Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
File: 42c8111b-72eb-368e-a605-4f13d00564aa.roa (raw, json)
Hash identifier: CZb+xw9IpraalGKkH6NqGvDP5f7xkayOw54KoKmjjdU=
Subject key identifier: 74:E3:20:00:38:BF:7E:38:4F:5E:4F:7B:CD:97:FF:9D:84:76:CE:93
Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial: 010D0C9F43285848143A7837D8148D10F26B2780
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 14618
IP address blocks: 208.95.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:78:37:d8:14:8d:10:f2:6b:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=bbf9d592-78c6-47c7-a4c9-a687281d82c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:64:86:90:ca:11:82:eb:81:55:d3:39:25:
28:c7:27:39:5a:bb:84:42:e4:dd:33:3b:33:31:2a:
34:f8:c3:a5:8e:46:78:a9:1f:57:3e:0b:f7:f1:ab:
ac:04:50:03:e1:79:a3:47:20:f9:2a:0c:07:ca:ab:
53:01:2a:4c:98:3d:43:25:a3:df:e1:4d:aa:26:d6:
48:29:ef:93:9f:63:3f:29:b5:50:6b:b7:2d:8b:1f:
d2:97:d9:e6:9c:57:27:5c:85:55:03:6e:ea:25:5e:
15:9e:a8:21:b7:aa:4a:97:71:24:45:ca:18:bc:2f:
3a:68:b5:60:a2:3d:4f:e4:2a:c6:0f:c1:b2:8b:68:
c7:b0:1c:55:42:47:fc:72:c7:b5:7e:5b:55:4d:92:
bd:78:ba:55:39:2d:51:ab:17:e8:8e:7b:09:e5:9b:
68:df:8e:2c:90:66:15:1d:4b:e3:7e:95:cc:96:a7:
80:74:56:ae:f2:bb:51:7f:0d:1c:ab:19:be:cb:ac:
95:4d:ff:29:fc:19:60:ef:30:43:8d:d8:de:d1:33:
fe:cb:cc:ad:f2:f2:ab:f5:e2:de:61:54:27:8b:2f:
f7:46:87:61:d8:66:18:54:fe:35:bf:45:e9:f9:0a:
e0:fa:9a:4a:7d:b8:6f:0e:7e:11:42:88:e3:2d:81:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E3:20:00:38:BF:7E:38:4F:5E:4F:7B:CD:97:FF:9D:84:76:CE:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
X509v3 Authority Key Identifier:
keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.95.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:60:aa:3c:a9:d7:fd:f4:37:b8:d8:c1:db:11:4d:89:ee:71:
6a:6d:a4:23:54:77:ec:4e:e4:46:a2:34:29:81:a3:ca:2a:71:
39:97:e6:83:c5:10:bc:87:1c:ab:49:47:b7:8f:02:38:db:c8:
b5:54:35:8f:88:94:70:d3:0c:6d:02:37:7f:28:39:df:f9:09:
71:0a:97:4e:f5:90:c7:4b:12:2f:9f:a1:5c:40:43:f5:e4:a0:
08:19:c3:d5:7e:79:08:a9:1a:75:a1:ce:aa:44:7d:c8:cc:50:
e5:56:24:7d:ac:b5:b2:95:ef:b7:e7:ed:ae:b6:52:04:f8:88:
40:4c:42:9f:f3:8b:2b:eb:f4:dd:8e:09:4e:af:5b:36:f4:3c:
02:83:55:c0:c4:78:25:7a:71:51:3e:0d:7b:12:9f:5e:ff:78:
fc:6a:19:48:30:24:8b:fc:99:47:43:cf:45:23:f7:1d:e4:f4:
43:62:63:8b:dc:c6:e8:6f:80:7c:77:9a:9a:9c:bd:a9:1a:ab:
c6:be:cc:78:25:bd:55:4e:00:08:aa:22:26:82:d4:d9:d4:bb:
36:7f:5b:d1:a1:49:39:e6:a2:b7:81:53:61:d6:44:dc:02:5e:
be:e1:0f:5d:c1:a5:cd:07:76:19:c2:f4:24:b2:56:f5:35:dd:
ab:8e:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:49:05 2025 by rpki-client