Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa
File: a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa (raw, json)
Hash identifier: J2j3YJy4ubhf3kqPD7i1GR0PmkLFVTG5xXcRvQ9wltQ=
Subject key identifier: 45:44:24:C8:0A:38:59:CD:67:A7:52:4B:E5:E5:B1:74:64:E5:6A:DA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB9EA3A81E5C77B99AE40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 208.68.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b9:ea:3a:81:e5:c7:7b:99:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=850d391f-84ab-41b1-a034-c08bb6d21bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:2e:2a:78:95:83:24:33:f9:c3:17:fb:0d:
2f:7e:58:68:5d:44:86:79:ab:a4:70:12:c1:7e:28:
74:67:88:9d:dd:fc:27:a2:26:8a:92:63:74:fb:e8:
8e:e7:27:ea:e2:ce:23:c5:a9:e9:3a:a0:49:52:64:
eb:35:7a:cd:f6:f7:67:ac:9e:78:c2:26:86:22:59:
56:18:4a:a0:57:7c:53:fc:8f:8b:00:f3:5a:d6:8c:
2f:05:4f:32:5b:25:c2:77:d0:05:ce:54:a7:78:3e:
f1:96:a0:17:51:b0:7e:a4:68:e7:ad:16:47:1b:2e:
fc:47:e5:f1:bd:ee:2e:ea:8e:fd:f9:3d:49:6c:21:
f3:8c:41:dc:89:3b:fa:50:b0:d9:67:73:18:21:d7:
b8:c2:81:ab:f3:71:41:49:4b:9f:35:f9:df:e9:c9:
c1:6e:72:e2:f3:00:d4:11:e8:cb:73:8f:a0:8b:f7:
1d:36:72:7a:27:53:ff:80:24:c5:b5:b8:f7:6f:ba:
44:7f:fe:bd:79:a8:02:4b:b4:d9:bd:f5:0e:1e:06:
0d:e2:62:ff:dd:17:95:ae:6b:6e:a9:37:b4:47:72:
c0:a3:a0:2b:88:b9:dc:95:a1:47:0e:fd:54:21:ee:
16:ca:16:69:8a:5c:24:5e:27:b4:77:18:0a:b2:11:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:24:C8:0A:38:59:CD:67:A7:52:4B:E5:E5:B1:74:64:E5:6A:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:a8:65:fb:f9:4d:8d:2f:69:8b:44:f6:20:2f:db:14:15:f5:
93:f6:b1:37:4e:a2:41:0e:8b:2a:8d:f0:4e:d6:3c:73:e2:b4:
cd:d7:93:9f:97:10:31:91:7c:14:fd:d3:5e:62:d1:9c:c9:98:
cc:1d:35:ec:37:76:c0:91:34:d9:68:54:a4:aa:67:69:d2:a8:
1e:65:78:67:32:15:bb:05:92:ae:07:50:68:42:20:0f:c5:07:
3e:17:4d:2a:58:29:22:d3:62:b4:3b:21:c6:c3:c6:a5:4c:91:
38:29:75:5c:c6:4b:c9:4c:08:ee:21:97:ec:0f:64:2b:1a:28:
e4:ce:63:02:b9:13:8d:12:d6:2f:d6:7d:1f:12:49:37:65:4f:
f3:b2:a7:a9:b5:93:f7:8d:02:81:72:36:7e:94:36:64:91:c1:
78:a8:31:46:81:ab:c3:88:af:6a:95:53:d1:ec:36:e1:18:d2:
6c:2c:d1:67:79:4c:a1:64:29:d7:7f:4b:f8:6d:a0:f1:99:a0:
3f:20:9d:f5:40:a4:20:34:4b:fc:ea:8f:60:5e:62:c8:67:58:
91:03:d4:98:f8:f3:12:46:a5:93:b1:94:5f:33:2c:bb:c8:4b:
45:38:75:7a:c4:a4:27:34:1e:90:1a:3a:b3:e4:d0:0c:bc:9f:
c4:a4:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:10:05 2025 by rpki-client