Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa
File: 88e77858-b9ca-3b6c-b230-556e315ebe37.roa (raw, json)
Hash identifier: qNmQCEjtUrL26KJOUsik7aDcJFFDw3uSz27x8ZdNRe0=
Subject key identifier: 67:03:C1:89:AC:E3:51:2E:DD:4F:67:05:5A:80:FC:DC:AD:56:5E:1F
Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial: 010D0C9F432858485E35B2D9193338D4B71DE870
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 6939
IP address blocks: 208.86.35.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b2:d9:19:33:38:d4:b7:1d:e8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=b8d378fc-6c05-4e05-8ed9-b211239f7977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:bb:34:1d:0f:0b:24:b2:5b:f2:d5:ba:a9:
d6:2e:4b:ed:e7:1e:53:95:3f:86:1b:c4:fb:a5:5e:
4e:36:1f:64:f5:63:82:da:aa:47:cb:d3:18:bb:46:
0d:92:cb:77:b4:b5:c0:ab:ca:37:b5:4a:62:48:84:
2f:21:d8:30:22:c5:2d:99:37:b3:71:66:2f:74:c4:
30:d4:ab:f1:a6:46:f1:4f:3b:1f:26:ae:48:52:8c:
17:5b:10:04:ab:7c:82:fc:b1:6f:69:0b:12:0a:c6:
26:df:3d:a1:05:c6:75:4c:57:4c:86:7a:9b:62:cf:
18:72:ff:60:c2:ce:6a:16:53:57:b3:e4:e0:b7:a9:
a9:c5:48:b0:5b:fd:26:06:e6:7c:c4:dc:c7:7e:31:
91:5f:6c:3c:ac:c9:f8:d6:13:1c:16:34:14:17:b0:
ed:04:6d:74:0e:84:96:56:96:d3:d8:53:c5:f9:c1:
35:6f:49:c9:7b:80:74:e3:04:82:74:87:a3:e6:0a:
c8:65:66:2f:9d:17:db:9f:7c:de:64:d2:bf:b8:6d:
56:f2:3f:a6:4a:2e:26:2e:62:f9:6e:a3:3e:c4:a8:
a1:09:0b:9e:5a:0f:0b:22:49:bd:0b:8b:07:78:89:
b0:1f:d4:58:24:4a:6f:7e:9c:3a:c1:79:7b:d1:3d:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:03:C1:89:AC:E3:51:2E:DD:4F:67:05:5A:80:FC:DC:AD:56:5E:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/88e77858-b9ca-3b6c-b230-556e315ebe37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
X509v3 Authority Key Identifier:
keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:bc:7a:d6:6b:01:b7:4f:1d:83:df:ac:8f:b3:c6:1d:a9:dc:
6d:d7:e4:28:04:5e:ac:2b:77:e2:2a:74:ed:42:62:8f:43:54:
54:47:74:87:ae:6e:45:f4:88:fa:5c:42:eb:af:e6:89:f0:0d:
09:36:40:d4:42:ab:44:6a:e2:f5:9b:af:d8:7f:d5:59:ca:21:
90:aa:2e:1d:59:21:d5:5a:aa:31:99:c7:f0:9e:bc:87:e9:85:
1d:5a:b9:27:1e:c8:32:a7:80:9f:b1:24:73:cb:37:d2:e5:4a:
51:d4:8e:1d:89:06:eb:22:e6:dd:e9:e6:0f:39:10:41:f3:43:
52:e0:33:f3:f1:80:cd:89:41:f8:d3:b8:6b:aa:08:77:bf:0a:
ef:58:d5:db:18:78:52:fb:a1:21:05:09:48:cb:f0:37:75:25:
6a:60:c7:af:83:d2:6b:76:9c:75:00:b7:c3:8e:f9:cd:a8:cc:
45:b0:ff:cc:62:36:60:04:49:f6:d1:7a:66:34:d4:27:31:18:
be:e9:e1:c4:84:10:3f:d5:2d:06:10:cb:f4:03:b4:89:bc:bd:
54:31:3f:ce:a6:ec:45:fe:19:64:b5:97:c6:6c:c4:bc:9f:0f:
b1:1b:37:32:65:f8:9c:ef:bc:e5:4a:62:bb:3b:78:a2:1f:c8:
47:74:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:51:43 2025 by rpki-client