Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1ab3e5a9-403d-31cb-8d39-d74c21f296a2.roa
File: 1ab3e5a9-403d-31cb-8d39-d74c21f296a2.roa (raw, json)
Hash identifier: yW2zqGssek5TFqgJQxwEgfIX5SnsQCW3vw+bjJ2Kp+k=
Subject key identifier: 7B:B9:74:19:4F:2B:68:FE:8F:0F:E9:85:EB:1A:9F:4F:32:68:FB:C4
Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial: 010D0C9F432858493C09250CB6F60A5027C51E40
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1ab3e5a9-403d-31cb-8d39-d74c21f296a2.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 16552
IP address blocks: 208.94.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:25:0c:b6:f6:0a:50:27:c5:1e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=3b32ab69-0799-4861-a982-5c4daf2eb6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:92:06:c5:27:b0:55:31:b3:e1:59:e7:0a:
b2:23:b9:2a:ec:2b:e6:c3:5b:b2:ad:c9:5a:6d:7c:
c2:af:d3:1d:2a:1c:4f:8e:98:fb:ce:21:82:77:04:
c0:0e:f1:26:df:ab:bd:6b:48:40:b0:3f:92:06:5e:
c8:3e:0f:57:78:7c:96:e4:b5:3d:21:9c:18:a2:99:
fc:fd:c6:60:c4:b6:06:4e:fd:f8:ab:b1:9f:d0:de:
18:4f:d6:71:ad:e8:83:88:e3:a3:5f:f9:5b:4c:23:
97:60:19:12:9a:e7:5a:47:03:11:2e:13:fd:35:01:
6c:f7:3f:33:e1:77:95:34:b6:d8:c0:05:c0:f7:76:
78:85:c6:e4:26:97:a8:de:bc:f2:f6:16:b6:09:0c:
9f:ab:1a:ca:e9:4f:a6:a4:6b:b0:e3:52:f3:55:38:
8c:e6:ed:0b:67:7c:23:95:93:45:21:bd:24:2a:4e:
6a:9e:af:b3:81:bd:00:88:bf:6e:dd:38:af:38:d5:
60:06:3c:9f:81:91:8c:66:25:75:83:96:f1:25:1f:
65:c4:f3:8d:bc:21:ce:ea:53:f7:af:93:76:f1:90:
8b:a1:5f:bf:a5:b1:96:65:b3:1c:16:a3:19:23:4b:
23:18:1c:7c:22:1e:4d:5b:58:c0:f1:c9:31:09:09:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B9:74:19:4F:2B:68:FE:8F:0F:E9:85:EB:1A:9F:4F:32:68:FB:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1ab3e5a9-403d-31cb-8d39-d74c21f296a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
X509v3 Authority Key Identifier:
keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:5b:d3:7a:87:2e:7c:e6:c6:22:4a:3c:63:d1:2e:eb:5e:e9:
ae:d2:3b:73:b7:4d:4f:19:5b:bf:08:0d:5a:0b:ce:57:a8:86:
5a:93:4c:b3:61:f6:46:4c:d1:44:ad:84:e9:5a:f8:79:b8:bb:
f7:d7:85:5b:e0:3e:ca:28:ba:6c:cc:59:16:a5:c3:14:47:06:
79:90:9b:57:8a:8f:38:f1:86:09:5e:b5:dc:38:39:f3:ef:82:
65:ed:09:d9:30:f8:c3:75:3b:d5:4e:1f:88:2f:93:9b:47:fd:
f0:30:9e:57:23:c9:9d:13:6a:29:b8:5f:61:b6:95:85:a1:2b:
76:96:19:7f:df:4e:7a:16:bc:1b:8c:56:62:23:6c:be:17:79:
91:b7:fb:4b:32:b7:27:e3:86:59:d8:5a:99:f3:c9:f6:95:6d:
42:fd:9e:38:69:0f:87:c0:5a:09:a3:14:f6:16:66:00:67:f8:
c5:99:6d:79:8a:3e:90:04:0e:2e:21:a7:f1:ed:12:07:9f:1d:
ed:7f:5a:b1:94:ea:e8:dd:08:6f:8e:5f:31:91:95:0c:ac:36:
cb:9d:8c:2f:c6:f9:90:dc:97:6b:d7:00:fd:4d:22:81:d8:d9:
a4:d4:75:df:76:cf:29:d5:fa:53:21:0a:51:b4:2d:2d:3c:f9:
88:01:39:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:41:10 2025 by rpki-client