Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa
File: 518fb9f3-6845-3e45-af69-497c8740ed7a.roa (raw, json)
Hash identifier: XpKggiwBDeWhiOqTbsTj5wGXKgvHnivku8B5dtw2LZs=
Subject key identifier: 03:E5:7B:F5:FE:0E:A7:E0:49:D0:E4:A8:FE:63:E7:52:BA:E0:76:86
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584819CFD66C7E851FF3E1BE7040
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 14618
IP address blocks: 208.70.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d6:6c:7e:85:1f:f3:e1:be:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=ed0066f3-8b92-4c26-8bb3-bd50dc7b02fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:73:84:5b:f4:c1:f0:6b:89:27:ee:cb:66:
ba:64:10:a0:6c:9e:d6:05:74:21:a6:15:4c:29:e9:
af:3f:7e:ba:26:ed:9a:c9:fc:a5:07:84:83:7b:24:
6d:5a:2e:ad:1b:ee:df:1a:a3:9e:49:df:2f:39:7e:
55:52:0a:43:ab:33:be:ce:ae:27:38:cf:4e:26:05:
17:01:6f:a5:e8:2e:3c:d1:98:82:70:94:14:c3:e8:
95:16:98:e4:95:96:70:75:56:8a:68:10:d2:5a:7d:
c3:62:28:cb:95:e4:8a:42:2d:5d:12:d8:0b:46:60:
5d:d6:ce:47:99:9f:1c:62:0f:c0:ec:e1:2a:57:93:
87:5d:0d:e0:ff:8d:13:51:34:ff:c8:88:86:53:8c:
be:5c:c9:77:ed:18:a6:70:e4:2a:ab:70:e7:20:f2:
3b:1d:ff:96:06:18:a4:a6:c4:88:47:cf:0f:09:41:
4b:dd:c1:82:62:21:c7:1f:f7:3c:dd:a2:49:cd:8e:
9c:d6:cc:18:eb:ba:d6:97:fa:c0:df:80:f0:99:f8:
7d:58:d3:5a:d4:b3:ca:d5:a4:7e:98:ed:cc:d5:64:
5b:9b:38:5b:90:b6:cb:57:ee:48:88:9d:87:22:01:
92:96:03:46:bf:e5:46:5f:38:e9:34:9e:62:6c:d2:
61:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:7B:F5:FE:0E:A7:E0:49:D0:E4:A8:FE:63:E7:52:BA:E0:76:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:42:37:22:71:49:b1:a4:a9:49:12:f3:a0:62:91:c7:5f:cf:
5f:9a:96:34:bd:98:70:62:52:f9:df:d0:bd:a7:b3:13:c4:a9:
69:67:7d:a1:a3:7a:f9:79:19:33:be:24:64:fa:42:8b:c7:fa:
a8:5f:50:d3:ec:08:b3:82:31:91:cf:5a:10:be:84:d1:e8:39:
13:37:89:1c:d9:c3:e2:0a:b7:bc:45:da:af:44:db:2c:28:04:
9c:6d:78:35:30:ca:58:2b:9b:02:4a:67:57:dd:f8:70:da:34:
05:96:a4:52:20:55:33:fa:d7:49:e5:2c:06:ed:41:88:86:86:
b5:ba:44:87:79:4c:19:89:90:69:cb:06:8f:77:1c:ad:6a:ba:
40:b5:c1:9e:b4:fc:39:6a:ff:9a:0b:03:11:28:ba:ab:46:58:
ef:80:8b:cc:57:d9:56:ee:3b:02:64:1c:34:a5:ce:ca:93:b0:
4f:23:b6:c7:2e:76:26:45:3d:af:93:e3:ad:e8:80:cf:71:b7:
6a:01:84:7a:81:d4:6f:42:f1:a5:f1:82:c3:27:2b:87:d3:53:
a0:f2:62:fb:eb:cb:db:be:8f:74:44:99:73:d0:c0:d9:04:21:
a4:a8:d7:97:1a:5d:74:bb:df:bf:1b:65:4d:e1:80:9d:01:0b:
ae:99:91:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:20:00 2025 by rpki-client