Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5e28108e-665a-3db1-a67c-3691a150e36f.roa
File: 5e28108e-665a-3db1-a67c-3691a150e36f.roa (raw, json)
Hash identifier: sf2M9VrIBDYOw9FwQxzvELLduOj/Lv53pjogNy6OQEc=
Subject key identifier: 05:CA:55:68:6D:66:B5:D1:81:98:3F:19:C9:89:2F:0C:15:3E:CE:4C
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F4328584878BB030B14B9FF9F81D68380
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5e28108e-665a-3db1-a67c-3691a150e36f.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 53471
IP address blocks: 208.52.177.2/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:03:0b:14:b9:ff:9f:81:d6:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=1ac1a95d-ba0e-4273-a4de-356b1357007a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:8d:63:d6:cb:b7:b9:d1:33:75:da:9e:a5:
50:dd:e1:ea:8f:1e:65:a1:23:d7:9d:59:54:5d:91:
b9:1e:a5:df:01:e2:8b:32:91:45:50:d6:e8:4a:a1:
f0:4d:59:78:7d:9f:7e:ef:d2:c7:5f:eb:40:dd:ff:
c1:30:fa:af:e0:05:02:25:b1:b4:4b:b5:a5:ac:47:
7f:05:44:39:dc:22:04:c2:97:cf:8a:09:ef:21:dd:
a6:fd:bd:b9:df:f4:55:74:5a:65:5b:b3:a6:c2:cd:
4f:48:60:ef:15:f3:5d:55:7f:1b:1c:78:8e:b7:04:
41:4b:af:22:c6:db:3b:6e:f7:26:0f:4f:40:c5:c9:
88:ae:98:81:13:e5:c6:7e:75:9f:9c:cb:7e:8a:89:
39:3a:37:64:9c:78:70:dd:ac:82:11:c6:79:25:19:
e8:39:d8:a7:f1:b2:c5:b3:02:f1:7c:b4:66:8c:88:
bd:00:3c:64:7d:ed:6b:c5:dd:77:76:18:69:0f:62:
80:5d:5b:76:0b:7b:55:ed:98:35:d2:4e:64:aa:c3:
a6:24:21:4b:ec:42:b2:89:c7:76:fc:37:55:bf:30:
49:0e:32:72:fc:5a:f5:29:3e:c4:a2:b8:63:87:17:
62:8b:d3:a7:c2:52:fd:2f:bd:4f:7c:cd:ee:bd:f9:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CA:55:68:6D:66:B5:D1:81:98:3F:19:C9:89:2F:0C:15:3E:CE:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5e28108e-665a-3db1-a67c-3691a150e36f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.177.2/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:de:e7:77:45:72:9a:7c:38:a9:67:3b:1b:46:5d:1d:a0:ff:
5e:43:30:f3:68:db:d7:23:97:25:3f:f5:96:a5:f8:cd:eb:9c:
36:1a:48:2e:30:d8:a1:de:1c:90:58:cb:4a:9d:1e:51:60:76:
a5:95:fb:02:9f:d9:f7:fd:7c:29:36:a8:9c:6c:9a:dc:de:04:
a1:11:6c:f2:3b:ed:be:ff:ad:6b:ce:d1:f4:e5:0d:1b:d5:27:
72:29:ce:5e:ed:db:c3:38:cf:01:25:c4:c2:f2:43:fb:bf:f2:
15:f3:20:fb:b4:76:4e:b0:ca:c3:0e:7c:14:e0:d3:d6:62:34:
41:37:a3:c3:a3:3c:ce:7c:0c:23:63:a0:cd:35:27:dc:3b:c8:
b4:73:23:38:cc:6d:f3:fc:a1:b8:f6:e6:4a:f9:5a:97:13:f3:
bc:d4:3d:35:78:4b:42:a4:b2:a2:96:eb:a2:71:50:0b:d6:ff:
2d:99:a7:43:e8:ab:c0:61:7f:76:38:89:ec:8c:6a:21:0c:12:
76:b6:67:15:d2:75:bb:2f:c5:63:ca:9f:d2:23:fe:d1:cc:b5:
01:5e:e4:25:9d:56:c3:8b:d2:81:87:dd:cd:9a:03:f9:db:da:
ba:7e:e4:45:7e:c9:45:3f:11:82:0d:50:8c:af:ec:9f:af:92:
6e:11:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:10:09 2025 by rpki-client