Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/490d55e9-82c0-3cd8-b89c-8fd34f87f714.roa
File: 490d55e9-82c0-3cd8-b89c-8fd34f87f714.roa (raw, json)
Hash identifier: TfyhFFSdXFsSSB3T8NfIjgfwaonpzC782Ku4IR0u/W8=
Subject key identifier: 0B:49:DF:86:1D:38:A8:4A:E1:3B:34:25:BF:0D:51:19:92:CE:4E:91
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858487FB5D334FF7551420DD67A10
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/490d55e9-82c0-3cd8-b89c-8fd34f87f714.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 989
IP address blocks: 8.8.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d3:34:ff:75:51:42:0d:d6:7a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=a7654788-8f7b-49b4-8810-33f871b277d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:c0:4b:67:ed:9b:50:81:7b:a3:79:b8:f7:
5a:6a:59:c4:6f:58:22:ea:a2:19:0d:fe:a3:a5:99:
4a:bb:be:f8:49:6b:26:4b:15:8d:38:be:3d:44:6f:
df:6c:31:c8:ec:e6:c4:78:93:3d:b6:4a:77:44:4a:
45:97:3b:e6:c0:e3:32:97:15:8a:af:96:36:49:3c:
cf:6e:01:ef:c2:72:af:87:a8:d2:16:82:5a:b8:3e:
c3:ce:ab:18:af:ca:98:57:46:b8:4a:b1:af:3b:d5:
2c:3a:85:11:35:a8:df:09:78:fa:d5:f1:55:38:ab:
d7:1a:e7:02:40:ca:59:76:bf:12:bd:26:aa:dc:4f:
9c:9e:18:b4:ec:92:c5:b7:11:86:fc:02:55:a6:2f:
f2:66:29:84:c1:3a:e7:b6:05:97:10:4a:ea:84:bf:
db:94:03:fc:8a:99:ac:14:2d:ee:b8:a2:a7:50:42:
c1:48:6a:ed:d4:04:ad:68:3f:21:b8:c9:7b:e1:69:
70:b8:aa:1e:31:e0:f4:c0:94:6b:1d:38:f7:6b:67:
e7:0b:b3:f6:e9:39:0a:5f:18:98:78:55:b8:1e:bb:
55:32:69:ad:ef:cc:40:cb:93:2f:8d:c6:40:58:c5:
e1:a5:31:37:aa:63:92:51:ac:4f:19:a1:7b:0c:31:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:DF:86:1D:38:A8:4A:E1:3B:34:25:BF:0D:51:19:92:CE:4E:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/490d55e9-82c0-3cd8-b89c-8fd34f87f714.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.8.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:81:f4:49:a3:6f:d2:8d:e4:b3:a6:80:4d:dc:9e:57:c9:8c:
02:3a:c6:35:62:f0:df:69:9a:49:9e:8d:c7:d9:c1:cc:63:a7:
e8:09:db:29:8d:4e:40:e9:21:e5:0e:a5:bb:42:3e:63:4c:a8:
09:1d:1f:21:22:30:51:24:83:ea:c4:51:a4:1d:4d:44:c4:5e:
61:72:20:bd:92:60:ab:ef:9d:96:87:b0:54:5c:f1:0b:6a:e4:
83:f9:b7:a9:f0:d0:ec:43:11:4b:5d:41:9b:32:ca:ac:a1:f6:
54:3f:e4:4b:12:50:28:15:ee:ac:ac:3f:2d:d6:6a:bc:4f:10:
1e:62:d6:80:7d:dd:1b:91:96:b1:c0:5d:5e:7b:9d:c1:53:d3:
31:d1:75:50:53:b9:a0:05:f7:a7:b6:a8:a6:59:5a:2d:99:e7:
21:8d:e2:11:4d:ee:92:a5:fa:06:1f:59:40:b8:50:36:05:5a:
e9:51:98:4e:94:dc:15:07:77:bd:3a:8c:de:33:f3:81:ba:47:
c6:3a:6a:0a:5c:bc:2c:58:07:8f:41:36:fe:65:05:8c:bd:03:
31:0c:42:ea:9c:32:22:0c:98:99:3c:fa:60:32:8f:41:ba:92:
1c:0f:fd:a9:76:11:9b:c3:9a:93:e7:31:14:e1:b0:b0:ff:9a:
76:99:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:41 2025 by rpki-client