Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa
File: 0affa3ca-5e84-377e-8612-b0e2003b6f16.roa (raw, json)
Hash identifier: VQvOEo6pKh35VsW9ZoMyA+4R31Fpl7VH+QMq1hU7EVM=
Subject key identifier: C5:38:33:BB:16:C0:B2:FB:24:96:6F:04:9A:CC:02:EB:DC:06:F5:AE
Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Certificate serial: 010D0C9F432858480644FBF47149DF6A41AC2DA0
Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 14618
IP address blocks: 208.79.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fb:f4:71:49:df:6a:41:ac:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=61530e1f-342e-4e20-96dd-2e282528fa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:e2:42:9b:39:69:40:7f:66:d0:a7:af:23:
5e:aa:0e:1e:20:51:c9:2d:0c:e6:c7:0d:e2:05:cc:
2e:d0:e3:86:a1:89:dc:e4:40:8c:1f:09:83:9f:73:
0d:c2:83:24:5f:b8:ab:57:97:a9:34:ab:58:54:e8:
f7:75:12:69:39:70:61:50:a5:09:f9:bf:3c:5c:f5:
dc:a3:f2:d8:1e:62:b1:1c:1e:42:d0:2d:78:09:75:
a2:f1:05:1b:32:5d:e9:f6:c6:71:54:5f:7a:8b:84:
7d:e5:55:2d:8c:63:50:60:cb:f9:11:28:8b:d9:d0:
2b:83:67:47:7d:75:6c:68:e9:63:cb:eb:98:51:a0:
c7:7b:96:1c:75:bd:0e:38:9b:bc:34:24:77:9a:88:
9c:34:bc:e9:c7:6e:68:5b:8c:97:26:4f:05:91:47:
b2:8a:e6:c3:ea:e6:91:e4:62:33:f9:a0:6f:ed:7f:
9d:b2:7d:5a:10:4a:ad:60:f0:19:75:45:0e:ef:2e:
92:27:d7:cc:a1:53:83:8c:45:d2:47:13:4b:cf:ce:
e7:ca:d1:59:5e:61:77:8b:4a:4e:7e:d8:67:1e:e1:
30:4e:ad:39:ef:f0:a5:c9:d1:ed:d8:02:a8:e7:16:
59:80:e3:13:0c:91:7c:55:94:51:6f:38:4d:23:08:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:38:33:BB:16:C0:B2:FB:24:96:6F:04:9A:CC:02:EB:DC:06:F5:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl
X509v3 Authority Key Identifier:
keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer
sbgp-ipAddrBlock: critical
IPv4:
208.79.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:45:9f:ae:3f:5c:cd:4b:3b:4b:06:22:e6:03:c1:29:98:ed:
55:02:49:b6:85:d7:53:29:d4:a1:07:97:67:74:b9:27:f9:e0:
ba:78:f8:b0:b0:36:69:b4:bc:20:69:cc:ab:89:f5:2a:43:b3:
47:2e:48:dd:5f:14:13:56:c2:12:90:b0:a3:62:ef:8c:bd:ba:
50:e9:ef:67:5d:95:f6:24:11:f1:95:48:35:70:63:14:6f:77:
5c:6f:fe:c7:c4:b9:fb:d8:7b:dd:14:55:bc:1b:e8:6e:58:95:
ab:81:86:99:9f:2e:08:93:99:74:8f:e7:28:95:62:24:9e:6d:
c9:f8:45:68:62:9f:a0:83:75:9e:33:57:41:3e:15:e5:0b:90:
0a:ac:be:88:d5:ec:58:ff:6e:3f:ed:a8:92:cf:47:e1:e0:5b:
c7:04:9e:dd:90:03:29:41:72:05:6b:32:fb:95:e1:8b:8e:d8:
8b:9e:e6:de:4a:29:c9:29:a6:ca:7e:b4:cf:2f:45:46:46:35:
1e:b6:a9:2a:49:9d:cc:2c:bc:2d:70:17:ac:1e:a1:5e:61:e7:
1f:e0:34:77:48:8f:0f:88:14:59:c2:a9:26:b6:50:fb:ee:08:
e6:5b:03:3c:9e:94:84:6c:a3:98:52:32:2c:71:a9:70:c0:1e:
eb:80:3b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:38:12 2025 by rpki-client