Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa
File: 8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa (raw, json)
Hash identifier: 0/JvKw14+I8DA3N+7582Y/MutMfI+s7BTNywGPYk7Gg=
Subject key identifier: 32:7D:01:38:88:44:81:4E:E8:60:82:D6:6D:7F:AF:80:39:8F:EC:55
Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial: 010D0C9F43285848100A8B5660FD7A18DC0BCE70
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 16509
IP address blocks: 134.195.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:8b:56:60:fd:7a:18:dc:0b:ce:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=3d574bd4-af89-4a71-96c3-680abb972fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c2:21:2d:56:3f:3c:a5:69:3d:42:01:24:71:
67:72:ba:a6:b0:76:2c:b6:96:92:0c:ac:9a:33:42:
f5:a4:5e:83:2a:e7:57:93:96:79:b8:2b:f2:8c:a8:
bf:1c:ad:a6:34:cd:07:df:28:20:d7:c3:89:37:09:
0e:43:a1:c4:62:32:cf:61:79:32:4b:83:57:11:ca:
0d:c6:63:f0:9a:8d:f9:06:53:4c:51:c8:00:3a:57:
4f:1c:9d:11:4f:69:d7:8e:4b:01:2f:02:98:90:6c:
72:de:83:20:06:85:b8:1b:d1:ea:cb:c5:f6:c9:5b:
7e:08:ef:43:f1:b8:21:ce:23:f2:e9:c8:f5:62:20:
20:76:b0:fd:cc:45:98:1a:36:55:00:c3:3c:72:22:
a6:14:55:07:3a:97:0a:ce:48:b0:06:5c:7d:08:cf:
da:0a:3b:7d:73:01:36:72:db:ee:96:07:ba:4d:6b:
62:d3:44:da:e7:00:bf:d4:66:33:3f:c6:89:3d:c5:
bf:32:8f:cd:e9:b9:de:19:ed:55:05:2d:f6:3e:7f:
fc:c2:a7:dc:25:52:d8:83:ff:52:f1:b0:f8:82:cf:
63:93:12:ec:13:22:e7:3a:37:f3:ba:30:35:c9:ce:
d1:9f:47:0e:5e:f1:ca:e9:7d:9c:50:ed:9b:cf:b0:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:01:38:88:44:81:4E:E8:60:82:D6:6D:7F:AF:80:39:8F:EC:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
X509v3 Authority Key Identifier:
keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:b7:37:f7:05:5d:09:0a:ac:c0:ac:8b:e4:ea:6b:fa:a7:64:
d0:6b:18:ce:05:48:b6:3a:56:e3:34:aa:be:02:4b:2d:b7:59:
82:9a:4d:41:5f:bc:b8:d5:90:92:26:99:f0:f9:c6:bc:82:b4:
0c:53:6f:b9:9f:4d:0d:a3:14:ce:24:74:a0:9e:05:bc:5f:68:
e8:98:dd:90:3d:bf:63:f1:ed:ce:96:02:07:ec:8a:2c:c6:e5:
a1:a7:84:04:fa:83:16:5b:92:78:39:22:9d:a0:ef:83:90:66:
58:00:f5:d8:6a:6d:57:46:e2:71:52:42:0e:99:a6:b0:13:f8:
8b:e5:05:a4:29:2a:c0:e4:b1:e4:9f:f0:30:60:76:ea:6b:16:
6f:87:4e:3a:69:da:b2:78:b1:8d:c9:2e:60:37:8e:69:0e:4c:
b9:28:cf:b4:e1:56:b1:dc:96:d6:41:61:2c:50:da:3c:d7:9c:
5c:21:3b:c2:c1:0c:c7:63:6c:ca:71:1f:78:eb:82:83:eb:8c:
a9:67:7b:b1:68:0d:de:9e:27:01:6c:31:75:fb:08:da:9b:eb:
5b:65:b3:22:b4:86:39:39:83:d4:65:44:76:2f:55:4c:d3:ea:
d9:58:84:3e:cc:87:64:d4:1c:83:49:ad:c4:c2:54:56:08:a5:
5e:79:b9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:34:54 2025 by rpki-client