Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/c3cc2b85-8c2e-306c-b469-266eeebbab15.roa
File: c3cc2b85-8c2e-306c-b469-266eeebbab15.roa (raw, json)
Hash identifier: ztjtu6ht5ldFJ9mmLymJCLB0BEVCpOk53DmMefFqxf0=
Subject key identifier: 8C:36:DB:ED:25:87:E4:C7:8E:FD:17:C7:24:FD:A2:D7:84:54:8C:86
Certificate issuer: /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
Certificate serial: 010D0C9F43285848A99622F88CBAFA176A880E00
Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/c3cc2b85-8c2e-306c-b469-266eeebbab15.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 396982
IP address blocks: 208.112.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:22:f8:8c:ba:fa:17:6a:88:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=0cc2bff3-3d1c-408c-8bcd-c45baf4adf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:88:1e:cd:27:90:ef:3a:bf:b6:26:07:bb:
83:45:aa:3c:c8:f0:b3:1e:84:e2:90:bf:d7:d9:70:
0e:a5:fc:60:fc:c0:f4:fe:82:7e:47:8b:df:58:99:
e3:67:b7:26:1b:4f:3e:78:b9:e2:c8:2c:65:89:7c:
7b:f3:92:aa:08:38:a0:e3:94:47:cf:96:1c:ca:4b:
74:7b:d3:a4:a3:8d:3c:54:ec:63:ec:fc:49:f9:0e:
f4:64:45:42:33:10:71:2b:f4:37:8a:67:60:cb:c6:
c9:4a:6a:3a:87:33:ed:85:d4:a2:c1:0a:89:f7:b2:
b8:48:9f:d0:b0:b2:48:28:7a:ad:0e:f7:41:e6:94:
9c:3f:40:69:69:a3:8f:d8:44:d6:6f:54:f7:f1:32:
50:e6:da:69:c2:f1:04:b7:a7:51:69:b0:a7:1d:6e:
45:aa:d8:bb:bb:2d:12:81:30:70:07:23:eb:61:3a:
30:e1:fd:12:e6:7d:38:91:ff:d3:25:da:74:0b:ae:
59:b1:3d:6f:74:cb:44:51:7d:95:41:7f:33:62:0e:
18:51:97:90:2e:dd:5d:0f:45:52:1b:e9:26:ec:fb:
f4:e1:ee:ab:29:99:80:de:b3:85:06:80:db:ec:8a:
4f:b8:28:fa:a7:19:66:83:4e:28:b7:0f:e5:ab:73:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:DB:ED:25:87:E4:C7:8E:FD:17:C7:24:FD:A2:D7:84:54:8C:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/c3cc2b85-8c2e-306c-b469-266eeebbab15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl
X509v3 Authority Key Identifier:
keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
sbgp-ipAddrBlock: critical
IPv4:
208.112.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:5b:6a:f1:02:2c:ca:07:79:80:6c:3a:1c:94:82:90:70:ec:
90:f8:57:e2:f2:79:14:1b:62:14:14:c0:96:36:e0:a9:1f:c1:
29:dc:86:3a:0f:57:2d:97:8a:7e:13:5d:79:89:91:91:9f:ef:
f6:00:1b:2b:46:8e:32:e5:29:bb:8c:73:f5:dd:7f:c6:b5:0c:
53:08:30:77:e7:be:3b:6d:46:59:6a:53:f9:d4:f6:ee:86:03:
fd:84:7a:7f:b4:c6:33:6c:e9:b7:50:b3:c8:1d:1e:b0:d0:80:
47:76:15:54:95:ca:d8:28:e9:e5:49:d9:1d:85:ba:a0:e8:4d:
78:e5:ba:62:52:44:33:4c:60:e3:52:cd:69:5b:05:0b:b4:44:
9c:0c:52:0a:05:49:65:cb:95:8e:b5:ff:f2:02:39:db:b4:f7:
b0:20:6a:3d:70:e2:ed:6c:b0:fe:a6:8e:86:ea:ad:0d:2e:f0:
ce:fc:14:4c:7d:be:ce:7e:56:46:57:cc:c6:ca:96:e7:26:34:
c3:a4:d7:a2:e6:fe:4a:c1:30:56:f1:e9:28:af:55:7a:25:d8:
d3:cd:8c:2c:22:63:b0:0c:08:d1:b7:ea:19:e7:f3:30:0f:3c:
dd:cf:fb:e9:ff:2c:37:58:c2:9f:95:65:1d:a4:5b:37:58:90:
69:4d:5c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:08 2025 by rpki-client