Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa
File: 4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa (raw, json)
Hash identifier: MYubqmGqWkQnBK+3vDFOz0FulJKMQntqao8pgXW/axA=
Subject key identifier: FB:CF:6D:84:E5:61:E2:F8:29:B4:02:A5:7D:04:84:91:EA:AC:7D:17
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584902EC1D1C4CB98C1EF206ACC0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 13781
IP address blocks: 8.8.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:1d:1c:4c:b9:8c:1e:f2:06:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=7a8d03e2-b37f-43db-ac95-c73592d99aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:3a:2a:30:f1:37:e2:8a:f4:26:96:65:45:
6a:29:d8:09:0c:4e:bd:f7:33:fe:b6:c7:cb:d4:d9:
17:a0:15:95:c6:0b:aa:50:26:1a:37:4d:c9:6a:72:
d8:af:b9:be:c5:cd:58:7f:bd:1e:59:6f:20:3a:c0:
11:24:9c:54:f0:df:ec:d1:e9:c5:bc:95:52:33:be:
86:8f:55:15:e8:2e:81:27:91:bd:2d:d4:fd:1d:cc:
9e:bd:55:97:f9:6b:56:35:d7:18:0c:84:c9:00:23:
f0:12:78:6e:81:f1:30:da:9e:c9:6a:f4:b5:0b:ea:
79:14:7e:0b:a4:e8:e3:3d:29:56:6d:cd:b6:ca:65:
f9:81:96:66:f0:a2:1e:a3:3e:90:47:bb:38:77:0a:
4d:4d:d8:d8:e4:20:8b:88:77:06:b1:d6:1c:44:5b:
ab:5c:b7:6d:fb:b6:36:ba:bd:f0:0c:0a:f9:0b:b0:
c3:1a:59:6f:62:61:d0:c7:f0:e8:33:2f:d1:52:db:
c2:b4:fd:54:a4:9d:d3:81:e1:93:18:58:13:93:c5:
9d:4f:35:a9:da:56:eb:0c:e7:1e:ea:47:56:79:b2:
69:9a:35:d3:68:3c:95:8a:a4:50:37:86:7c:2e:0a:
91:12:4b:ef:0f:3c:c2:4b:1c:27:98:ee:55:f8:13:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:6D:84:E5:61:E2:F8:29:B4:02:A5:7D:04:84:91:EA:AC:7D:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4000ee3c-46e5-3487-aa65-a3bd3de965c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.8.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:02:d4:01:30:0b:9f:21:be:ce:64:22:b4:54:f3:ea:03:50:
cf:2c:09:b2:aa:3b:57:40:eb:1a:d2:02:39:c2:2d:c8:44:d7:
80:59:5d:e6:91:97:95:52:88:49:3f:cd:2a:07:cf:ae:bf:7d:
10:f8:97:1f:eb:16:72:57:44:a1:4c:c2:18:0d:d9:47:17:ee:
d8:85:c5:e6:32:48:2a:2c:fc:a4:34:d3:e9:79:5e:bf:7b:c0:
c1:95:3f:6d:f5:67:4d:b2:10:04:1e:fb:8f:3b:06:45:4c:65:
fd:06:21:f9:b6:4e:5d:d4:20:62:1f:eb:96:67:26:b0:03:0d:
17:c1:40:1a:27:c2:4d:26:35:20:e8:6a:15:40:ae:b7:be:54:
9f:09:cd:6c:51:52:2a:f1:b4:44:ac:40:e1:c6:08:72:b8:df:
e2:b4:a9:bb:d9:ad:05:70:77:6c:1f:71:9b:18:c5:f8:89:e5:
ee:c9:f3:f7:10:46:1b:a4:78:f0:bb:18:d6:e5:03:d1:81:06:
04:d9:3b:6b:ad:7b:d9:cc:ef:19:ed:97:97:60:bb:fc:02:66:
6c:1c:83:be:52:92:43:fc:6a:c0:e8:e3:10:d3:f2:e8:04:78:
6b:57:64:f3:29:04:b4:4b:b2:3b:be:6b:2b:82:e9:6c:c4:41:
00:19:81:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:32 2025 by rpki-client