Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fba1aa51-6cbe-35d0-a42d-45c4ca8be260.roa
File: fba1aa51-6cbe-35d0-a42d-45c4ca8be260.roa (raw, json)
Hash identifier: b3gdoHIPu02I2WxBeny3Eo8dKfc31HZIGKtCRGNmO9w=
Subject key identifier: 4F:6E:59:0E:92:54:26:94:7C:B6:D8:36:8C:32:3B:B3:19:D8:35:0A
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848467ABD4480F8F81C445F8400
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fba1aa51-6cbe-35d0-a42d-45c4ca8be260.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 13576
IP address blocks: 208.53.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:bd:44:80:f8:f8:1c:44:5f:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=4c010db7-e85b-40a1-b260-51d6c8f90014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1d:a5:92:4c:2b:d1:ff:84:8d:ca:69:09:08:
ae:a1:05:29:25:a0:20:33:b6:58:84:cd:b5:8a:55:
ab:45:a7:22:07:22:4f:3b:07:6e:62:f3:ed:0f:18:
66:0f:09:11:b9:62:2b:3d:a6:e8:ce:59:3f:b3:a3:
eb:c9:e0:33:65:7f:31:53:2b:fe:44:76:f4:03:af:
ed:88:2f:18:91:7b:6f:fe:1d:8b:ef:8e:ab:5a:93:
6f:0d:14:43:99:64:6e:36:34:65:78:7a:40:40:52:
3e:eb:f0:2d:38:e3:ba:ad:4c:25:82:33:3d:30:91:
c0:45:67:67:14:d1:9f:4d:2f:f2:77:e4:40:23:c3:
0f:08:b8:f1:ba:2f:bb:c3:4d:c8:34:1d:ab:1b:5d:
85:76:b1:1e:15:26:25:4e:fc:df:b1:f9:4e:05:c0:
12:52:6e:e1:89:c7:d0:fe:36:61:e7:94:6b:d3:de:
80:01:54:ee:31:52:9f:af:0d:58:c5:87:04:80:6c:
11:c1:bc:48:80:61:86:40:e4:57:44:20:6f:8f:21:
42:fa:41:13:67:95:ab:35:90:80:e4:e4:8b:81:50:
db:6d:a0:af:08:38:9b:49:25:d4:59:2c:7e:a0:9a:
2c:bc:b1:de:3e:d4:93:7d:0f:6a:5b:d2:02:d2:1d:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6E:59:0E:92:54:26:94:7C:B6:D8:36:8C:32:3B:B3:19:D8:35:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/fba1aa51-6cbe-35d0-a42d-45c4ca8be260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:b3:9e:08:55:e1:c7:7f:19:9e:65:f8:7c:fa:8b:ae:0c:1a:
d2:04:ca:7d:98:28:a7:9a:a1:4a:eb:f6:6b:9f:ee:32:28:ad:
5b:65:d1:06:db:30:8a:0e:6a:05:01:f6:47:85:27:0c:bf:90:
b5:c2:ee:67:7d:e8:93:62:6b:7c:15:33:d4:1b:3c:49:69:ce:
fa:b2:ea:57:40:9b:a7:77:3d:69:3c:ea:30:e8:02:45:1a:24:
ea:a5:45:db:a3:a8:cd:56:09:6d:1a:23:e1:88:4f:08:1b:40:
60:a1:7b:00:eb:8a:4d:0c:93:64:cf:58:6f:ae:25:f2:5c:13:
11:64:6f:20:42:88:2f:79:81:a2:7c:3a:43:00:3d:72:f9:4a:
1e:41:c3:c0:53:60:f7:b5:20:db:28:d5:37:8b:82:d0:59:e8:
8d:c5:9d:5f:f3:be:7a:c2:65:cf:6d:fd:08:10:15:8e:78:c2:
12:6c:9f:78:a6:a7:ad:fd:a1:42:c1:9c:e8:8c:2e:ab:21:b1:
2b:1f:68:5d:af:f3:6a:ce:84:c5:47:c4:31:9a:44:ab:76:49:
1d:13:18:6d:e2:13:95:c6:05:2d:1f:2f:41:aa:48:61:0c:8a:
68:dd:87:34:6d:0f:5c:15:48:51:d2:6f:c6:1f:8a:2e:3d:3c:
d8:67:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:48:10 2025 by rpki-client