Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f1f2c746-7240-3657-84fc-c64b909195cb.roa
File: f1f2c746-7240-3657-84fc-c64b909195cb.roa (raw, json)
Hash identifier: pBK9m12kU8bu112kCEEOdrD+kGEC4IBp1kCYX9yTE7M=
Subject key identifier: A8:D1:39:42:CE:67:09:BE:31:EF:83:51:9D:6A:39:7A:C9:1E:94:FC
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858492CB20EA34DF09F9767FF0AE0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f1f2c746-7240-3657-84fc-c64b909195cb.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 55155
IP address blocks: 8.39.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:0e:a3:4d:f0:9f:97:67:ff:0a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=0b872876-bb5c-461b-8de6-c77b59622f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:b8:1c:64:65:41:6c:c0:96:5b:7e:c1:34:
17:c8:61:a6:3e:ca:84:2b:16:5e:90:26:fe:b0:35:
02:c8:9c:3c:ca:42:fe:9c:69:e6:6c:83:dd:44:4a:
b5:63:e8:ef:ca:e9:7a:55:89:22:7c:02:f3:cb:9a:
32:fc:02:2d:0c:06:45:fe:d4:25:6c:18:83:48:62:
07:79:85:49:6e:ac:bc:a1:4c:18:16:8d:4c:24:b2:
72:99:ad:fb:fc:25:ea:3e:69:47:84:ad:06:f2:58:
78:a6:48:c6:17:28:ad:1d:5b:7b:23:30:60:f5:2e:
87:15:e5:d7:c1:65:b2:4c:2a:1b:42:03:b3:b9:80:
bc:5d:bf:af:20:54:3b:74:e5:e9:00:fc:c4:21:48:
91:18:1a:e5:fc:f6:7a:0c:d8:7c:d8:33:f6:37:14:
08:34:ce:b8:25:b2:b3:15:ed:f6:26:2f:89:28:e5:
c8:70:84:aa:07:8a:a6:41:53:a2:85:23:ee:ba:bd:
67:51:81:21:67:28:39:c6:ba:46:df:01:13:26:62:
1c:2b:2b:2a:14:e5:bb:e6:c0:67:78:9d:87:b9:3c:
56:eb:1c:65:c9:c0:35:14:b6:2f:c6:86:69:e4:e3:
08:9f:5f:4b:66:88:d6:c6:06:4b:d2:87:96:72:69:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:39:42:CE:67:09:BE:31:EF:83:51:9D:6A:39:7A:C9:1E:94:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f1f2c746-7240-3657-84fc-c64b909195cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.39.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:55:6c:fe:77:58:d1:16:cb:1e:79:6e:a6:c2:47:f6:9e:bb:
99:a6:e1:12:5d:fb:0c:39:b3:cb:10:eb:03:d5:e0:10:c9:ab:
e4:e7:dd:b1:1f:54:08:6e:60:45:e3:64:97:48:c7:1b:02:01:
d2:32:98:94:97:e6:df:27:2d:da:7b:c5:79:a6:36:6d:8c:7a:
8e:54:d4:8e:f4:69:57:ae:80:bb:7b:26:76:d2:9b:d8:14:21:
6c:db:8a:68:ad:51:91:70:7e:5f:43:5d:df:e4:f0:53:70:e4:
ea:7c:bb:55:b2:b8:09:88:fe:3d:1d:07:0f:26:6d:e9:8d:2e:
c3:81:b3:0c:7c:85:87:f9:a2:93:2c:dc:1c:b5:8b:5b:59:3e:
9c:e8:69:d1:27:59:b3:fc:f7:06:76:47:ec:7b:88:da:cb:de:
db:c4:a9:a5:aa:c0:d5:b0:1f:44:0b:02:a9:68:ab:d9:25:d7:
53:f7:f2:53:b5:5e:23:09:ee:b4:f8:f1:fb:df:35:bc:7a:67:
3c:00:ab:b1:c3:5d:5a:40:ff:43:6e:c3:7c:83:55:47:0d:e0:
b2:65:e3:69:61:fd:f0:95:d6:2f:4c:aa:c7:7d:3c:50:14:4d:
70:01:d4:03:4e:65:ff:a4:fe:02:27:47:99:49:a4:dc:ae:0e:
b7:28:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:24:14 2025 by rpki-client