Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa
File: 4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa (raw, json)
Hash identifier: 6+6NiXlHJKeBtAtEwUgxvfGSBcVCYyfnt5m41wru5zU=
Subject key identifier: F1:DD:85:F4:C9:18:87:D3:87:8E:AF:83:3D:47:3B:49:94:0C:87:CC
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584800AF840C4F2A327934FF12C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 17359
IP address blocks: 208.89.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:84:0c:4f:2a:32:79:34:ff:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=cb1488d1-c1d4-4ff2-8f34-176760317926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:a5:ca:b1:3a:a1:b6:47:89:32:27:ed:a0:
02:32:4c:72:2d:93:37:7a:87:45:db:58:21:3d:24:
0b:9b:c6:96:78:c5:4f:3c:1b:a7:bc:fd:2f:72:b4:
9c:d0:79:53:20:68:5e:63:8f:c0:1c:45:c1:b9:58:
68:2e:42:8e:68:29:d6:31:78:ad:14:c9:f8:5e:4c:
f9:63:37:6f:23:fa:c6:28:8d:34:02:a0:6e:f3:2b:
4e:83:64:67:66:78:b9:4a:92:96:17:59:a2:9e:5b:
9e:a3:09:10:44:36:d5:86:9c:66:9d:df:92:f6:e0:
24:b9:49:7f:e2:04:63:41:11:11:1d:0c:08:d8:cb:
e5:22:9c:65:ef:eb:d9:9b:af:fe:ba:3a:d3:84:50:
94:d8:6e:4d:8a:bb:f5:24:48:e7:11:36:ab:f1:9d:
6c:43:f0:4c:fd:03:2a:28:09:e2:bb:f5:58:a0:65:
8d:55:d3:43:ed:f8:c7:da:de:ef:1c:f3:73:4a:68:
75:fa:20:79:5a:70:50:6c:0b:86:fe:52:bf:99:be:
6e:50:08:74:83:35:72:b2:ae:76:6b:f9:c4:ce:e1:
b7:a6:1c:bf:24:b3:08:9d:76:14:6a:d8:2b:81:6f:
c4:0b:7a:a9:0e:38:a0:c0:66:f1:f3:a2:83:f0:77:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:85:F4:C9:18:87:D3:87:8E:AF:83:3D:47:3B:49:94:0C:87:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4105b7b9-3003-3ef3-9e53-9ff2cbab08ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
208.89.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:e0:1e:8d:f3:51:7c:93:91:97:da:ba:f4:9f:a8:8d:68:4f:
e7:14:a5:ce:7a:30:2e:c8:b0:8f:f1:13:f9:58:7c:d5:ae:33:
94:d0:00:e5:77:97:43:62:fa:a0:f4:03:0a:f3:d0:44:aa:07:
17:f2:99:15:42:8d:56:61:c6:13:7d:16:4f:e1:44:69:20:c6:
a7:9e:18:9d:8f:f7:50:e1:32:f4:e4:33:3f:76:62:71:b1:62:
a6:78:1e:0e:e2:70:ec:4c:5d:a8:05:b2:ec:2a:37:76:fb:a4:
43:35:5f:f9:d3:43:b7:ba:e1:e8:a1:14:c8:e4:fc:82:fb:2f:
60:92:15:aa:8e:c1:28:34:74:0e:5c:17:61:a2:59:20:64:78:
32:9f:10:d2:15:22:c3:cb:5a:fe:b4:e5:d0:e7:8e:bb:08:e4:
d2:8e:29:89:16:f6:a7:9b:e5:8d:41:83:c5:1c:66:90:c1:ec:
8a:7e:d4:f0:3f:35:52:b2:fe:05:03:6d:1d:74:1d:01:18:22:
39:2e:30:d1:dd:00:61:25:5f:d4:10:7f:4e:c9:85:bb:c7:c9:
24:fb:ea:6a:bb:19:0e:d4:7e:b6:16:22:a6:03:8b:53:f8:33:
08:64:dd:db:56:af:8f:86:85:3c:cf:c8:10:7a:1b:73:96:7e:
e9:37:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:31:11 2025 by rpki-client