Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7dd99d30-e237-33fc-ab4c-c5de5ed66777.roa
File: 7dd99d30-e237-33fc-ab4c-c5de5ed66777.roa (raw, json)
Hash identifier: r0ENcu2H/yRBQVYBpevGU3IoV0oPq1lQUN0v/q8R37g=
Subject key identifier: AF:85:71:EB:CA:4F:C0:10:E6:65:88:05:D0:2F:66:73:FD:13:5D:F7
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858484515949FD4F64500698B4E00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7dd99d30-e237-33fc-ab4c-c5de5ed66777.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 13576
IP address blocks: 208.53.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:94:9f:d4:f6:45:00:69:8b:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=cd8e0246-f449-4996-9dec-5819918b4f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:35:ca:30:ee:a2:22:15:b6:52:54:35:28:11:
47:e6:8f:07:5e:7d:87:73:09:a6:27:e4:78:80:82:
4a:2b:46:5b:87:ef:e2:ce:f2:1d:f9:20:83:9a:3b:
f8:b7:d4:3b:25:58:b0:ee:91:c5:fa:eb:27:34:04:
98:fd:5c:0f:7a:bc:04:bc:7d:01:b1:f4:37:e1:92:
52:8f:72:73:fe:28:8b:b8:8e:66:2e:fa:e1:12:6a:
84:15:68:f3:85:5a:88:ff:ca:6a:c3:fe:f7:47:19:
c0:26:ea:23:b8:a7:e4:62:17:01:ba:72:0a:6a:6d:
c4:79:db:2e:c5:58:b6:11:6f:d6:2e:f5:ef:85:ca:
37:c9:d0:c8:3c:75:0e:55:ba:80:0b:33:21:eb:84:
d5:e9:21:83:5a:d4:10:9e:d0:af:0b:a7:2e:89:90:
14:bb:3e:b6:ae:c6:0b:e6:46:e4:07:8f:c0:80:c6:
0b:9c:8f:67:a6:b7:4c:b1:e8:b3:a9:a3:44:98:0e:
47:33:bc:2c:6e:48:fc:a8:3e:29:85:e9:6b:4b:fc:
8c:08:c8:21:b3:83:d7:70:c1:4b:a8:f8:22:81:ce:
80:81:90:fe:95:8f:c8:af:93:c6:18:32:43:ff:41:
e5:8d:aa:65:41:50:9d:25:4c:be:dd:eb:cb:26:a3:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:85:71:EB:CA:4F:C0:10:E6:65:88:05:D0:2F:66:73:FD:13:5D:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/7dd99d30-e237-33fc-ab4c-c5de5ed66777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:1c:8b:a2:76:76:3f:4d:99:36:51:1d:d1:29:41:de:b7:3c:
5a:be:bd:5e:c8:20:a8:9e:e1:17:66:1c:ee:a0:78:a0:71:5c:
67:d7:55:54:bd:01:6c:63:a9:61:e7:7b:1a:12:94:37:3f:43:
4a:22:76:75:b2:fd:b8:d3:ef:26:e3:36:43:56:2a:fb:69:3d:
2f:f7:fc:c3:f7:55:8e:cb:4a:9e:67:fe:ca:00:c3:d0:be:9d:
48:72:ad:9c:28:54:f9:f4:66:f1:a1:96:57:03:6d:8c:32:5f:
7a:d6:ff:15:17:eb:bd:00:d5:55:62:fe:ee:81:d6:20:97:67:
57:d2:d1:dd:f8:ce:2d:31:be:c5:7d:7a:ca:fb:a4:47:e0:d2:
d0:25:c9:88:0c:da:bc:00:84:06:82:d7:30:65:4d:26:84:c9:
f2:94:04:56:e3:5c:fd:c1:52:4f:66:f1:2c:23:9b:70:c8:a0:
b9:4a:cd:c9:70:9f:ba:59:cb:86:b9:39:c9:fe:af:b4:03:15:
81:d3:eb:f5:6d:0a:b7:a9:52:99:70:80:ba:55:af:6b:2b:0f:
d4:ac:90:bf:8d:d6:6c:09:68:5c:e7:e1:15:b4:8c:08:2b:1a:
4f:19:28:0e:ee:a0:a0:91:ff:7e:c2:ad:ac:db:c0:16:fe:02:
62:37:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:32:01 2025 by rpki-client