Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa
File: cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa (raw, json)
Hash identifier: DDhNlxES8DC7xxMV3hZYj95LX6YSJ5HOBMI6v/9/K2E=
Subject key identifier: 9B:05:61:FB:14:BD:18:17:1C:8C:14:C6:85:B9:88:5E:0B:04:08:65
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F432858491246BC71090782ACB1C35300
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 30104
IP address blocks: 24.38.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:bc:71:09:07:82:ac:b1:c3:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=bf93281b-7954-45c7-9d31-77fb6dfe8cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:83:9a:49:09:ef:db:2b:f4:2e:08:68:5c:
00:a1:b1:0f:99:29:9f:05:87:79:dc:db:bb:c9:68:
c4:ef:69:e3:4a:35:f1:b1:4b:75:cd:25:a2:75:5c:
77:e4:c5:9b:eb:3e:40:f0:56:53:99:a3:b1:8e:5d:
ce:bf:bd:4e:ed:0a:e3:51:2e:d6:78:61:37:be:40:
09:f0:d8:e8:bc:1b:99:2b:15:8f:39:ee:aa:2f:15:
f2:2a:92:22:c7:a9:25:1f:a5:3f:c9:f6:9d:a6:96:
8c:9f:39:ff:ca:c4:80:f9:c6:a6:97:60:89:bb:e9:
3f:a2:b0:c2:70:e5:cc:ab:c3:b7:4c:f5:1d:64:22:
68:d0:a3:00:ff:67:33:37:02:e5:70:01:ac:0a:3c:
fd:ba:aa:e1:d5:22:c1:18:95:cb:b9:26:da:db:3b:
46:5e:e5:2a:6c:28:9c:93:05:a8:a3:e3:06:8a:3e:
ba:ff:27:fe:5d:d4:f1:bd:60:b3:15:ab:0b:42:b5:
ad:8d:61:99:b9:d1:08:ca:44:4b:76:43:fa:82:a4:
2e:44:c4:a0:43:12:24:42:ce:7c:86:1a:ed:2e:f0:
5c:d1:6e:d8:cf:7d:d2:74:59:ef:b1:08:25:78:73:
72:b3:0d:e7:50:ea:03:35:1c:0b:3f:ab:a4:77:ab:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:05:61:FB:14:BD:18:17:1C:8C:14:C6:85:B9:88:5E:0B:04:08:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.38.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:30:88:de:e5:6b:b7:9e:7e:d8:c1:c0:fb:80:03:2a:06:f1:
00:7d:50:22:a4:24:bf:33:df:d4:85:ea:4d:26:75:32:9d:88:
a1:11:16:27:ee:2c:02:ff:10:6a:fa:ca:8e:7d:91:c9:e5:82:
f2:18:29:76:b7:1f:32:a4:bf:b5:c4:a9:20:79:0e:5c:08:ad:
ec:4f:8a:4c:98:15:e0:84:be:4b:1b:8f:e2:7f:b9:77:62:88:
11:39:24:52:e7:ae:a4:83:e0:13:b6:55:33:8f:31:e1:82:d0:
c5:a3:9c:6c:1a:87:ee:70:dd:d1:a4:03:94:fe:9e:19:ac:84:
99:e0:5d:84:7b:a3:22:8c:11:53:f8:cf:e3:09:0f:96:b9:16:
92:4f:2c:d0:cd:4d:e1:4e:d3:a0:be:1f:bd:ac:3a:7f:0c:31:
d6:1c:22:9a:a1:12:bf:dc:c4:12:a0:bd:f3:f8:97:a2:6c:25:
ac:d3:21:1e:c5:ac:3e:b3:a1:bf:02:dc:d9:b6:7b:21:71:bb:
75:75:29:f6:16:c7:d1:03:98:40:05:8d:71:94:10:d5:46:f9:
21:47:8f:df:00:73:18:ce:ed:c2:48:13:b8:cd:ca:11:bf:91:
ba:eb:f1:18:d0:b9:e3:1f:29:7a:15:90:4f:e4:a7:1f:45:c0:
14:c4:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:46:35 2025 by rpki-client