Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa
File: 4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa (raw, json)
Hash identifier: rFCNMSCuMD8gv26iisDqw3Hyr3hCS2/2h13VwovNJ3M=
Subject key identifier: 92:FC:D9:F8:1A:EA:68:85:1C:C3:FF:54:FE:3A:FC:5A:7C:69:2E:96
Certificate issuer: /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial: 010D0C9F43285848F926A5B62C6B8D4E98262338
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 22438
IP address blocks: 208.90.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a5:b6:2c:6b:8d:4e:98:26:23:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=6d0db478-0e06-4ce6-b832-8acf6fd08051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:bf:05:73:3d:a3:51:2b:b8:c8:9d:5f:9c:
40:1c:12:0c:ea:ad:9a:75:46:33:5e:71:b8:b8:f4:
de:15:fa:76:1f:2e:78:a2:ee:64:08:0a:4f:81:97:
07:48:76:9b:f1:29:de:4c:2f:b3:c0:93:23:ef:84:
fc:63:b7:d0:a7:29:be:03:3a:09:4f:c7:90:35:b4:
86:a2:64:29:d9:32:e4:6e:c4:1a:9c:c3:da:d3:4e:
b5:63:f6:d2:cc:22:4b:ff:3a:80:72:21:97:91:32:
c5:ee:df:4c:72:28:8a:71:cf:ba:c5:8f:b9:c9:f0:
c1:d6:cb:37:9b:6e:f6:08:26:42:47:dd:2b:ed:62:
4f:36:81:8e:b4:a7:24:8c:7e:ad:ae:46:52:b2:cb:
bf:98:29:62:b0:41:da:89:66:02:52:93:ea:4d:49:
8e:df:9d:f7:0f:30:60:cc:b6:9d:45:39:11:b2:8e:
ec:26:65:5a:6e:ad:5d:d0:1a:ee:b1:3f:3a:cb:a3:
bb:d8:11:76:4b:4c:37:7f:c6:f0:01:45:d5:6d:bb:
b0:35:80:b1:c1:a9:c1:20:d6:9d:67:25:a4:b7:01:
d9:93:5f:38:7f:1e:0f:da:79:e5:38:48:17:17:d8:
48:3a:13:65:54:e1:c3:1e:e5:81:29:06:f6:c5:b6:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FC:D9:F8:1A:EA:68:85:1C:C3:FF:54:FE:3A:FC:5A:7C:69:2E:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
X509v3 Authority Key Identifier:
keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.90.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:b2:c8:1c:3a:a2:91:f7:69:30:d5:f6:91:0d:8c:4b:85:c0:
69:b8:69:c6:28:7b:2f:79:ed:ea:5e:73:47:c4:f1:0e:ad:fa:
4d:e5:00:b6:98:0c:64:3a:15:17:7e:45:e5:1c:10:45:b2:b5:
3e:43:76:d6:b6:aa:0e:46:79:fc:24:a5:8f:f4:49:ee:ea:0b:
f1:2c:65:20:40:15:67:05:ab:c4:5e:f3:4b:8c:28:3f:53:e4:
91:f7:8a:2d:33:8c:f2:03:5d:cf:34:33:c4:6d:05:7a:67:17:
c8:9e:82:48:c2:09:bf:ad:8c:98:8e:c5:95:5c:71:fd:2c:fa:
56:78:f7:32:90:79:01:87:85:0f:89:ac:0f:06:fd:1e:f0:00:
59:69:49:78:f0:6f:75:56:82:5c:cc:a4:b3:de:e2:cb:00:2e:
f2:9e:34:d3:54:de:57:ab:ba:12:07:c2:31:05:f3:f7:da:38:
f0:c4:c2:28:cd:80:3c:84:9d:05:6d:9c:2f:ee:c2:75:8a:5b:
10:db:40:88:89:d1:f2:44:a9:c3:bf:83:1b:c0:bf:aa:03:57:
33:1a:c9:98:a8:83:91:59:ac:d4:8d:ad:c7:15:05:23:c8:9c:
02:d5:0c:ff:86:8e:a2:97:21:9a:37:5b:6e:ee:01:55:c0:0d:
31:d2:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:34:05 2025 by rpki-client