Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa
File: 3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa (raw, json)
Hash identifier: pAN2dS/Ycrow2y1QXoCocW8XmMQvJqHw84Bk8ECbkw0=
Subject key identifier: A4:A4:9B:6D:66:36:08:B0:FF:DF:F7:0F:13:4F:E3:FF:E6:C6:FF:4B
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848F65BE2A876D9135F77CD7480
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 396982
IP address blocks: 208.127.208.0/20 maxlen: 24
208.127.224.0/21 maxlen: 24
208.127.232.0/21 maxlen: 24
208.127.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e2:a8:76:d9:13:5f:77:cd:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=08423c31-5d61-46b6-820c-77f17aa45896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:1c:7c:f0:7d:a1:90:18:0f:55:72:5d:c5:
38:4d:11:94:f1:5e:ac:3d:72:e7:bb:36:a9:f9:26:
9d:17:48:4d:8f:e9:2c:34:56:68:2b:77:46:2c:af:
d5:cb:6c:9f:2b:35:24:c0:8a:89:38:9b:44:e6:09:
88:dd:f6:bd:86:3f:8e:b1:00:d5:fa:6d:9e:15:33:
31:ea:83:eb:e0:f7:cc:03:d4:d0:91:b7:48:d5:be:
75:cd:a0:5d:b8:ce:71:53:20:87:22:e4:63:fd:fd:
c3:0f:40:72:ca:25:86:f6:35:4d:6d:61:9c:58:f2:
16:5b:56:a9:f0:ed:b7:d9:f7:9f:4a:94:76:27:3f:
95:81:d1:a8:ee:82:a5:a2:b5:4c:06:0d:f9:82:8f:
fb:e1:5b:16:13:04:ca:ce:7e:e0:f1:5a:ac:09:f3:
da:2b:0b:3d:50:62:0d:e2:bc:a6:16:bd:4f:f6:06:
87:a4:48:74:84:54:ab:49:09:ca:bb:af:27:d9:2c:
2f:ef:09:f5:70:39:8e:9a:7b:0e:2c:d7:31:9f:a6:
27:0a:89:5e:a5:2e:8b:dd:bb:cf:0a:db:08:72:74:
5b:7c:6b:de:f6:5a:f9:bc:4f:29:dd:2f:d8:fe:29:
07:f6:97:57:76:8d:35:e0:f1:69:4e:89:45:b1:65:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A4:9B:6D:66:36:08:B0:FF:DF:F7:0F:13:4F:E3:FF:E6:C6:FF:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/3ce9aa87-5522-32de-9ce3-b9b8d5ce6635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.127.208.0-208.127.247.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:35:06:14:cc:76:4d:a0:98:46:bf:f7:e5:ff:9e:2a:70:26:
a5:6e:cd:87:56:3a:77:c4:4e:66:2e:c9:9c:00:46:3f:c2:26:
54:20:5c:4a:a7:35:fb:36:93:cf:ad:0c:44:40:43:bf:15:ba:
bf:38:d3:55:dc:98:66:91:6e:6b:8b:82:b7:ac:1c:b4:3d:a7:
82:5e:f6:1b:9c:69:87:d4:b2:88:af:03:90:69:e7:47:b7:18:
ab:42:db:90:36:5f:db:7b:ef:72:c0:60:7c:84:a3:d6:c9:27:
1b:a1:94:cb:0a:ec:f4:3f:46:0e:b7:ab:86:57:57:eb:70:44:
8c:61:e4:39:63:0b:73:05:e1:18:fe:71:a2:4d:2c:7b:08:58:
24:81:be:a0:84:93:fa:f9:28:57:24:9d:c2:9e:39:ab:61:68:
d6:2e:8d:bf:4a:d9:20:a9:7c:be:b6:b1:69:ba:bb:05:ff:3d:
f3:0b:7d:8f:8d:25:73:e1:ff:12:79:50:e1:a9:72:b6:20:79:
98:ed:9d:45:90:ad:65:b9:2a:4b:10:10:63:cc:a5:0d:fd:12:
27:43:6a:62:65:83:5d:97:07:38:82:fe:7f:9a:1b:f2:41:4e:
5a:d5:20:7c:e5:58:d4:97:34:0f:b2:9e:9a:0f:56:b8:9a:2a:
1b:28:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:50 2025 by rpki-client