Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa
File: 4abcb4fa-f6d5-3038-aab9-f1da35524331.roa (raw, json)
Hash identifier: fcMMjPKrlFitLMqSAfJjRF2Qx162MGQ6JdvinItw48s=
Subject key identifier: BB:D2:7B:39:72:CC:7D:66:C4:38:FD:F8:0A:78:3C:AC:36:E8:D3:6D
Certificate issuer: /CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Certificate serial: 010D0C9F432858494733D7C3C3022FD4BCD5A380
Authority key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 20119
IP address blocks: 144.208.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:d7:c3:c3:02:2f:d4:bc:d5:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=02d804ed-6ba6-4e27-8d63-a12a6af8c55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:c5:93:52:9e:3f:b2:ce:52:6f:9c:54:9f:
9f:8c:32:c3:9c:05:09:86:54:4c:d3:3f:10:14:16:
34:d7:b9:15:38:18:9c:8b:ec:90:7c:b3:ca:b9:c9:
85:c5:c0:a6:69:48:6f:38:52:42:f1:aa:3b:21:50:
5b:4d:f5:e4:15:6c:dd:2e:7a:c4:78:35:1a:4c:21:
d6:e2:00:9b:94:4d:2f:88:02:63:4a:1c:19:77:ac:
1f:fd:ca:97:c8:4b:d3:51:36:b6:27:92:f9:62:56:
54:a0:d4:cc:e9:42:a5:5e:2c:34:d6:81:f7:81:92:
8a:83:22:30:cc:2d:f6:24:7b:a5:32:c4:66:ab:4e:
80:4e:5d:f0:2d:58:d5:26:bf:98:28:9c:79:e4:a0:
92:91:8b:4d:9a:06:22:20:19:a7:4b:18:2b:03:58:
86:14:38:a6:70:fd:aa:d9:ec:71:2e:36:e5:6c:cc:
67:29:30:25:17:6b:be:1b:0b:5f:92:f0:68:50:b9:
00:80:6c:b6:3c:20:77:57:27:a6:69:d2:c6:6d:d4:
aa:5c:25:3a:aa:f5:de:0b:86:e6:76:22:a5:e8:8b:
07:e3:ac:05:a0:a2:0f:b2:f8:94:5d:b2:10:c3:ed:
49:98:f3:bf:1f:63:07:17:47:5a:7a:4c:09:1f:b2:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:7B:39:72:CC:7D:66:C4:38:FD:F8:0A:78:3C:AC:36:E8:D3:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl
X509v3 Authority Key Identifier:
keyid:77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
sbgp-ipAddrBlock: critical
IPv4:
144.208.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:49:80:3c:a5:c9:01:18:7c:7c:5f:90:fc:43:32:0b:83:6c:
17:d3:c4:88:9b:a4:fb:f9:be:a1:5b:8e:ab:6c:08:8f:c6:82:
3a:81:ed:86:42:ea:cd:5d:ce:36:3b:0f:f0:6d:35:51:3d:71:
13:9f:b4:30:9c:1a:17:96:0f:fd:09:40:4a:5f:9c:a9:e2:61:
70:6f:e3:05:af:ac:8e:a2:84:8b:59:4d:44:53:7f:20:3b:69:
9a:3a:f3:53:6c:81:1e:94:6b:81:d6:9c:dc:24:8f:83:29:ee:
79:e4:0c:2a:9d:d2:99:22:82:12:78:7b:0f:c9:89:1e:31:da:
4c:43:ed:d5:c9:fc:f2:70:e6:5c:3b:bf:2f:bf:94:f8:a9:2f:
26:4a:b7:33:bb:ac:a0:eb:b8:a1:8f:4a:1b:2b:0a:cc:c9:f7:
eb:4c:36:7a:22:48:27:de:e1:96:e3:38:b5:b1:93:67:8b:aa:
5c:5d:8e:03:9d:65:36:d9:c5:b7:e7:f2:28:22:a5:59:fc:74:
9c:a2:99:11:66:ab:6b:60:13:dc:bf:cf:84:54:00:64:37:3d:
da:4c:7f:49:08:b2:09:c5:70:e7:c6:fa:ca:c8:e2:1b:71:42:
ce:e0:87:c0:12:93:6c:66:8a:db:45:ef:57:47:bf:b7:aa:85:
43:6e:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:57 2025 by rpki-client