Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
File: d4129661-2570-39b6-8a42-e8a60bf56818.roa (raw, json)
Hash identifier: xnubDDDJVtGnKRsv3fy4O15NLsMTw1VRYdDs4WntP0E=
Subject key identifier: 1C:37:8E:64:31:40:B1:7C:1E:2A:5A:DF:EA:8C:AD:99:D0:8B:71:47
Certificate issuer: /CN=fe8b65a3-820c-495e-8142-f185c536467c
Certificate serial: 010D0C9F432858493ED3CD7F7EA490C45A68B5C0
Authority key identifier: C9:DA:C4:3E:33:C9:7C:A7:7E:13:91:75:9B:C6:CF:D0:04:C8:D4:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 8075
IP address blocks: 208.80.20.0/24 maxlen: 24
208.80.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:cd:7f:7e:a4:90:c4:5a:68:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b65a3-820c-495e-8142-f185c536467c
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=8eb347a7-7fae-403b-91b8-30dac8276c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:44:4c:cb:d0:c9:88:da:d5:9d:d5:1b:f0:
3b:dc:7c:94:67:75:2a:db:31:64:fa:8a:77:b6:e2:
c9:b8:f6:1a:a9:8f:cd:c5:a7:41:39:70:5b:0f:24:
8c:e6:f9:8f:2e:63:cb:23:8d:21:7c:ef:83:2f:7a:
93:e3:5d:81:d3:4c:82:c2:b9:e2:5a:7a:a1:5c:8f:
f9:f8:8d:cf:34:52:f4:cc:eb:85:7d:ed:2f:70:fd:
c6:be:6d:ad:8d:2c:83:87:af:0a:ba:fe:5c:f7:45:
e6:b2:f8:ec:03:ac:54:4c:62:7e:5a:a5:08:94:51:
77:cb:52:d2:20:9b:1b:fc:71:cd:6b:dd:f7:99:41:
e1:8b:ee:fa:d9:81:f1:f9:41:ab:6c:21:db:66:0a:
6f:98:49:16:a6:c4:e5:97:76:a1:bf:cc:26:e7:1c:
39:7e:d6:24:a9:1b:ae:bc:5e:71:fc:9b:4a:37:d0:
61:d3:ed:13:29:d1:30:98:a2:89:07:07:94:6b:c5:
6b:3f:0a:54:99:98:75:6f:0f:2f:5e:15:e9:ed:d9:
f5:c9:7d:b2:5a:46:81:f7:6b:be:81:be:10:de:70:
a3:a8:37:0b:f0:09:8b:fd:25:7a:c4:af:a1:6e:55:
46:46:e6:24:39:1c:d9:a0:20:d6:3d:86:6d:5b:bf:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:37:8E:64:31:40:B1:7C:1E:2A:5A:DF:EA:8C:AD:99:D0:8B:71:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/fe8b65a3-820c-495e-8142-f185c536467c.crl
X509v3 Authority Key Identifier:
keyid:C9:DA:C4:3E:33:C9:7C:A7:7E:13:91:75:9B:C6:CF:D0:04:C8:D4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer
sbgp-ipAddrBlock: critical
IPv4:
208.80.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:20:3c:26:53:d5:d0:e0:f0:ac:80:c3:f0:88:20:ac:09:b7:
6e:0a:86:ce:bf:62:38:a7:dc:06:4f:81:f8:ea:33:98:9d:49:
ad:fc:c0:e0:47:fe:ab:64:bc:ea:24:34:fa:2c:03:95:33:a3:
e6:71:92:4b:ea:5c:6a:6c:bd:ee:3d:86:50:9e:ce:c1:ef:79:
e0:2f:d9:27:70:89:36:ff:80:7e:56:69:c0:c3:47:8f:01:e1:
af:9c:45:11:c0:3c:5e:c2:dc:ec:a0:f0:fd:38:92:fe:ee:05:
4b:6f:6a:36:cc:8f:cb:7b:83:28:9a:30:b4:19:a8:8c:3b:1c:
93:a0:32:c6:4d:f8:2e:71:94:ed:db:50:6b:89:c9:80:5b:42:
89:99:9a:35:ba:37:6e:27:e1:97:9b:88:a1:d3:e7:db:47:a5:
c3:4b:cf:fc:93:34:b3:f6:36:c2:26:f8:64:ee:67:4a:29:d2:
e3:b4:25:d5:85:1a:80:9f:62:53:e0:5b:ca:51:70:55:83:9d:
41:88:f8:bd:bc:26:c0:e3:12:27:49:1b:ab:50:f0:8e:58:a8:
ab:07:1a:9c:f3:d7:93:30:b5:a1:eb:9f:a0:04:9c:bc:29:4d:
1f:f9:e7:dd:71:c3:34:c9:94:0e:5a:0d:7b:4d:4b:07:e4:26:
7c:d2:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:08 2025 by rpki-client