Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa
File: 73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa (raw, json)
Hash identifier: FKI9BuI/9tF2WcLp6BIGPUYhc330PUqv7nGCSmCGkTI=
Subject key identifier: 27:C3:FF:46:4D:B6:6A:9F:6E:A1:52:A6:C4:60:2E:C0:CB:D5:81:55
Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial: 010D0C9F432858485A057EA305B289C49AE8DD00
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 998
IP address blocks: 208.94.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:7e:a3:05:b2:89:c4:9a:e8:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=f8ea29aa-dea6-422f-9d36-db1a834130c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:94:96:70:f9:25:f2:8f:28:1a:c3:b6:40:
2c:ad:68:5e:bc:87:4e:74:1f:cb:d5:6f:3b:bc:2f:
49:f6:a0:37:cf:2b:16:05:22:86:50:51:a6:32:bc:
b0:46:95:b5:8d:4c:f0:f0:86:41:b3:8d:5f:94:a8:
83:8b:ea:da:f3:2f:f5:e7:90:7b:5b:fd:af:d7:34:
30:8e:4a:c3:d1:7d:4e:f2:cc:c5:11:83:cc:a8:6b:
89:db:29:a9:9f:e4:dd:bc:64:e9:8a:cc:3a:d8:33:
0d:8a:1a:48:b1:29:70:42:c2:27:af:f6:fd:3f:13:
d1:f1:0f:21:95:36:24:ad:5c:95:a1:cd:0e:1c:05:
8b:da:28:7c:96:52:e5:27:73:38:1a:08:3a:47:2f:
34:e4:2b:83:55:62:59:be:88:52:bf:f1:00:3b:77:
02:e0:e9:8a:03:e5:14:b2:0c:ec:2e:e9:26:00:4d:
a9:df:a8:15:96:be:08:57:73:23:0f:f9:3c:c3:84:
bc:2b:5a:46:bb:24:aa:f0:f7:36:ac:fe:9f:87:d6:
ea:bc:ae:2d:ad:32:4e:59:e7:69:07:db:d7:c9:bb:
93:d6:cc:fd:3d:6d:7d:f8:90:66:b7:12:92:92:5f:
bf:12:b8:f3:1e:cf:41:bd:2c:9a:fc:f5:ca:be:80:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:FF:46:4D:B6:6A:9F:6E:A1:52:A6:C4:60:2E:C0:CB:D5:81:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
X509v3 Authority Key Identifier:
keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:d6:e4:31:9e:74:1c:9f:5d:75:61:27:bc:b4:e7:af:46:d8:
57:7e:9d:35:5a:42:62:ed:4c:71:a6:cc:72:32:f1:e8:ae:ad:
63:18:4c:ad:0c:be:ed:d1:f2:64:f1:22:82:28:95:dd:61:5c:
cc:73:1b:6a:0c:f7:d2:16:fc:42:28:8a:64:de:7e:c0:0c:42:
22:26:38:47:7e:78:a9:22:f5:b4:f7:95:3b:18:d3:65:36:da:
43:61:4d:7c:81:4e:2a:14:d1:2c:ee:08:c9:88:5f:03:a0:44:
7d:f8:92:0a:05:0b:a3:8c:1c:94:4f:b4:d6:8d:be:9a:12:82:
b2:0f:13:82:4e:07:98:45:b4:be:63:db:df:a0:ed:0e:5f:fe:
87:c4:60:c0:6f:1a:8d:34:df:72:2f:9c:77:3d:db:0e:32:b7:
63:eb:f3:77:6c:85:4a:d4:d2:1e:9b:74:4b:64:b8:bb:3f:f7:
bf:10:1c:1e:50:51:a9:74:31:9f:46:0e:d6:1b:be:73:4b:bd:
6d:e1:bd:15:a4:d4:b8:5d:29:9c:fc:a9:17:8f:26:d1:fa:86:
06:a9:62:e3:09:d0:98:c5:fe:ac:3f:66:0d:3a:64:33:57:fd:
9b:26:56:c5:de:fb:a0:2f:2a:a7:e5:20:a3:50:d1:76:d8:fa:
1f:f4:aa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:06:27 2025 by rpki-client