Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa
File: 25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa (raw, json)
Hash identifier: cHP7pJA5JfzJ9iLNxflyoXq4wyNTUr0Qp8wtHVWyDCo=
Subject key identifier: 11:88:07:32:D0:82:F6:D0:7B:BE:0E:DA:1E:83:CE:0B:AF:E1:36:75
Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial: 010D0C9F43285847FF4A4312606A26E1441DF380
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 1239
IP address blocks: 208.94.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:43:12:60:6a:26:e1:44:1d:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=f017b79c-0a79-4330-82d8-ca801ea75f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:f5:05:bb:85:69:c8:6b:01:8d:84:31:4e:
6f:b2:e9:7b:77:c3:47:22:19:7e:10:40:35:61:38:
62:ff:ce:b7:f4:1a:32:ba:41:c1:ba:c5:63:07:b5:
75:35:32:af:c7:2e:cb:d7:9b:98:d2:1c:e2:7c:0d:
00:f2:b7:13:04:37:c1:77:bc:cd:cb:04:67:a2:0a:
1e:b2:67:e0:e9:08:d2:e1:2c:16:6b:16:9a:51:3e:
b3:01:44:5f:ec:af:b5:58:8b:61:59:83:fe:8a:63:
27:44:d2:28:4e:f0:75:24:32:82:62:47:2b:02:94:
fd:85:fa:44:84:13:5f:ba:a2:64:21:e2:02:7b:98:
1d:cf:42:db:6b:c2:74:d0:21:3a:ad:76:bb:b2:9c:
0a:28:d9:06:27:91:55:e8:54:64:b6:2d:15:53:07:
0c:bb:d1:97:c6:27:05:45:98:21:4c:b4:70:be:f1:
b0:25:76:65:d2:55:41:f9:ae:15:64:ff:b6:9e:bb:
24:81:c5:e8:92:c9:ce:e4:c9:47:87:c7:2c:df:71:
54:38:53:69:94:34:19:c2:c1:de:6b:5b:38:77:fc:
76:8d:9c:4a:f6:b1:49:95:f5:df:34:a7:32:42:7d:
28:43:b0:04:a7:21:b2:9d:cd:b5:17:a8:c4:74:a5:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:88:07:32:D0:82:F6:D0:7B:BE:0E:DA:1E:83:CE:0B:AF:E1:36:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
X509v3 Authority Key Identifier:
keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:bb:fe:a2:fd:20:16:33:e4:53:a8:46:11:71:04:9c:30:e4:
e8:59:a6:75:b0:f7:51:92:11:ea:83:04:d9:3f:32:f2:1b:bb:
35:bd:58:11:cb:99:2b:74:20:ee:be:a6:7d:93:1a:a8:33:15:
21:0e:2f:c9:69:4e:80:d0:39:60:af:53:d1:a5:b3:14:a9:b5:
cc:ea:06:e2:c5:73:62:8c:3d:a4:07:23:fb:9f:06:65:1b:5c:
b8:fc:f8:4b:25:16:7e:8f:37:c8:cb:2a:fe:4a:17:f1:e2:c2:
dc:c2:90:e3:43:27:d7:55:3e:ed:89:f1:fd:8c:13:11:88:cd:
06:67:a9:85:cf:2a:cc:70:c3:18:d5:51:0f:a4:b9:36:27:85:
2d:ae:e8:50:ed:96:55:e0:3d:46:5a:c7:b8:56:ea:4c:67:a2:
e0:02:4c:1a:cc:5b:bf:30:24:32:10:eb:4f:e0:ba:44:a4:1b:
cf:c5:91:21:e3:80:27:61:9c:7f:4a:16:40:9c:13:ab:3f:c5:
61:0a:e0:38:3f:6c:88:bc:8f:42:1e:bb:99:f4:8c:66:82:83:
53:da:2d:44:2b:7d:d3:f4:da:0a:4f:49:c3:de:4e:92:c8:4a:
24:53:1d:17:29:3a:18:ad:72:68:f7:ab:b5:a3:09:78:56:9b:
70:9b:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:37 2025 by rpki-client