Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa
File: 8a1ae401-360b-32d6-aa65-fa628237cb11.roa (raw, json)
Hash identifier: nLaiSJ4XKyGMPWKf+tnJKdPDEsmJAlZkqmAqFf5S3Qs=
Subject key identifier: 86:A2:EC:B9:F8:C0:FF:65:18:36:66:75:97:47:57:67:86:F0:0B:5A
Certificate issuer: /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial: 010D0C9F43285848F926AC8848016BC534B77380
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 22438
IP address blocks: 208.83.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:ac:88:48:01:6b:c5:34:b7:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=4bb30569-acdb-4c02-9844-a7d1e380b930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:ee:e7:02:7d:08:ac:51:15:e2:cc:1d:d6:
a2:ff:f7:f5:37:53:13:a3:8d:15:ff:7a:b1:5e:dc:
90:a3:31:eb:bf:ea:21:72:ad:b7:a8:71:d5:75:82:
a9:bb:4e:57:60:03:04:f5:35:d9:be:c9:53:52:15:
b1:80:6b:2a:4f:38:e0:24:6d:97:29:9f:23:06:dc:
a6:2a:ea:ab:e8:57:af:89:20:1b:a8:8f:bd:f3:ae:
a5:26:f2:d2:b2:b5:f7:f3:7b:f6:ed:b7:2e:b9:9a:
18:4d:1f:00:ab:1a:b5:31:17:e9:67:f2:14:64:56:
b8:c2:a5:12:0a:e9:be:04:f2:24:06:76:c4:91:c4:
f7:3b:a0:6a:91:ed:96:60:01:9d:05:9a:73:cb:f2:
1c:75:79:a9:3a:a9:3a:cf:a8:bc:59:3f:c7:4a:52:
15:26:3c:43:98:50:e5:ed:79:7e:a9:74:04:f5:32:
78:35:36:34:12:85:72:c9:d0:fb:a3:35:11:85:33:
c7:28:60:33:bd:c0:c2:b6:f4:5a:2e:63:22:c1:5b:
01:00:bb:6d:b7:b8:2e:d3:ac:09:20:18:ff:39:4e:
f2:fc:18:2e:70:02:15:09:db:cd:91:e1:37:8b:90:
45:a3:75:00:13:61:26:fd:ce:46:00:57:92:89:76:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A2:EC:B9:F8:C0:FF:65:18:36:66:75:97:47:57:67:86:F0:0B:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/8a1ae401-360b-32d6-aa65-fa628237cb11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
X509v3 Authority Key Identifier:
keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.83.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:61:d0:fe:64:6f:7b:29:03:d8:0a:8d:cc:8d:c0:10:3d:c9:
b1:32:a5:b5:5a:74:b6:2d:b4:4b:14:d9:f8:44:39:1d:07:60:
f4:b7:05:08:6b:39:98:9e:4a:ab:a4:8a:21:b4:2f:b0:08:35:
f6:86:79:92:b5:11:81:70:9b:4e:c3:4d:50:cf:8d:87:89:74:
6e:26:57:9f:7d:a5:e2:a6:a0:86:79:eb:3f:26:1e:ec:bb:86:
ae:95:fb:19:1e:18:86:6c:3e:85:2d:4e:22:f8:1c:1f:29:e0:
c6:33:44:96:cc:a1:5b:2a:a9:61:45:3a:f4:3d:c0:bb:f5:85:
c3:33:86:4a:1e:e6:af:50:7c:d4:52:1c:54:81:0a:f7:4d:39:
1d:c8:fd:0b:d4:5e:07:69:6e:0a:8d:34:1e:5d:e8:48:97:41:
95:bf:17:9a:0e:40:2b:95:11:51:cd:0b:79:bb:dd:9d:37:ca:
ee:cd:db:fe:cb:c4:69:ac:0d:83:f2:b2:8c:e2:87:5e:92:03:
2f:a4:3f:ed:17:29:cc:aa:fc:cc:8b:de:0a:a4:84:e8:32:3b:
cb:c2:45:94:7f:df:2a:38:64:7e:c1:6d:df:69:32:eb:0d:ec:
2f:32:94:17:0f:14:2f:c7:8e:a0:2b:f1:10:09:00:37:95:7e:
9c:50:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:45 2025 by rpki-client