Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa
File: 10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa (raw, json)
Hash identifier: 7oFO3DVIfy8MN4aUjDwJfYKKRTunqWUGIs7nSgCkVZU=
Subject key identifier: 74:F2:51:34:4D:1B:41:B8:19:DD:0B:76:36:75:0F:FD:2E:2E:8E:7B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C67439F27D99F274BCD0F5A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa
Signing time: Tue 04 Feb 2025 22:11:07 +0000
ROA not before: Tue 04 Feb 2025 22:11:07 +0000
ROA not after: Mon 05 May 2025 21:11:07 +0000
asID: 396982
IP address blocks: 208.76.71.128/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:74:39:f2:7d:99:f2:74:bc:d0:f5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 22:11:07 2025 GMT
Not After : May 5 21:11:07 2025 GMT
Subject: CN=1227e584-3f52-42ac-93a7-00c2b1d97c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:6d:0b:f2:65:53:c3:0a:5e:95:09:d6:46:
e8:a8:a9:63:15:5c:b2:c6:35:3c:9f:3d:d9:06:26:
2a:40:b3:0b:c9:f2:0e:53:aa:99:8d:7b:d0:4b:66:
5e:8d:63:7a:f9:10:c6:09:95:69:46:03:40:7a:9d:
10:ce:09:f3:ca:cd:81:0b:55:85:42:c3:20:d6:cc:
b6:5d:4b:5e:bd:9a:c5:d6:8e:c1:6d:8a:15:2b:29:
d2:0e:ca:7a:1e:6b:76:33:1e:25:70:1f:0f:9c:1b:
76:3b:37:51:f1:3e:a6:2b:37:d2:50:cb:3b:91:53:
1b:1c:d3:19:bb:34:92:1d:06:67:f7:4e:f2:46:ae:
94:36:e8:b3:77:6b:08:2c:04:3f:16:e7:e6:f4:96:
07:a2:92:ef:cd:3d:bc:5b:a9:0b:bd:d5:6e:22:5d:
42:00:67:fb:fd:9a:60:38:d7:02:ef:44:ca:ed:92:
6b:e6:e6:14:fe:71:3a:87:05:80:c3:d5:f8:68:57:
8a:6a:c3:dc:95:07:93:25:6d:ee:c6:7c:c7:86:fb:
ba:26:44:b3:f0:ca:e0:73:e1:74:7f:fb:58:4a:2e:
bf:7d:75:c6:28:c3:6c:9b:a4:b5:e0:4b:ab:77:84:
ea:19:b2:5c:27:de:50:81:74:f8:cb:e4:6e:a3:0d:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F2:51:34:4D:1B:41:B8:19:DD:0B:76:36:75:0F:FD:2E:2E:8E:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b873ab-aab3-3e78-bc63-f21da0e5ed00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.71.128/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e8:55:63:42:52:31:51:cc:b3:9d:5e:18:93:d1:5a:d7:d9:
94:ba:b0:22:e2:76:fa:44:d4:71:4b:17:99:fe:bb:6d:6d:cb:
f4:c5:d4:15:4b:14:cc:05:f6:08:29:4f:50:12:4d:67:60:c1:
6e:59:1e:b6:13:20:04:23:6a:7d:dd:bf:1b:73:29:51:45:3e:
31:6c:1e:84:6a:c1:bf:f0:53:4d:7d:df:ac:e3:65:a7:3e:b9:
77:55:71:42:86:74:6d:82:1b:3b:a8:bb:bd:09:34:76:58:72:
9b:38:bf:6c:1d:02:eb:dd:7c:90:bb:f2:73:63:df:c5:3f:19:
47:40:35:43:bc:e4:94:07:86:ae:e0:de:03:49:ee:9b:dc:d8:
bc:1b:69:35:0a:3a:35:3b:ed:43:99:de:f2:45:dc:86:94:e9:
4c:2e:0f:7e:b8:f0:3b:b1:d6:ea:e0:b1:79:47:21:3d:b0:a0:
3e:3d:23:58:87:6b:d0:01:8e:c7:25:cc:75:d3:a6:b9:0a:c8:
bb:e9:3b:37:ce:57:f8:64:d5:3a:3b:2f:10:21:72:d9:d4:33:
40:19:f0:3a:6f:6d:ff:4c:e6:b6:a6:d2:13:84:31:e5:ca:87:
16:f5:cc:c4:0e:70:f3:44:d0:a6:c7:d4:c1:b2:0d:25:eb:42:
00:4f:db:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:51:42 2025 by rpki-client