Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6bafb6f6-fcd0-3c56-a077-3ca4acbd9132.roa
File: 6bafb6f6-fcd0-3c56-a077-3ca4acbd9132.roa (raw, json)
Hash identifier: OqeW5j+96k17aJpDvLX8jpCalav3pFIDU3mQyuodFX0=
Subject key identifier: 70:51:5B:4F:48:7C:CB:AF:63:96:80:EE:21:02:88:12:55:FF:D8:F4
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848F65BDD221B310BDC06BE3120
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6bafb6f6-fcd0-3c56-a077-3ca4acbd9132.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 396982
IP address blocks: 208.127.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:dd:22:1b:31:0b:dc:06:be:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=84247fd0-d0f1-4460-a323-4c15f1cd6fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2d:da:24:50:c9:21:90:39:c6:2f:76:14:63:
3c:9b:b4:c0:77:0e:40:02:78:83:6d:e6:5b:53:a2:
ea:54:59:36:aa:cf:a0:5f:93:66:f9:78:8d:59:1e:
cf:81:5f:10:6a:3c:ed:47:24:10:bb:2a:05:5d:8b:
87:e8:1b:3e:0d:6e:35:ca:b7:6c:51:5a:28:a5:63:
8c:f2:ff:e1:8a:79:74:73:72:a3:66:b5:32:b8:cb:
a4:bc:37:b2:d9:e4:4d:11:a1:98:19:0c:83:0d:20:
d3:b3:d5:72:59:25:a1:90:96:12:9f:45:a7:6d:bd:
00:5c:6e:c9:e1:dc:4a:13:43:12:79:15:be:6f:36:
7c:cc:14:cd:ad:d1:dc:0f:0b:72:af:f7:3f:d0:26:
45:1e:51:1f:ba:01:41:b7:cd:d3:4b:95:b4:e5:f8:
76:08:13:d5:30:01:18:37:3e:a0:64:c2:ee:3a:0b:
ad:57:d0:06:31:8a:68:b8:d4:41:d3:c6:5a:2e:29:
94:aa:ee:67:61:29:c3:b8:99:7c:14:64:87:36:55:
85:ba:be:22:0c:62:e0:26:1e:44:ed:7d:63:20:bd:
50:26:e5:17:95:12:f1:31:5b:a2:20:83:f5:bc:ab:
79:af:a5:5e:d6:ec:fc:a7:33:1c:02:02:d6:5c:c9:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:5B:4F:48:7C:CB:AF:63:96:80:EE:21:02:88:12:55:FF:D8:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/6bafb6f6-fcd0-3c56-a077-3ca4acbd9132.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
208.127.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:cd:29:82:24:fe:d8:d1:c5:8c:0a:75:85:c0:1b:b6:fd:19:
cc:c9:e7:af:ba:97:e2:ad:46:ca:ed:4e:2a:7f:71:f0:92:5a:
ce:05:7a:29:56:78:9a:d4:c2:a9:2f:91:54:c9:a0:f3:bd:fa:
ee:02:04:ec:48:85:06:5a:a9:29:b5:d5:2d:21:a5:14:43:24:
a3:07:18:db:2b:5f:70:03:10:f1:b7:3f:f1:64:ac:66:38:75:
70:3b:09:58:ce:be:27:1f:98:47:38:e9:9e:61:55:5f:31:96:
2f:f5:00:26:00:12:b9:59:7d:b3:9a:4a:f1:6e:7f:19:c2:ef:
03:24:67:48:68:04:af:44:07:f4:2b:0f:14:28:14:cf:32:4b:
fd:89:dd:a4:5e:41:a4:d4:c9:cd:59:2c:4d:b7:3c:36:ef:c5:
af:2c:c3:8f:e7:84:0e:a5:6e:5c:6c:01:d0:f2:58:6b:be:b5:
40:54:70:8a:26:1a:7c:57:5d:14:b3:05:97:4d:39:ad:46:0a:
ea:e3:68:a2:7a:1e:d7:70:9f:de:c5:22:1f:b0:13:b7:d0:f0:
d3:f2:cf:52:8e:43:5a:a7:66:d0:e2:8e:92:7e:9a:62:d9:37:
b8:78:b8:99:00:d1:cc:40:e9:86:43:d9:9e:c1:8a:ab:cc:4e:
3a:9c:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:59:58 2025 by rpki-client