Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa
File: 5b67306d-5138-3897-a51e-4392ac909402.roa (raw, json)
Hash identifier: ubjAXmq+05hacQH5TXDiZHjumbUtXqeHT+Cytex8pkU=
Subject key identifier: 74:34:40:36:F3:86:B0:3C:F0:33:B2:24:14:10:2B:D5:DD:86:90:58
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F4328584819CFD63BAFE20AA498517710
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 208.70.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d6:3b:af:e2:0a:a4:98:51:77:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=52eb32fb-a26c-4ea0-aae9-327d81bed9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:ee:6a:e1:b6:78:29:0a:eb:9c:e6:35:9d:
f7:5c:62:01:45:df:09:f9:39:8d:35:a0:31:79:91:
07:93:cf:10:37:ea:77:32:29:5a:49:9e:7c:42:10:
9d:f9:b5:36:8f:0a:65:f4:0b:a8:3c:20:7a:ac:1f:
04:a3:33:d8:7c:ab:07:4c:9f:9d:21:75:68:9a:c6:
56:8e:c6:90:94:51:fc:43:a4:10:2c:9a:f9:99:3b:
c8:6f:99:a5:eb:92:db:58:ec:bb:7b:98:72:e4:6f:
b4:7c:c4:3c:de:e9:87:58:fd:76:c5:b3:08:bb:12:
cd:72:6d:c6:a8:47:ff:9f:e1:b0:60:3b:30:6b:8f:
33:31:19:3d:b3:47:49:7a:8f:79:35:dd:cb:1f:fc:
99:c6:4c:7a:a0:9c:e9:2e:02:bc:3c:89:ed:d0:19:
59:e7:c9:c9:46:fe:26:0b:a6:3d:ad:2b:02:ac:9c:
69:32:6f:96:b3:1b:f2:32:c7:bb:ae:38:3e:f9:21:
92:1e:52:49:94:bc:d9:3a:db:27:4b:bf:e0:f8:d3:
a7:64:a7:24:75:59:6e:75:3d:8b:49:98:c7:86:40:
57:7f:d9:ce:33:51:49:56:a6:e4:15:b1:2d:e1:ec:
7a:b8:8e:dd:73:7f:a2:b4:cf:5f:b4:e5:6d:a7:a1:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:34:40:36:F3:86:B0:3C:F0:33:B2:24:14:10:2B:D5:DD:86:90:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/5b67306d-5138-3897-a51e-4392ac909402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:4f:a2:98:6e:8c:4c:ad:39:7b:2d:c9:43:3a:d7:9d:d3:fc:
c7:11:e9:f4:78:d5:d5:2f:a5:73:f5:a9:e6:b5:b3:94:f6:1e:
34:6f:56:e6:41:af:64:a9:65:be:39:fc:50:34:b6:6d:38:1b:
4b:45:af:33:85:bd:f8:a0:0b:46:65:a5:94:cc:8b:99:81:16:
0d:cf:a1:a5:42:46:46:52:8e:39:0b:46:77:c6:1e:ea:eb:c6:
f3:51:14:16:cb:70:26:4d:5d:c5:50:f1:61:79:ea:4f:0f:38:
ce:d2:a0:a4:5b:d7:a6:47:07:90:cd:81:53:75:f8:bf:cb:cd:
91:10:c8:be:44:9b:07:bb:00:8d:6b:cc:6a:5e:f3:93:b2:7b:
6b:c2:79:c9:b0:4f:6d:80:46:1f:48:72:63:70:f1:4a:e8:99:
59:6c:e9:f3:4a:43:9c:ee:2d:f4:2c:c5:b3:5c:48:d1:14:14:
82:ca:0d:4e:42:00:5c:22:24:df:93:64:5b:ef:18:3a:7f:f3:
bb:d5:bd:15:c5:60:9b:af:82:38:60:76:d1:7a:4e:6c:bb:7b:
86:93:80:31:25:3a:e3:5c:bf:41:c5:af:99:9f:ee:b3:2e:e4:
47:15:a2:0a:0c:a0:18:6e:ed:60:fe:9a:8e:19:9c:be:d0:31:
67:1e:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:12 2025 by rpki-client