Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa
File: 1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa (raw, json)
Hash identifier: XVx40PP129nno+ELADaE8r1dVBRxNcA+m1/P/10xeP8=
Subject key identifier: 37:6D:6E:CE:7E:9A:04:8C:1B:D5:B6:1A:6B:D5:87:7F:4B:A3:C0:33
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584819CFD67F7A531DFB72BFEB80
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 208.70.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d6:7f:7a:53:1d:fb:72:bf:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=2201f8af-716f-4152-b785-dc85fe5db888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:0e:1b:d2:bb:7b:d3:4e:51:36:34:e4:0f:
b0:a5:3b:f5:fc:2b:f4:c3:d5:3d:67:94:1c:bf:73:
c4:dc:84:bd:1e:d9:01:f2:dc:e5:7f:83:15:3d:f2:
f2:ea:9d:68:b3:7c:92:ee:60:1e:09:cb:52:3a:21:
f7:74:6e:43:59:b6:14:ef:40:2f:ca:0d:eb:ed:4b:
c3:e7:98:d3:1c:5b:1a:56:9e:a1:c5:d5:75:f2:dc:
cf:d5:19:81:0f:50:7f:c4:e7:53:f7:2a:4d:da:30:
53:32:72:20:46:b1:c3:66:4e:44:a6:23:0e:9f:9a:
27:87:d5:e0:fe:00:b0:4b:b9:8f:48:fa:b0:4a:52:
82:c2:00:14:35:30:38:c2:7a:63:c2:e3:99:29:c1:
a1:d8:47:bc:07:16:ca:49:b7:fc:82:20:80:33:99:
bd:26:10:86:13:b8:51:a7:e9:00:8d:eb:2f:eb:cb:
a7:5c:a0:58:c5:4e:39:48:76:80:13:91:2e:ca:41:
ae:a1:d6:94:a8:0c:0f:e7:7d:dd:cc:36:4b:51:8c:
b4:06:b3:57:6b:f1:70:41:9e:f3:cc:f9:63:c3:0c:
54:93:b6:61:0d:9c:a9:99:f0:e2:c2:04:2d:b2:fd:
11:4b:7f:79:5c:18:8b:c0:c8:20:74:41:71:c8:03:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6D:6E:CE:7E:9A:04:8C:1B:D5:B6:1A:6B:D5:87:7F:4B:A3:C0:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/1fbbe8cd-8d5d-36a3-ba74-f7c2b60d1736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b7:a5:d8:f2:a1:e8:ec:2d:42:19:4a:a0:32:b3:37:de:58:
12:5d:f9:c1:1f:64:15:fc:41:70:fa:c4:3d:1e:13:cd:31:90:
7f:ce:7f:15:9b:e7:a3:c6:7b:06:4c:c5:48:8e:0a:0f:25:ab:
4d:45:bf:ef:9f:d4:a6:75:0c:e6:02:e1:aa:75:e8:4c:f3:32:
33:cc:5f:4f:74:c7:e8:38:1a:62:64:13:bb:81:aa:bf:20:52:
c6:eb:fb:16:b0:71:d4:0a:f8:51:5e:5f:4a:25:70:79:21:f1:
9c:34:15:bd:19:b1:ed:95:56:8f:ca:b2:77:30:12:68:57:2d:
8f:c0:b8:89:8f:03:46:29:69:de:f0:07:3d:50:13:98:cb:95:
04:b6:31:bb:e6:a8:f8:31:f1:d6:db:a5:b6:e9:06:a4:f8:10:
1a:b2:02:b9:eb:44:1b:67:49:e4:24:7e:e4:e5:21:67:91:41:
ed:6e:7d:a9:1d:d8:79:5d:06:e6:98:e0:79:3d:53:52:d3:76:
ba:9a:11:34:8f:b9:b7:33:70:78:c5:f8:37:e4:0a:bb:e4:6e:
a6:a3:5b:a5:dc:9a:89:18:50:53:3e:de:07:d6:bb:e7:aa:09:
64:d2:4e:ac:12:36:3a:4e:18:96:75:e4:4e:eb:89:df:d6:7d:
5f:e2:e7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:05 2025 by rpki-client