Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ef9ace7-77f4-3c3f-ba7c-34e7b7c94c72.roa
File: 0ef9ace7-77f4-3c3f-ba7c-34e7b7c94c72.roa (raw, json)
Hash identifier: UdKR/XYymoRHPYZYfkrrkh/FRfnxCNvlvgCVwn4hH/c=
Subject key identifier: E4:2D:13:1B:BB:FD:6F:51:22:B3:6A:85:06:C8:47:66:5C:C9:9E:7D
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848ED4C6C6FC8CCB8B17F6A3236
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ef9ace7-77f4-3c3f-ba7c-34e7b7c94c72.roa
Signing time: Tue 18 Feb 2025 20:07:27 +0000
ROA not before: Tue 18 Feb 2025 20:07:27 +0000
ROA not after: Mon 19 May 2025 19:07:27 +0000
asID: 16509
IP address blocks: 208.214.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ed:4c:6c:6f:c8:cc:b8:b1:7f:6a:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 18 20:07:27 2025 GMT
Not After : May 19 19:07:27 2025 GMT
Subject: CN=c88d2214-ec7a-4957-9eb1-64a6be4f23e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:ef:ab:13:dc:63:cd:87:3b:fd:16:50:b4:
0f:27:ad:d7:7f:c0:a5:e2:94:bf:39:e8:9c:4a:03:
46:3b:5c:b7:51:03:32:5b:62:8b:11:17:e3:c3:8d:
1f:06:38:0a:ed:e7:2c:5a:53:7e:94:b5:4a:e6:74:
74:11:c8:9a:cd:5c:48:bd:63:b8:db:c0:f9:d7:e9:
7f:a5:99:b2:fa:c7:a2:4e:d7:32:ee:de:7c:c3:a7:
fa:71:55:0d:bf:4e:4e:11:78:45:eb:98:23:74:a1:
88:5f:51:e1:c7:22:f2:50:e1:d4:73:e0:0f:81:3d:
f1:32:a5:9b:34:77:8b:ae:f1:96:de:f2:3b:53:e4:
cb:9f:f4:f8:df:20:9c:66:5c:0c:2f:79:b9:20:31:
88:9f:d7:5a:f4:48:22:76:28:60:e0:b5:64:d1:7d:
a7:38:73:ed:8d:26:05:b0:e4:10:ce:2e:56:10:58:
20:ae:71:0d:42:cc:59:5b:42:ae:68:33:3f:af:54:
31:6e:82:19:89:1e:c3:60:b1:e8:cc:2d:7d:fe:c3:
94:9b:6b:c0:f8:29:40:af:32:f4:d7:e6:f1:e8:50:
67:09:8f:6a:99:fb:e4:03:07:98:4e:c2:d1:3b:b0:
8d:8e:11:83:95:df:60:7d:0b:29:10:c4:ae:98:2e:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2D:13:1B:BB:FD:6F:51:22:B3:6A:85:06:C8:47:66:5C:C9:9E:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ef9ace7-77f4-3c3f-ba7c-34e7b7c94c72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.214.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:ae:fb:e1:15:ad:b1:e2:a1:9f:50:e7:b6:97:24:bc:a0:ae:
e0:ef:39:43:e6:bd:ee:bc:7d:af:0e:4b:80:0f:de:6f:77:7b:
46:70:9b:c3:33:13:a4:74:f5:ce:f3:cc:8e:cf:fd:e5:84:a6:
8c:77:44:d0:55:82:8e:f1:f7:9a:7e:df:f2:75:fe:c3:7b:38:
1f:6c:76:5c:de:9c:b4:12:c1:49:78:38:c6:17:90:d5:ce:ad:
31:de:f1:07:ca:e6:30:88:36:b0:a1:c8:fe:c8:ed:50:4d:1c:
97:d2:e2:2b:23:aa:ac:c9:a4:69:b3:09:95:78:59:31:f8:e6:
b9:2b:31:e7:99:d3:d7:05:2c:11:34:69:2e:05:ec:74:b7:e7:
ee:4f:e2:f7:7c:0b:bc:7f:3e:41:d0:58:5e:1d:30:a3:c3:de:
6b:64:a7:ce:f3:4b:f6:21:2b:9b:a8:5b:ba:59:10:52:02:34:
90:e5:9f:b6:12:8f:9f:d2:58:c5:64:9d:33:82:ce:4e:ed:a4:
97:7f:be:dd:38:70:a7:0a:5b:00:6f:48:9e:f7:67:95:89:aa:
05:c6:40:43:65:7b:2a:b9:a5:5d:02:ea:6c:be:69:32:93:a3:
e3:ea:5e:7e:96:8f:ff:2e:13:3d:6d:d4:c4:61:ef:50:55:8a:
2d:d5:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:26 2025 by rpki-client