Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/4d94651f-74dd-36ba-996a-ca1e133d2794.roa
File: 4d94651f-74dd-36ba-996a-ca1e133d2794.roa (raw, json)
Hash identifier: LVjYEE4RzvzS68q/OH9z3jFlPDENInkChozbenYHL6o=
Subject key identifier: B8:49:57:68:4C:28:91:F4:D7:FB:C3:A5:8B:47:CF:B4:2E:AD:46:83
Certificate issuer: /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial: 010D0C9F4328584908817A8EDDA52240529992B0
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/4d94651f-74dd-36ba-996a-ca1e133d2794.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 208.66.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:7a:8e:dd:a5:22:40:52:99:92:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=7a3e05d0-6b32-45e6-995d-18d7cd4cd34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:e8:b5:1c:91:f7:a1:9b:87:77:45:79:6d:
bb:ca:33:62:d3:cd:13:94:88:74:0c:77:22:c1:71:
b5:ee:a7:c3:85:f8:42:4f:07:b8:c7:87:e5:73:93:
4d:24:76:68:62:cc:d0:00:bb:3b:00:08:fd:f9:fe:
f4:bc:ec:c3:cc:12:6a:c6:b9:b5:63:38:6d:a8:d0:
fd:90:f8:d1:1e:74:a3:e2:73:08:e6:df:67:10:1f:
26:33:b0:9e:51:42:2b:d3:21:5f:a4:b8:23:33:a1:
53:98:33:d0:82:b6:27:62:ce:a5:60:03:97:cd:34:
f2:56:b2:24:e3:18:0c:5e:65:54:a3:de:7d:df:c9:
15:09:52:bf:a0:51:c9:d7:2d:81:bd:82:ce:1c:47:
fb:cb:f3:ee:5a:09:ca:f1:df:dd:06:ba:cd:dd:fc:
21:ae:1d:11:fa:58:3d:3c:5a:60:91:44:1d:3a:f2:
b1:6c:be:2b:f4:23:be:cc:1b:fa:e1:fc:65:04:96:
c7:94:0e:91:21:d5:98:41:ef:0a:9e:1b:14:ce:65:
32:1c:2a:f2:87:6e:bb:6f:93:72:2c:ca:cf:cd:ad:
20:05:72:04:70:98:a4:a4:6a:fc:78:42:0a:bf:58:
bb:f6:78:40:d5:40:69:ce:e9:5a:9f:48:ef:bd:83:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:57:68:4C:28:91:F4:D7:FB:C3:A5:8B:47:CF:B4:2E:AD:46:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/4d94651f-74dd-36ba-996a-ca1e133d2794.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
X509v3 Authority Key Identifier:
keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
sbgp-ipAddrBlock: critical
IPv4:
208.66.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:f9:2e:c1:de:19:f8:fd:33:4b:07:a0:bf:33:01:55:22:b3:
45:a8:f7:c8:85:43:16:93:f9:54:85:49:63:a3:65:b8:77:1a:
7d:0e:2e:85:d4:b0:ef:69:02:df:03:8d:3c:1a:3a:e0:02:f3:
af:51:bb:0d:1a:50:72:e9:6a:c0:fd:95:98:00:1e:b9:56:89:
65:18:37:11:60:d4:d5:02:07:56:31:9f:65:79:80:12:79:0c:
54:71:a3:03:c2:dd:4f:b8:bb:31:7a:11:72:ac:6d:e6:13:32:
25:8d:25:83:92:c4:97:32:ec:8e:22:13:1d:5c:84:a2:34:2a:
be:30:63:40:2b:36:c0:01:a9:b9:68:a3:7d:52:f3:26:a9:76:
eb:d5:69:81:43:5b:2f:43:94:82:95:e8:1c:79:3e:2a:e6:e9:
40:bc:57:e1:a7:d4:81:2c:fd:da:57:c5:81:2c:1e:dd:ea:5c:
38:57:f3:d9:bd:82:c0:cb:d3:b0:6e:7d:b3:6d:c1:15:48:06:
09:35:73:14:46:51:cb:ff:25:66:3f:d7:8d:1f:8d:5d:a3:59:
85:30:2c:55:29:76:ba:d3:99:d5:b6:b4:8b:59:f4:91:d0:42:
04:2b:d5:4b:fa:76:b5:66:25:fe:d0:13:7f:ef:1b:e1:2c:82:
de:34:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:29 2025 by rpki-client