Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cea5272-6b0e-3802-b40c-b4a4e7e412ad.roa
File: 0cea5272-6b0e-3802-b40c-b4a4e7e412ad.roa (raw, json)
Hash identifier: ldM+oSthx/wy80r/kTerEjQdHQ4UM9P7dwISD+cnM8Q=
Subject key identifier: 21:1E:22:FD:37:B0:B5:84:EE:55:BB:4F:D6:E0:4C:C5:57:C6:B2:7B
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584842A29780780BAFC5ED85C080
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cea5272-6b0e-3802-b40c-b4a4e7e412ad.roa
Signing time: Thu 19 Dec 2024 16:57:50 +0000
ROA not before: Thu 19 Dec 2024 16:57:50 +0000
ROA not after: Wed 19 Mar 2025 15:57:50 +0000
asID: 17203
IP address blocks: 208.53.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:a2:97:80:78:0b:af:c5:ed:85:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 19 16:57:50 2024 GMT
Not After : Mar 19 15:57:50 2025 GMT
Subject: CN=5e6ce65a-3912-4da3-a78d-53bd40c16f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:33:c1:91:e4:5c:c1:9c:af:6f:61:fa:19:
82:83:bb:54:42:a2:06:31:2c:e6:11:f5:c7:e3:b1:
c8:89:58:02:86:3b:a1:71:26:ba:d8:1a:03:e5:bb:
c3:ad:83:1e:3e:57:d1:bb:a3:ea:65:0a:36:3c:ff:
f4:0c:fa:63:4a:c0:f8:6c:d0:68:a7:45:6b:31:10:
34:50:98:97:37:77:7b:01:6c:9e:6d:26:04:1b:69:
0a:49:a6:d7:81:2c:0a:6a:2f:50:ff:fe:77:d3:39:
2b:5b:32:78:5a:91:71:14:73:d7:99:a1:bb:cc:bb:
b0:0f:54:69:2a:bf:1e:59:0e:32:94:77:4d:d8:b3:
0c:8d:6a:35:b9:07:83:34:29:e3:fb:ca:f6:9f:f4:
cb:c7:d5:38:bb:ec:0b:5d:42:25:55:1d:c4:ac:1f:
03:ec:79:7e:91:d2:40:e2:45:42:1f:4b:6b:27:16:
b2:aa:c9:46:83:d0:2d:89:98:91:fc:f1:85:e2:86:
da:91:b1:34:ab:a4:41:50:f4:c2:78:bf:61:ad:56:
50:8a:30:ba:31:64:fb:d1:12:aa:ff:5e:2a:e1:99:
96:65:75:72:7f:65:53:11:b5:fd:dc:0d:0c:c9:f4:
97:a1:59:35:bd:3c:23:dd:ec:b5:9f:a9:6e:b6:a0:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1E:22:FD:37:B0:B5:84:EE:55:BB:4F:D6:E0:4C:C5:57:C6:B2:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0cea5272-6b0e-3802-b40c-b4a4e7e412ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:98:76:18:3e:30:9f:6c:4f:b8:56:af:88:73:10:bc:cc:71:
0f:80:8a:6c:a0:96:9e:83:e6:19:89:33:74:62:84:31:e8:22:
b0:80:79:10:65:72:4f:56:e5:ab:de:92:62:75:90:f1:fe:03:
d0:92:81:eb:2a:0b:70:b3:b2:a4:ad:9e:7b:67:1b:c4:4b:10:
b8:48:5b:f9:68:dc:1c:da:3c:d7:24:6f:c7:c6:96:c6:29:14:
d3:d2:c8:47:75:1b:0c:c7:a3:4a:64:9c:ab:ac:b3:3d:a0:d4:
2c:f0:b7:68:2b:d5:c5:6d:37:e6:55:dd:f9:bc:15:19:5b:58:
36:98:13:89:97:a4:ee:48:85:9e:be:82:c9:a4:a6:2b:0c:17:
aa:b0:c1:58:b8:e0:32:1a:39:65:44:d3:d3:dd:22:4f:3d:dc:
09:58:f9:8f:ca:b9:fc:cd:d8:d9:57:31:7e:3a:a3:54:70:ae:
f0:ae:1b:ad:3a:30:95:6c:95:da:ec:f5:f9:04:1f:da:ec:d7:
96:45:d6:3e:79:b1:c9:86:ab:9b:e7:b5:6a:28:82:1d:e4:c2:
51:7e:5f:01:a5:e7:dc:06:4c:42:56:69:ae:d6:00:22:d4:6f:
ab:ae:f8:15:48:45:a3:87:a3:41:ca:cd:1b:2f:06:e3:5c:e4:
9b:b3:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:43 2025 by rpki-client