Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa
File: 5e0a4b4d-6867-3931-a668-268f7f2e4994.roa (raw, json)
Hash identifier: bTcdIpqN1Q4UOEdB5ro2NqnI13V6OeL/TkvGYxbcfiM=
Subject key identifier: AD:86:54:B4:47:9C:C1:E8:71:EF:01:29:49:25:ED:37:C3:8D:C9:11
Certificate issuer: /CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72
Certificate serial: 010D0C9F432858488DAB4ACA59CF06BB8A795AA0
Authority key identifier: 67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 88.218.35.0/24 maxlen: 24
188.241.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4a:ca:59:cf:06:bb:8a:79:5a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=c1aa44d8-f78d-4933-a98b-5a0192f92e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:26:0c:20:5c:e4:10:ec:f5:83:ce:fd:fc:
51:4d:e3:90:b3:06:c5:82:59:89:10:e5:13:ed:51:
4c:ce:e7:26:65:ee:fc:74:2c:94:fb:2c:2b:2b:dc:
66:27:13:ae:40:36:d4:1a:b7:4d:b9:6a:64:d8:f4:
9d:04:15:3f:d3:0e:e8:bf:6e:49:7e:0e:4e:ea:ac:
09:49:0e:9e:b2:99:35:50:43:a0:f2:1f:4f:d5:21:
32:d6:37:64:8e:64:04:1d:c1:06:54:1d:1d:03:6b:
f3:e0:ae:5e:a1:c1:ff:7d:c2:48:a4:1b:9f:e6:b1:
c5:ce:73:84:08:5c:52:c8:1c:14:da:d9:74:5f:30:
d3:d8:11:7a:2f:69:c7:f4:28:f0:27:95:9d:e8:6a:
fe:7c:63:59:92:15:5a:4e:bb:a3:6a:25:16:9f:46:
77:b7:77:5d:d1:f1:6c:a0:d1:2c:51:30:13:ff:b7:
f5:9c:61:34:70:c6:23:e8:67:af:4e:93:78:51:13:
72:42:3f:8c:37:29:cb:19:d9:0b:b3:1f:b5:b7:e3:
3a:7b:9b:2c:bc:ec:2e:08:9e:84:9e:71:9e:7d:fd:
33:bb:5f:14:e6:ec:7e:c1:f8:88:cf:83:61:49:08:
fa:87:24:21:bf:ff:33:76:7c:05:fd:6c:49:0b:85:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:86:54:B4:47:9C:C1:E8:71:EF:01:29:49:25:ED:37:C3:8D:C9:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl
X509v3 Authority Key Identifier:
keyid:67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer
sbgp-ipAddrBlock: critical
IPv4:
88.218.35.0/24
188.241.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:d2:04:8a:96:0d:ed:47:32:8d:8b:e7:5d:9f:ff:63:ee:a8:
98:80:ed:46:c9:23:82:76:6b:23:68:f0:cb:47:10:4e:80:21:
8d:93:10:b0:02:ca:8a:b2:8b:8a:40:e1:5e:1a:c5:07:69:a4:
ba:75:1a:b2:7c:ab:38:84:5d:c1:9a:0d:76:bc:b3:00:4c:39:
8c:36:56:e4:ba:de:09:f5:1a:cb:aa:38:fb:56:72:b3:b0:8a:
da:3f:c5:ad:72:a6:1c:c0:6c:23:de:60:27:19:9e:a2:d1:4c:
93:23:d6:33:27:94:27:a3:1e:2e:ce:c4:6f:d5:de:f0:fb:fb:
74:2d:7d:2a:64:8f:c2:04:30:57:2c:e4:80:e3:92:b9:68:59:
8d:05:3e:c5:e9:43:ee:0a:25:e0:84:76:3c:57:31:d9:d5:0c:
05:73:5f:14:0c:63:c9:31:65:d7:74:ca:9f:7b:1d:62:a5:6f:
26:94:e1:36:76:b2:01:2d:7a:64:81:c8:69:c6:28:8b:a7:b6:
10:41:e4:88:84:35:71:a6:66:7a:b4:ce:a0:82:8e:c4:2e:b3:
5d:fc:2a:e6:0b:f7:25:cf:b1:c9:3d:bf:a8:f1:21:62:a0:b0:
06:ce:a4:40:3e:e6:ae:4f:8f:ef:6d:1e:e3:b9:65:ba:fb:24:
7a:ce:ba:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:37 2025 by rpki-client