Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa
File: c0423400-0048-3038-acb3-c7d67eb17923.roa (raw, json)
Hash identifier: Z8kPTlL12hWCYD9L67B3+IneiC1jBqyBZ/o7MLfHuos=
Subject key identifier: 34:E2:09:D3:42:31:05:0F:5A:60:2F:C1:0F:43:64:F6:E3:49:A4:1C
Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
Certificate serial: 010D0C9F43285848451581473091096928FF8B80
Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14618
IP address blocks: 208.71.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:81:47:30:91:09:69:28:ff:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=e59e346b-6bd8-40f6-b1fd-94000c2e2b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e4:c3:cf:93:df:84:5a:fa:a2:13:0a:a7:37:
87:89:38:4f:f5:8a:65:69:b9:0b:c3:19:23:3e:b0:
ff:4c:98:c9:86:93:d3:54:c9:ae:6a:11:20:11:85:
04:3c:08:37:34:f8:af:0f:16:90:b4:08:5f:12:78:
78:68:1c:66:7e:5f:55:14:9f:9d:05:d7:30:c1:6d:
1b:de:69:8c:44:f7:f3:32:de:17:c8:fd:7b:55:4b:
75:b0:c4:39:06:0b:04:14:4d:8e:30:a9:29:5a:92:
53:b4:e7:67:e3:d2:ee:2e:27:e2:ac:d9:af:e8:1f:
db:2a:17:0b:78:41:62:22:da:6d:3a:4a:dc:83:7d:
a9:f5:d1:d1:c2:39:d5:5c:19:9e:80:77:ee:9b:e9:
35:55:11:99:52:f7:fc:a7:a3:4f:40:4c:51:0a:7d:
a1:a0:51:d9:31:f6:6e:f7:e8:51:2f:4a:40:d3:f7:
45:f9:4e:da:ce:dc:2e:15:a9:fe:5c:6b:d1:d3:e7:
29:59:e4:f5:a7:c1:05:50:16:3a:2d:8d:da:a3:51:
01:c1:59:cd:4d:16:6c:af:13:83:53:b5:62:30:1a:
51:e4:c1:5a:b9:39:d6:7a:09:f7:42:de:a3:22:a4:
2c:0d:58:82:e7:d5:74:70:82:cb:38:1f:bd:d8:18:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E2:09:D3:42:31:05:0F:5A:60:2F:C1:0F:43:64:F6:E3:49:A4:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/c0423400-0048-3038-acb3-c7d67eb17923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl
X509v3 Authority Key Identifier:
keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.71.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:db:ea:64:46:ee:97:3d:77:b4:14:27:0f:bc:bd:90:e4:b0:
28:65:de:c2:b1:53:ce:83:4e:33:51:15:31:54:87:81:4a:ba:
2a:c0:70:02:69:d6:c6:0d:62:43:0f:5c:2a:0f:17:5c:2f:5c:
db:69:d4:69:f3:ef:4d:45:41:27:69:ad:1a:12:a7:8e:34:26:
ce:4f:4a:73:7e:8d:0a:99:b4:08:45:32:73:b0:2e:09:0b:0f:
9f:b7:26:63:02:ed:cc:07:52:a9:3d:42:68:da:3b:aa:8e:22:
3a:0f:26:b1:f8:73:cc:6c:6c:4e:78:f6:25:cf:17:6d:87:4e:
a9:9d:48:79:e5:f8:51:b2:97:64:0c:ef:f0:04:a0:f4:ea:9e:
20:19:4f:06:ed:cb:d3:88:d4:af:91:76:98:83:8d:ff:ce:33:
67:b0:30:48:04:16:c8:dd:ce:9d:fb:01:9e:97:ec:cc:78:11:
0b:c4:7a:bd:6b:57:45:80:8b:a8:3c:26:6b:39:34:4a:26:bd:
02:e9:8c:08:a7:dc:7b:ca:21:af:bb:c8:8c:a2:ad:f2:43:6c:
ca:a1:b3:9b:a8:95:60:77:a2:6f:1c:bb:ca:08:b0:b4:c2:84:
fb:52:d4:69:36:52:a9:1e:05:3e:c5:ae:7c:af:8e:00:92:f0:
10:97:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:07 2025 by rpki-client