Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa
File: c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa (raw, json)
Hash identifier: J/BJbB8CCtHK+emR2fZIWKogTf+Q5iBsLNKuFRxyQUg=
Subject key identifier: 42:46:70:B5:58:E7:71:82:57:96:83:10:2D:D2:0D:94:53:0F:90:2D
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F432858487B85B29C690F56E022936B00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 3561
IP address blocks: 208.166.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b2:9c:69:0f:56:e0:22:93:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=883c8613-3c8e-41da-b1a7-0ba450c1a8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:b9:8e:48:8d:c5:b5:65:8a:bc:13:14:6d:
cd:cb:63:5a:1f:08:af:fe:20:93:41:b7:23:0f:9f:
1a:58:7a:2a:b7:38:74:74:e9:b6:c2:9a:24:ff:80:
3c:89:66:46:68:a2:7f:3c:d8:26:5f:18:83:c6:2d:
f6:fb:b5:56:30:21:b6:be:d8:89:9f:82:e5:67:89:
c4:34:bd:c5:88:57:b3:a2:7b:d4:fe:14:ae:61:ee:
a6:4b:81:1a:67:74:61:15:34:90:64:9e:79:66:fa:
00:e0:26:b8:f2:f8:6a:89:55:39:ae:d9:c9:fe:a0:
b7:84:15:59:fb:51:80:f2:a3:ec:2f:fa:95:6a:6a:
91:79:46:65:a8:00:44:5b:bd:62:0d:52:96:c8:40:
59:64:9c:2a:4a:a9:a5:88:d9:78:ea:30:a9:eb:8d:
ca:7a:3f:84:6f:ba:fa:10:ae:b6:f1:bf:b2:f8:2b:
07:70:1a:50:7e:42:d4:f7:78:de:54:69:24:56:88:
e3:2d:4a:77:ce:11:43:db:16:62:5f:b7:3f:71:9c:
c9:84:66:30:e6:7a:79:b2:ab:c5:5a:ac:ec:29:11:
51:1f:fc:79:63:56:8d:86:76:6e:c0:58:db:ef:a9:
fb:f0:0a:71:5a:15:5f:a4:bb:6e:30:e0:5a:42:0a:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:70:B5:58:E7:71:82:57:96:83:10:2D:D2:0D:94:53:0F:90:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
208.166.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:32:18:e5:74:89:de:6e:91:49:26:9f:f5:9a:1b:4c:6f:dd:
30:e7:30:f5:33:71:39:c0:dd:c8:96:23:5f:4e:3b:8c:b5:6d:
24:6e:16:15:f3:07:4f:bf:0e:ec:f4:90:b0:13:9a:30:06:3e:
16:b9:7b:dd:81:75:9b:55:25:65:d7:cf:41:73:20:11:e9:ba:
3a:4d:94:2b:5e:2a:6a:ae:1d:00:71:2c:bd:23:0a:ff:38:a6:
f4:db:ee:31:9c:13:b7:db:e5:36:cc:f1:a2:97:a7:8d:fa:a3:
94:47:6b:bb:30:64:04:61:17:86:21:7d:0a:c2:30:c8:01:3d:
24:49:86:23:5f:dc:9f:c3:27:b9:ad:b0:5c:df:2f:72:56:64:
29:09:91:4f:3f:d0:7d:37:91:f4:b1:a0:e6:1a:03:bc:89:7c:
b9:b1:a2:15:ab:40:91:39:04:15:65:8c:3e:4e:47:10:6c:32:
dc:dc:e5:c9:c4:35:28:28:00:87:56:d0:d1:4c:06:8b:23:fd:
ed:ec:84:6f:61:68:78:db:27:8c:fa:20:bb:d9:ea:2f:c5:7b:
8d:e8:ea:a9:70:1c:01:ce:a8:92:2e:9f:a8:7d:21:c6:54:26:
e3:bf:ed:12:0d:5e:ce:a4:2b:61:07:a1:1e:69:25:d3:5d:b7:
78:4c:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:18 2025 by rpki-client