Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa
File: 6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa (raw, json)
Hash identifier: wP9MXWJMkNQZSvMN7AngD5uemFBcyRHQ4l8N9ErLlm0=
Subject key identifier: 81:72:4E:C5:E3:9B:DF:AE:C3:5A:30:04:33:C5:4D:47:A5:3F:3A:E5
Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial: 010D0C9F4328584950F9604460C5079F91D030D2
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 46432
IP address blocks: 208.88.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:60:44:60:c5:07:9f:91:d0:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=af2cec98-066b-487d-a010-cdbe09d55677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:45:15:5f:ae:57:f0:da:51:8e:9c:49:e7:86:
12:21:85:13:db:af:a6:d8:26:1b:df:34:f2:5a:a5:
d6:57:83:88:a0:c8:a4:ca:a7:4f:89:ad:e2:ce:db:
d1:d0:aa:93:e3:83:2d:2f:3c:61:05:73:c2:06:83:
6e:df:64:22:ac:b1:dc:21:f3:f2:3c:5f:72:a8:d0:
75:54:0a:d1:d0:1e:39:21:fc:f9:d0:4b:49:0d:bd:
ef:6b:d5:42:7d:39:a1:35:46:dc:be:19:1b:ae:54:
3a:23:8e:c0:5e:4a:24:59:96:cb:54:43:22:d8:85:
f4:ca:8d:76:c8:bc:db:b5:2c:b7:81:2c:12:34:32:
cf:9b:b3:4d:a3:97:44:03:0d:c7:28:94:4e:17:a8:
aa:e1:36:e8:43:7e:5d:4c:dc:30:f4:6d:34:41:ff:
a5:33:d3:d8:f7:7b:e5:0b:c7:0c:16:cb:9d:ba:2c:
21:85:29:37:f1:f8:06:60:e4:31:d2:31:e6:76:de:
db:d3:a8:6f:8e:09:61:74:89:5d:05:db:35:73:4d:
6b:82:93:27:95:20:b6:45:d1:83:d4:40:f9:3e:d6:
ae:bc:67:9b:9d:82:74:25:50:46:5d:84:0f:71:34:
5b:be:4d:d0:4f:d7:93:4e:fa:be:06:e8:e6:77:b6:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:72:4E:C5:E3:9B:DF:AE:C3:5A:30:04:33:C5:4D:47:A5:3F:3A:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
X509v3 Authority Key Identifier:
keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:51:5e:32:08:49:3c:0b:33:ba:46:31:3b:b6:79:a6:18:c5:
8e:b5:b6:22:c7:88:92:2b:8c:8c:4f:27:12:71:5a:69:71:0b:
27:ec:61:a7:09:da:93:2f:c3:2b:d0:b7:77:da:5e:87:e5:3a:
6f:d0:f0:4e:df:f4:ff:a4:93:0e:aa:99:b5:ee:0e:03:69:5f:
ce:1d:4b:43:8a:3c:e8:53:77:0b:66:90:46:29:2d:70:80:9d:
15:59:11:83:99:28:fc:9b:05:39:a9:35:af:d2:e6:bd:27:55:
7d:c1:ea:7e:e6:a2:10:47:68:4f:cc:4c:b1:76:d6:81:d4:f8:
47:c2:09:66:4f:5c:8b:eb:a4:ec:5e:de:96:4f:f3:05:43:fc:
4f:ed:e9:cc:14:17:59:66:8f:f3:f9:d0:63:95:3e:d7:20:fe:
89:c8:ca:3f:2c:83:31:d6:38:6c:cd:ff:1d:b2:0d:92:c2:36:
d0:6b:ec:83:d2:f8:d4:40:95:bb:f6:2d:1c:46:19:34:27:ca:
a9:b6:b1:3a:78:3c:a7:d5:32:c6:75:00:37:02:68:23:4c:39:
31:b8:4e:46:25:be:cf:1f:4a:36:87:86:1a:5b:62:18:89:e5:
0f:6a:6c:d0:1e:4f:c5:9f:51:44:08:65:95:25:b0:9b:cd:0d:
45:22:7a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:05 2025 by rpki-client