28:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Validity
Not Before: Dec 13 14:00:50 2024 GMT
Not After : Mar 13 13:00:50 2025 GMT
Subject: CN=5a38132c-2eee-42f0-aa02-81086cd56c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:30:43:53:c0:4b:c6:99:0e:25:d8:36:8f:
9f:87:d8:fc:8c:1e:f0:c2:70:ba:8b:1e:59:ac:66:
df:63:d1:40:fd:25:88:71:43:a9:5b:cb:94:c0:22:
9c:f1:b4:2d:9e:8f:4e:a8:0b:3e:6d:d7:a3:5f:80:
72:cc:55:7d:4e:42:20:6c:03:85:e2:6d:68:2f:df:
30:90:f0:13:43:2d:ae:c9:df:f8:94:ba:53:73:62:
00:51:14:83:6f:f8:3a:f2:94:bd:73:de:0e:17:3d:
ba:e0:56:c5:e3:17:49:17:97:2f:3b:44:88:21:b1:
5f:43:23:79:7f:32:cf:41:1f:fe:a8:d2:6b:f0:a8:
c1:ab:5b:20:b8:bd:ce:15:90:ef:a0:82:c9:ea:06:
6c:3e:69:7e:63:0a:a8:a2:8d:fe:89:ff:65:bc:8f:
e2:09:bb:3c:95:3d:a5:38:a0:47:56:64:a7:3e:ae:
12:93:ae:16:d4:06:49:26:82:01:33:53:1d:3d:63:
55:5e:d3:d7:3b:4e:d9:c4:86:4a:32:9e:11:5d:79:
da:24:e0:ba:68:57:92:bb:f1:38:f8:13:f2:50:22:
49:3d:80:f7:75:37:c2:7b:93:f9:60:2a:f5:a2:1c:
0d:64:b9:2b:c7:ed:cd:0b:b7:6f:0f:56:f8:2e:b0:
70:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:A6:46:F4:B5:32:7D:37:FE:C7:08:5C:3C:6C:83:DB:8D:14:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
X509v3 Authority Key Identifier:
keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
208.123.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:00:cb:58:ca:b8:f4:4c:94:c0:46:90:4e:2b:df:02:b3:09:
c3:42:e4:02:8f:b2:18:80:f5:52:37:bb:9e:09:2c:f7:c1:57:
f4:44:f2:8c:a3:4c:34:b4:e5:0d:aa:86:75:91:49:f0:c3:df:
94:e0:a9:93:63:72:9d:2e:60:7d:d1:f8:81:cd:eb:fa:c6:bc:
d0:3e:ad:ec:1d:17:94:54:98:ed:88:62:eb:61:5e:3a:d3:72:
89:8f:0c:bb:b6:3e:e7:c1:da:17:96:f8:d8:90:69:54:78:a6:
36:5a:41:db:7c:d8:69:b5:fa:9c:e8:39:fe:15:66:b9:26:d8:
76:33:aa:83:ea:b2:16:e6:74:5a:98:72:1b:6f:3c:c6:5b:f4:
88:0e:6d:e6:ba:e5:20:31:0c:ed:2b:d5:7c:44:1b:9f:0d:03:
d5:32:5b:2c:61:e8:90:b0:55:e5:35:8c:56:ff:2d:83:d6:a9:
4a:1d:66:c6:ad:9f:03:ac:5d:2e:80:f0:79:f9:f1:c6:9a:a0:
24:29:dd:3d:12:63:29:8c:ee:c6:5c:8f:1b:fd:38:c1:bc:85:
2d:3d:48:f9:1b:d8:dd:33:de:2a:80:12:31:c7:43:47:61:9e:
53:96:bd:2c:b0:73:f8:97:a6:23:63:19:1d:51:7d:fe:48:b7:
ec:2d:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:48 2025 by rpki-client