Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa
File: cddcfce5-dc59-36c9-9b2f-1ec929661322.roa (raw, json)
Hash identifier: NmZoPLZfpcEbrj/V8TKMUoZsx0PiGjCoaLgRViJ03Aw=
Subject key identifier: 07:D4:C4:DC:60:62:F9:3F:46:23:A3:3C:98:48:98:D4:29:DD:27:C0
Certificate issuer: /CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
Certificate serial: 010D0C9F432858492E13BF6784BC536879AE4C00
Authority key identifier: 90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 139247
IP address blocks: 208.99.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:bf:67:84:bc:53:68:79:ae:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba339105-0dc8-4e13-ab0d-3279a6b58f97
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=dc550672-ef6e-4363-b74d-49ee088bec7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:3f:b6:db:de:00:d1:3e:ca:2a:41:8d:59:
83:b2:f5:8f:be:2a:aa:b0:d3:e7:0f:c7:96:28:a4:
7a:40:5f:e6:21:d8:4e:75:74:83:94:45:f2:c1:d6:
17:cc:c5:36:cc:50:7e:52:96:86:ad:62:7e:55:cc:
23:08:d1:96:42:ba:7e:b8:7f:4b:81:07:67:0b:4a:
5c:91:0b:b1:e0:89:33:03:c8:9e:51:dc:10:c5:a2:
e1:89:16:e3:40:de:56:ff:19:f8:74:dd:5e:31:e9:
64:85:95:a7:52:bf:c0:77:6a:c0:82:cb:7d:92:90:
70:3e:cc:f0:b6:65:4e:41:7b:e6:59:e0:04:4e:9d:
a1:52:e0:a1:a8:6c:ce:84:d2:8f:87:33:28:46:2a:
4b:7d:6d:c3:ec:f1:41:e2:8f:18:3a:a7:9a:57:f7:
de:89:f9:23:d8:b7:1b:d4:76:6e:64:7c:ec:aa:89:
3a:00:f8:01:9c:99:ae:0c:a0:8f:84:5e:23:3a:55:
35:6e:69:3d:8a:33:aa:5b:26:65:9c:02:0f:01:d3:
59:dd:f2:85:61:d1:42:3e:e0:da:aa:76:0a:b8:96:
4c:3e:9f:d1:2a:13:82:6e:91:3c:48:9f:54:29:80:
cd:92:a6:ea:c0:bb:b5:44:e4:d2:c4:cd:2b:0b:65:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D4:C4:DC:60:62:F9:3F:46:23:A3:3C:98:48:98:D4:29:DD:27:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/cddcfce5-dc59-36c9-9b2f-1ec929661322.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97/ba339105-0dc8-4e13-ab0d-3279a6b58f97.crl
X509v3 Authority Key Identifier:
keyid:90:B8:5A:EE:92:C4:9A:6D:E8:77:45:60:0F:2D:77:2A:26:11:83:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba339105-0dc8-4e13-ab0d-3279a6b58f97.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:82:53:f7:0a:f5:64:70:1e:15:41:1e:1c:9d:e2:95:c3:1a:
97:84:32:e1:a2:4d:13:ec:53:c2:5a:36:a1:54:43:b7:32:3d:
d9:29:33:0a:49:72:12:e3:dc:c8:43:fa:46:1f:5e:dd:9b:2f:
61:f4:fe:3a:9a:e2:f6:df:b8:3b:f6:5b:52:57:4f:81:29:8d:
7d:57:31:8c:d7:d0:95:fc:91:bd:fa:c7:48:a3:fb:cb:6f:1d:
05:9c:76:2e:45:b8:9b:24:76:e6:db:21:18:6f:0c:f6:4d:95:
f4:37:e0:69:60:d3:b6:05:87:8c:a7:3b:58:85:00:b0:95:bf:
56:af:36:19:14:a9:9e:58:ae:d8:9a:ad:3f:dd:46:6b:33:f2:
2a:74:f2:7c:72:33:02:23:9f:1b:a6:33:5e:62:e5:c8:d7:b7:
13:be:dc:f7:a4:ef:72:8b:36:22:5f:dc:b1:1d:8e:50:ac:84:
41:75:56:15:14:fa:52:80:e9:5b:38:3b:39:23:c9:33:83:34:
10:6f:76:f4:c9:57:f8:0a:4e:a6:34:0f:5f:ac:da:a8:32:c2:
df:3c:60:c5:f0:86:7e:c8:6d:e2:8d:a6:1f:b5:67:c1:f8:ef:
45:55:68:a0:e7:ca:8f:b8:2c:a8:5f:4a:be:3c:d6:27:4a:4a:
e1:76:a7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:52 2025 by rpki-client