Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa
File: 54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa (raw, json)
Hash identifier: 8PEUMP5SzpxxROiqFYztlqnMie7xhwCj9+55qDpzuzM=
Subject key identifier: 6C:60:5B:12:72:29:92:E4:F1:40:ED:5F:50:40:5F:7F:5B:87:27:E0
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848451594C423A4F6155939B380
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 13576
IP address blocks: 208.53.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:94:c4:23:a4:f6:15:59:39:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=0cfa8bd2-ab17-4982-a288-6e60214e2523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:84:e8:27:de:33:e2:7e:3a:9a:4a:e7:eb:
92:7d:55:69:41:9d:05:ac:84:40:c2:5d:73:24:54:
fe:e6:56:fa:97:d5:63:d6:8e:b5:43:d7:9f:54:dd:
01:55:67:b3:4d:e1:b8:e0:f9:23:ac:19:13:93:65:
c0:11:28:b4:59:ee:40:60:94:56:d7:86:af:d5:01:
1e:68:f6:74:cf:00:91:2b:e1:f4:a8:d1:da:ff:80:
f5:ac:39:f0:bc:d8:29:0f:16:4f:cf:5d:55:f9:f4:
73:c6:24:f0:c6:d1:f7:8a:3c:6b:18:62:67:05:2d:
05:09:8a:76:2d:5c:1f:3f:18:c2:af:09:70:da:45:
96:16:22:5f:dc:29:4c:46:b4:88:c6:a4:d6:72:5d:
8f:a8:07:aa:11:fe:20:9d:df:55:75:8b:19:b5:03:
11:d4:3e:e5:ba:df:70:8c:af:00:26:62:c7:ce:e4:
d8:d2:84:fe:2b:c1:d0:2e:19:90:57:d7:9e:2e:3e:
e9:62:2b:57:b4:3e:5a:d9:00:d9:eb:5e:46:4e:31:
b8:9b:e0:45:d9:b9:ff:cb:f8:ad:8c:87:98:9c:e3:
b5:fb:53:f1:07:20:b6:7e:30:67:44:f8:46:ff:1e:
e1:42:f9:b3:89:e3:a6:8d:22:2f:9f:89:68:d8:3c:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:5B:12:72:29:92:E4:F1:40:ED:5F:50:40:5F:7F:5B:87:27:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/54915a00-a9aa-3079-9d84-fe591ad1ff1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:25:fe:a7:66:4d:95:24:ac:85:f7:98:5c:29:c0:56:7d:18:
54:98:01:f5:a2:99:b8:18:59:12:49:8c:5b:41:89:7a:7f:16:
46:62:9d:fc:c5:8c:d9:ee:f1:b3:39:b9:fa:5a:42:e5:df:a3:
ae:0e:9e:d4:d6:f0:0c:9a:46:a5:86:cb:29:39:c0:9c:f5:70:
a0:83:0f:fa:5e:0c:ea:a9:da:44:5c:c8:24:d9:c0:e5:c1:54:
ae:70:3a:0e:f1:b7:27:eb:82:c0:41:a7:d4:0d:0b:f3:f3:33:
00:f4:2b:4a:22:a6:d3:41:94:81:7d:17:48:a9:e7:b8:e4:f9:
50:9f:68:bb:d0:e4:08:00:cc:fb:e4:79:5b:6d:ae:d5:7d:6d:
d9:f7:a0:98:81:26:58:82:c4:f8:c5:b8:a8:f7:46:28:c5:0f:
72:71:9b:6a:ed:94:31:80:d2:95:26:2c:78:7d:ea:2a:37:9f:
e0:0d:25:8f:14:f1:f6:b0:66:0b:0b:02:a6:bd:5e:4d:e4:b7:
7d:3a:b7:4a:e7:bb:17:fb:b9:74:76:17:30:b9:d1:80:a3:8f:
92:91:7f:d7:c4:e8:73:3a:c3:3b:79:0b:10:60:90:b6:41:4a:
ab:5e:b0:20:d5:36:33:ad:6a:ec:7a:05:ae:5e:d5:b6:fe:99:
a7:6c:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:28:46 2025 by rpki-client