Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa
File: 4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa (raw, json)
Hash identifier: j1X4FVQcnGpDOsuBnaIwEqo7c+KB/3vHKlceXqlW8UE=
Subject key identifier: FE:05:AE:D2:BA:02:50:97:93:F7:E3:AF:B9:2F:32:C9:4A:1C:2E:A5
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848467ABD34C9B7B88D99160780
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 399439
IP address blocks: 208.53.222.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bd:34:c9:b7:b8:8d:99:16:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=c0aa575b-0790-4418-b838-6bce6ac87137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5e:cd:4a:ba:d2:f0:47:97:21:1f:a0:80:5a:
41:ba:87:1e:4b:fc:27:ae:85:46:54:96:74:6c:6d:
8c:66:e9:4d:81:bc:8a:81:db:4c:4a:c3:c4:29:3e:
ed:8d:aa:ba:dd:c3:0b:1d:3a:78:72:4d:74:98:53:
9a:0d:6d:e9:7b:1e:1d:a2:19:f3:53:df:90:07:98:
d0:a6:53:98:6d:4a:7e:98:9e:46:2d:16:91:17:ea:
78:0d:2b:7f:53:bf:a8:ae:00:21:2e:ca:bc:34:39:
87:cd:14:d6:5d:9d:4e:8a:8c:83:e1:9c:58:11:6d:
40:61:5d:a6:ed:fc:ad:89:d0:4f:69:70:6c:a2:26:
ea:09:2b:16:6a:20:14:0e:20:a6:cb:58:e2:8f:d8:
1f:58:bb:4e:9b:fa:c7:5d:51:53:be:46:5d:7f:74:
b0:12:bb:8a:12:5e:24:be:22:81:5c:bc:d5:8e:77:
05:cf:d1:b5:33:46:db:1b:67:84:3c:71:c6:36:97:
b2:07:23:61:56:86:ef:f3:87:22:51:70:47:bc:f1:
09:13:31:57:b1:23:59:fa:07:cd:75:f8:65:ab:dd:
dc:b1:d6:2e:ce:bb:2a:d0:7a:10:7a:42:56:87:43:
90:50:f5:79:b8:e7:ff:3a:11:2a:91:c4:2a:d0:a5:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:AE:D2:BA:02:50:97:93:F7:E3:AF:B9:2F:32:C9:4A:1C:2E:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/4cfe3449-31ae-3c86-a8d8-afbe3fbb87de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:52:f9:45:17:f4:da:a4:08:35:4b:da:55:fe:41:97:29:c3:
e0:9b:62:1e:5b:57:ca:43:c7:f1:3e:71:87:0a:b0:3b:2e:ec:
79:33:56:df:ad:10:be:70:dc:82:23:65:2f:22:6f:70:b0:95:
71:3a:ef:33:c1:94:86:8e:52:84:00:3c:2b:29:b2:29:05:aa:
52:45:2c:e5:f8:7b:b6:13:90:cb:e0:46:a3:52:aa:f8:1d:06:
d9:9a:10:7c:bf:b0:84:ae:b4:14:2e:e0:04:b3:19:fc:ce:ca:
0a:da:10:fc:7b:22:1f:ee:3e:48:37:d0:3f:a5:5f:39:33:2f:
44:ef:21:81:d3:00:3a:3f:12:ec:7d:a2:a4:6d:f3:2d:5f:24:
3c:81:0f:39:bd:c5:64:8e:9a:02:b4:1c:93:5f:1c:63:fd:37:
4c:39:c3:8c:1f:d7:0f:21:cb:fe:f7:2f:0a:0b:e5:0a:67:3d:
bf:dd:f2:c5:fb:df:b1:a3:99:58:6c:18:1a:37:ed:64:26:b3:
70:4d:7c:8e:5e:b6:f9:22:78:f5:67:36:32:2b:c1:d4:0e:da:
28:6a:ee:48:c0:9c:b6:b8:75:38:3d:b5:d5:d4:10:ec:b1:5a:
2b:5e:25:bd:76:5f:29:a7:fd:16:bd:b9:e5:42:39:32:fb:c8:
81:d2:2e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:41 2025 by rpki-client