Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa
File: d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa (raw, json)
Hash identifier: 8l8ULzbswM+DlAY8n1ORmlnWojAs3vpEtD2Ljh7Xbl4=
Subject key identifier: F0:7E:8F:ED:F3:2A:91:FF:26:10:0C:E5:9D:DA:04:41:09:45:E1:4A
Certificate issuer: /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial: 010D0C9F432858491D717946C0029CE08AEEDB00
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 27742
IP address blocks: 208.96.128.0/21 maxlen: 24
208.96.136.0/22 maxlen: 24
209.124.100.0/23 maxlen: 24
209.124.105.0/24 maxlen: 24
209.124.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:79:46:c0:02:9c:e0:8a:ee:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=0d8c0c9d-5e78-4c41-9f37-f9e3c5db196b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:92:66:dc:ed:49:a6:cf:0c:c2:4e:3c:ad:
c8:50:83:f4:cf:c5:d4:20:37:c3:45:24:0d:2a:c2:
1f:4c:02:c1:6a:b5:61:d3:19:d7:5b:69:de:f3:41:
1c:de:cc:2b:00:79:88:67:2f:3b:7a:de:f7:f0:82:
91:64:ae:07:d6:a3:d4:f4:7f:d0:b3:99:e7:1a:05:
af:50:dd:9f:81:be:ff:71:03:c8:bc:9f:7c:e0:0c:
74:90:05:b8:65:f5:21:6b:ae:8c:71:2d:ef:d3:82:
f9:71:2d:84:72:fa:46:db:a3:28:0c:41:f5:19:c7:
7c:c2:d8:c5:ce:36:e1:b1:9b:7b:d5:4a:ef:88:63:
b8:79:f6:54:11:58:6e:8c:0a:26:76:a7:12:68:56:
1b:84:75:6c:b2:49:bc:b3:8e:90:6f:3e:2c:78:60:
cc:3c:b4:bf:71:3c:9b:4e:c3:d1:bd:dc:50:61:d5:
d3:0d:53:7c:65:b8:e9:f5:03:f4:4f:59:94:91:0c:
c0:4f:17:2a:37:83:ba:48:0c:1c:83:12:f2:26:83:
57:25:42:20:a2:0d:29:5b:26:1c:93:af:0e:b5:4e:
9b:39:95:c3:69:8b:fa:a9:15:3c:a9:db:e4:60:79:
76:be:b5:45:b3:a7:01:9a:2f:77:f1:55:e4:82:ca:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7E:8F:ED:F3:2A:91:FF:26:10:0C:E5:9D:DA:04:41:09:45:E1:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/d9267840-74ce-3a72-81c9-8d2037a7bbc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
X509v3 Authority Key Identifier:
keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
sbgp-ipAddrBlock: critical
IPv4:
208.96.128.0-208.96.139.255
209.124.100.0/23
209.124.105.0-209.124.107.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:68:db:84:38:5a:ce:b4:6f:64:75:e0:19:af:5b:f7:c3:84:
44:cd:3d:cb:4c:14:04:e2:f5:1d:14:35:a4:1f:42:72:4d:b1:
74:17:94:9f:ef:2e:dd:eb:34:8b:f8:eb:ac:bd:07:d3:5e:46:
02:60:64:49:75:86:4c:e5:71:2e:5d:39:a0:f3:02:5e:cf:78:
73:ae:48:8f:45:cb:87:74:89:73:f3:32:23:b0:c8:02:70:f6:
c0:59:3e:86:91:4e:99:59:3a:9a:88:b2:88:6b:c1:47:a1:6a:
ee:a4:c2:ae:e3:ce:f8:6e:2d:fc:e8:cf:66:30:31:b6:ac:a0:
3b:84:51:cb:1a:c6:ea:d4:a1:cd:d9:8e:c1:7d:03:77:97:fa:
ef:81:3d:86:4a:40:83:66:31:36:c0:03:05:4c:e2:46:59:87:
2b:3c:0b:79:8a:58:64:8c:5c:f8:eb:b7:68:67:6b:ad:51:67:
d7:80:a7:61:82:ac:b4:4c:e4:aa:c4:2d:fb:ec:bf:9a:79:85:
19:b8:a2:71:c4:fa:4d:e7:f0:24:5f:ed:22:eb:cc:84:86:93:
7d:70:97:2a:43:dc:e6:0f:71:81:77:cd:ee:b4:2c:d4:59:24:
c8:0c:06:7a:f5:bb:ce:e3:74:8b:8b:5d:a6:17:45:29:34:41:
24:4e:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:04 2025 by rpki-client