Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa
File: 144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa (raw, json)
Hash identifier: aGdCVxMl4iWWyGnazqzsTg0ixrQtICuDyIaLKRyFsI0=
Subject key identifier: A0:B8:74:F1:52:87:73:F5:94:E5:E8:D2:7E:79:F4:A1:FF:0A:62:CD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C67437CD5541F11B9C1A21AA
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa
Signing time: Tue 04 Feb 2025 22:11:06 +0000
ROA not before: Tue 04 Feb 2025 22:11:06 +0000
ROA not after: Mon 05 May 2025 21:11:06 +0000
asID: 396982
IP address blocks: 208.76.71.160/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:74:37:cd:55:41:f1:1b:9c:1a:21:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 22:11:06 2025 GMT
Not After : May 5 21:11:06 2025 GMT
Subject: CN=eafffd01-f884-4f01-a495-7d48e1783910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:d2:02:1f:de:a0:fc:89:58:93:1f:90:e9:
86:c1:c6:3d:20:81:a7:89:63:04:77:42:4e:ee:cc:
75:cb:45:cc:3b:80:f9:fa:43:4c:47:42:5d:f3:6c:
83:f3:9d:f8:dc:5f:93:6e:9a:f4:3b:8c:2f:cd:3d:
9a:72:d7:59:8b:f4:e4:4c:76:c2:b0:23:d7:0f:2b:
ae:1b:ea:b2:b5:6a:cd:98:aa:59:09:9e:9e:9a:08:
c2:83:c5:f0:7f:bc:44:33:7f:ef:66:12:a3:f5:1e:
ca:d3:f3:3f:80:79:8e:64:9b:46:e3:fa:c2:55:08:
a9:2c:d9:71:d2:12:44:f9:01:61:32:79:a6:67:d5:
ae:0a:8d:90:13:6a:d6:2d:4f:37:fa:3d:df:eb:6b:
04:50:13:55:87:58:3f:ff:a1:32:e8:a6:1e:44:77:
b9:d1:eb:27:bb:6f:91:7d:94:f9:56:f4:b7:90:ec:
02:e8:da:57:f2:1c:ec:b7:cb:2c:12:a5:61:9e:dd:
1f:63:89:e8:39:20:3d:c7:a0:a1:b3:5d:3b:ba:0b:
dd:de:e0:24:00:13:0c:c7:5d:25:26:18:5c:6b:c4:
67:29:05:0a:6b:b2:ad:ad:04:a6:40:2b:70:8a:46:
19:2f:18:78:5a:ec:b0:a3:7a:5d:94:f5:2b:b4:17:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B8:74:F1:52:87:73:F5:94:E5:E8:D2:7E:79:F4:A1:FF:0A:62:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.76.71.160/27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:37:9a:d6:44:31:1a:60:2f:03:ed:79:c4:8b:d2:c3:df:7b:
3d:16:85:e0:44:dd:75:e4:4b:d5:31:94:10:83:ba:45:ed:d6:
da:57:e5:69:a6:5b:68:6f:2f:9f:62:4c:b1:c7:45:48:79:52:
35:5a:dd:04:5d:dc:f2:81:3e:23:b8:3d:3b:f0:88:9e:aa:9d:
65:67:69:3d:a7:68:01:95:47:38:65:75:6f:ed:5a:7e:9a:60:
ca:74:80:f1:3d:ad:dd:0c:34:4f:61:bf:f2:85:73:13:65:b9:
69:a9:f4:92:32:0e:e0:54:e1:08:49:f2:cb:a2:3d:62:02:dc:
60:93:d6:3e:38:c0:c8:2d:99:9c:c3:09:08:d3:94:b8:69:7e:
bb:3f:bc:5f:b6:96:9c:57:55:fa:80:90:5b:5e:52:ec:07:1e:
3f:4b:ca:76:d0:9e:dc:2b:dc:d3:e8:17:89:79:35:2a:66:fa:
15:d6:06:73:84:5b:b9:7a:97:6e:92:d8:eb:24:32:03:64:2c:
59:d9:e8:e8:7f:7a:dc:5e:c1:2d:f1:71:90:98:7a:4c:f1:72:
24:f2:47:66:07:7f:29:4f:a1:b4:b2:5e:aa:9e:35:f4:3e:03:
14:2e:d1:be:f3:2b:64:25:ab:79:e7:80:dc:29:9f:eb:ec:f1:
b2:8a:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:58:49 2025 by rpki-client