Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
File: ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa (raw, json)
Hash identifier: oAa1Fy+Z/M+UHQqmypXEI31/9KsgBcfhpctHalVRqkg=
Subject key identifier: 5F:4E:0D:ED:C9:06:79:7A:96:15:EE:C5:CD:52:E2:27:90:53:DD:35
Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial: 010D0C9F4328584871C07DE9E7BA84687FA61C80
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 208.88.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:7d:e9:e7:ba:84:68:7f:a6:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=8d746b84-0c59-4e05-aff1-fe08c6e561c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:e0:10:62:4a:bc:60:b8:0d:74:5b:de:16:
0e:34:0c:1f:fc:87:6b:4e:9f:57:6a:fc:44:05:84:
ca:83:79:b1:35:ab:72:9e:de:3f:aa:38:a8:af:f8:
5c:24:be:d3:5c:81:b5:48:1c:30:93:73:88:90:a4:
4a:7f:7f:8d:72:45:2c:be:73:a6:f1:99:0e:65:2f:
2c:2b:fc:b5:c3:48:ed:c8:03:61:b0:05:cb:35:18:
87:16:49:1a:e1:48:16:03:97:9c:cb:8c:50:f8:d0:
7a:61:3b:43:ae:8f:3e:4a:ac:fc:50:7f:88:5b:61:
7b:87:a3:e2:bc:0f:b8:2e:e6:03:12:06:80:0c:3c:
ad:aa:72:16:30:77:68:f2:ec:92:70:76:e8:ef:3e:
59:3e:aa:5c:0f:c5:09:6e:b8:32:b7:6a:74:08:18:
94:74:bf:a3:46:62:4a:05:42:a9:b6:2f:ed:bf:5b:
cf:86:b0:fc:65:a5:9b:f6:62:99:0d:60:19:97:90:
e9:07:43:a4:4a:75:27:5f:f4:30:9b:30:0b:c0:1c:
0a:ee:33:b4:e9:27:ea:e2:03:f6:a7:4b:0e:4f:d6:
d8:77:be:74:77:e1:19:87:96:4f:b7:7b:a3:ca:3e:
73:d4:cf:de:02:1b:eb:45:aa:38:20:a8:db:da:2e:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4E:0D:ED:C9:06:79:7A:96:15:EE:C5:CD:52:E2:27:90:53:DD:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
X509v3 Authority Key Identifier:
keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:f8:fe:05:28:84:92:a6:9c:3e:27:94:5f:0a:78:53:42:6c:
e4:6d:b8:f5:da:89:d5:e4:6f:7c:5d:38:7e:0f:9e:3a:5c:e4:
2e:fe:b6:76:5d:ad:04:63:6b:b1:73:2d:9d:bd:37:c5:3e:ff:
52:8c:43:f0:b5:ab:5e:06:5b:7b:10:fa:3b:88:b0:66:61:ac:
a1:97:71:c6:fa:3a:e9:48:69:50:3c:45:f4:50:cd:13:4a:e9:
95:5d:d6:59:ba:f3:97:21:f3:e1:aa:db:51:3d:eb:fd:14:4a:
da:cc:c8:21:89:2c:95:1c:70:43:4c:83:e1:fe:c2:70:69:bb:
a0:1c:90:bc:bd:27:d8:c5:86:e2:57:93:41:30:6d:eb:63:22:
ea:20:b1:3c:2e:3f:59:38:8d:09:43:51:7a:3a:50:41:81:20:
a0:e4:01:26:51:72:bb:96:9a:eb:31:4b:9f:06:e4:1d:51:36:
49:d4:ff:8d:7e:d5:61:46:f3:92:fb:4a:75:78:54:33:b0:62:
be:7b:f5:3e:68:9d:3b:4e:80:fe:81:70:17:2f:3a:ac:15:50:
f5:af:f6:67:bd:11:a6:d8:6f:0e:53:3f:d3:d4:67:6c:7d:b8:
ea:d7:46:40:d3:86:e2:d7:6f:c7:61:77:ec:03:b0:66:8c:49:
4c:84:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:36 2025 by rpki-client