Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d1875be-1104-3d88-9d5b-3c42aac71815.roa
File: 9d1875be-1104-3d88-9d5b-3c42aac71815.roa (raw, json)
Hash identifier: 9ZLbwyh1BheV/ZbaYPCLHF+PbblFKdWq8wU8TrcOX4I=
Subject key identifier: 30:3B:B5:E9:21:FC:69:0C:1A:DC:AC:FA:A6:CD:A4:55:E9:DD:D3:42
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487325DE8D6567996BE51B7E00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d1875be-1104-3d88-9d5b-3c42aac71815.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 22234
IP address blocks: 208.217.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:de:8d:65:67:99:6b:e5:1b:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=e4b242f8-e51a-4c3a-99b0-487f3539a0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:b6:33:4e:4c:47:d0:8c:4c:64:6d:f0:f6:
cc:7b:a1:79:da:59:3c:09:a8:e2:84:9f:9d:91:0f:
9b:cb:fb:2d:be:0d:37:26:c5:e9:23:f5:0e:ce:04:
72:7d:29:01:7a:94:4f:e8:59:47:d7:c4:4c:a7:d3:
d7:80:25:e6:7c:b6:54:0c:63:61:f5:44:41:c7:52:
3b:d2:cf:75:0a:1d:74:d9:e2:bb:08:04:90:96:ac:
79:4d:45:b7:a2:45:a2:94:ca:ec:86:01:37:60:ee:
66:1a:c6:20:6c:18:ab:f1:b3:f0:d4:82:44:07:fd:
eb:3d:7c:ff:00:07:61:60:80:7b:12:91:b6:6d:c2:
d5:51:5e:9c:1e:5e:f1:61:53:0d:0e:f6:4f:0c:33:
8a:20:e2:f3:88:f7:09:ce:bb:b4:f3:56:d2:c8:ed:
6f:5f:0e:71:ec:51:57:7c:5c:2b:6a:57:35:c3:59:
6a:e2:37:24:a3:f9:6d:b4:20:e4:a0:11:9b:a1:8e:
23:81:55:9b:7a:22:8f:bb:68:70:47:83:08:a7:27:
75:9a:82:27:d7:9b:f2:c0:b8:23:08:be:f6:ef:c0:
65:36:cb:74:dd:57:ad:cf:0c:9f:09:06:15:be:86:
1a:48:30:8e:91:6b:f0:76:41:ca:48:8e:e1:44:4d:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:B5:E9:21:FC:69:0C:1A:DC:AC:FA:A6:CD:A4:55:E9:DD:D3:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9d1875be-1104-3d88-9d5b-3c42aac71815.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.217.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ac:f6:ba:d3:b8:28:a6:04:31:c9:fb:50:dc:dc:d5:7a:9f:
05:4c:ad:0e:e4:4c:71:ce:83:d9:6a:2b:3c:1f:23:a3:8f:53:
43:1f:39:67:36:a6:92:a6:aa:9a:e6:e4:ad:4a:a0:f1:5a:68:
73:f5:4f:50:3b:53:76:7a:5c:ed:7f:e6:80:66:b5:16:0a:b7:
d8:bf:23:1d:dc:3f:d4:6c:d4:8d:8e:00:84:39:db:66:6e:e7:
a6:6c:eb:29:ac:1e:6e:ed:b5:0d:15:a9:c9:61:5d:1b:31:da:
f1:b4:27:b3:ef:2e:7d:e3:3b:93:9d:cf:05:8e:d1:05:2f:88:
16:66:5c:55:47:d0:10:eb:12:88:d5:04:55:c7:8c:e2:7b:89:
aa:04:5d:c3:52:84:89:de:b1:92:16:01:5b:6f:29:30:90:4e:
47:eb:03:de:6c:06:83:3d:be:41:0a:41:f9:6c:96:65:da:5e:
17:0d:b0:b9:5a:d4:9f:6c:18:5c:07:25:4f:e9:9d:47:e3:ba:
46:a8:1b:d6:85:40:05:d4:e9:5e:35:77:ad:fa:28:42:04:2f:
d6:1e:cb:27:3c:1f:5a:7f:f1:6a:95:18:ad:ba:17:06:43:23:
1e:b5:cc:5c:68:18:6e:60:df:5a:bc:fd:bf:9b:fd:dd:ff:a9:
65:b6:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:09 2025 by rpki-client