Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa
File: 9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa (raw, json)
Hash identifier: k4ssvS8EPJGgVE5WGAkFcyJbohPDVFcoZn+oCKA1IyM=
Subject key identifier: CE:5E:1C:52:53:62:29:82:5A:55:32:0C:D4:32:03:D3:8F:3F:73:75
Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial: 010D0C9F4328584871C07DFAB525C2C5EA9D2D20
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 208.88.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:7d:fa:b5:25:c2:c5:ea:9d:2d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=ebcef73d-9608-40be-87a2-d87732f04375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:44:2c:5e:c0:ee:37:a0:13:bb:60:66:1f:62:
ed:35:99:32:79:2a:51:0d:c9:c4:71:26:75:b1:a4:
1b:41:38:41:12:a3:91:7b:13:50:a2:91:42:4d:db:
39:5b:dc:85:ac:2a:26:f1:50:93:56:99:23:a2:b2:
35:f1:fb:2a:3f:4c:54:14:a2:dc:1d:f6:11:75:ca:
d1:47:ac:9f:fd:c4:64:99:1f:70:4f:1f:24:d6:9d:
ac:6f:d1:aa:e6:e7:43:03:f4:d0:7e:e3:a3:cb:54:
30:ff:71:de:9e:33:a5:d3:86:42:9a:bf:0a:75:99:
7e:3c:6c:d4:70:25:f2:59:9e:4b:05:2d:d6:38:6f:
18:ae:cd:e4:fc:36:1e:3d:fa:0e:24:aa:f1:ce:15:
95:0a:54:9b:52:21:d5:8b:16:6d:1a:d6:2a:64:88:
d2:cd:f1:0b:8c:5a:32:a2:b4:45:da:56:7f:f4:ef:
85:10:d0:7b:0a:2c:8f:bc:f3:5b:de:74:38:7e:02:
51:00:d6:88:12:9e:fb:c5:84:b4:ee:8e:62:73:e1:
89:9b:34:94:86:cf:32:a6:20:b9:76:19:ea:f8:d7:
bf:0c:36:59:1b:cd:f1:24:2b:7f:e4:30:6a:23:98:
a9:81:42:35:0c:27:53:58:2c:52:7e:d6:e6:42:4d:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5E:1C:52:53:62:29:82:5A:55:32:0C:D4:32:03:D3:8F:3F:73:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/9db30f64-7e0b-3608-b7bd-76fce8d76e5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
X509v3 Authority Key Identifier:
keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:a9:e0:4d:7d:e9:d2:f6:af:e3:db:ef:0f:42:7b:9e:ec:e1:
f9:d9:aa:3a:5c:2c:86:3e:f7:dc:85:2c:92:c7:0d:4a:ae:10:
c9:80:2c:ff:a5:e4:06:f0:e9:12:1d:ab:36:11:45:75:dd:45:
68:84:22:2d:49:48:e5:c0:6c:48:0e:ca:cd:5b:30:ed:e6:cb:
4f:56:7a:25:b4:2a:7f:32:74:73:3e:dc:ee:8f:b2:62:e8:0a:
73:2b:64:03:15:86:98:a4:0f:fe:40:67:af:7a:32:ee:96:87:
1f:b7:22:0c:09:bd:7c:15:a3:17:c0:40:0e:f9:15:1a:2e:46:
e2:a1:33:d2:30:f2:4e:f2:6b:b2:31:20:ca:cd:c5:7b:5d:d8:
fb:b3:a4:4e:7a:99:66:7d:60:b4:8d:57:ee:74:d4:87:c9:72:
a7:a9:de:0d:56:a0:19:7c:8a:13:d0:ec:8e:7a:1e:44:c0:17:
ca:90:26:38:1e:41:62:a3:14:2d:b8:ce:0d:58:b2:b3:38:57:
5c:16:6e:80:29:c1:51:7f:3b:b0:3c:29:98:05:f2:53:44:c6:
6d:1a:f4:80:77:82:f3:db:a8:fa:6e:9a:0b:59:d9:ba:d7:a6:
37:da:c9:7a:42:04:7d:77:f1:f8:10:28:bc:bb:15:68:93:f3:
32:c9:7b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:55 2025 by rpki-client