Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1f48e073-6e9a-3a08-828d-3cd18bc3564b.roa
File: 1f48e073-6e9a-3a08-828d-3cd18bc3564b.roa (raw, json)
Hash identifier: bCT8625Aqs0vM76cLQ9t2X5ZwdkXjGQaIKY2u0QzxVc=
Subject key identifier: DA:3D:80:EC:B6:A4:B0:2D:F9:07:B7:0F:FF:A7:5F:0A:C5:B6:65:3A
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F432858494B640387FCF57357DA015B00
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1f48e073-6e9a-3a08-828d-3cd18bc3564b.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 398109
IP address blocks: 208.109.139.0/24 maxlen: 24
208.109.140.0/24 maxlen: 24
2603:4:1014::/48 maxlen: 48
2603:4:1015::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:03:87:fc:f5:73:57:da:01:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=5e6b58ed-5ec1-4ba5-9be7-278e2c82875f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9a:7d:52:f3:f5:1d:a9:e0:30:0f:79:ce:26:
8a:88:9b:d9:f1:e4:11:da:0d:e1:3f:d7:1d:67:10:
a6:fd:11:34:41:f0:9d:84:22:d8:1f:94:ce:aa:20:
d6:3d:15:23:bc:b6:22:9f:7f:9b:9a:28:95:da:94:
4d:91:6a:fa:58:a3:22:c2:96:d6:51:b8:35:9b:1a:
40:b6:24:0d:ed:0f:56:8a:b5:90:7b:0c:97:68:06:
a7:46:54:c6:aa:b1:8e:86:6c:20:da:95:95:04:3c:
c8:aa:57:cb:c1:34:93:45:30:97:ae:14:7f:15:27:
71:61:1c:84:0d:4d:3c:2e:3d:66:dc:95:f5:2c:77:
55:49:a6:67:db:4e:26:ea:9e:42:1a:d2:a0:dc:af:
90:32:21:c8:f7:53:0d:0c:7d:12:00:bd:03:f4:8a:
6f:ca:71:ba:49:45:16:aa:46:cd:4b:ed:d7:9d:28:
ff:e6:fa:54:20:df:6f:35:bd:48:56:a3:1b:ea:c2:
b0:18:a3:d1:54:67:6a:74:2c:7f:45:bf:3a:57:ce:
bb:9d:c3:b1:c5:46:42:a6:f1:55:d3:15:42:f2:61:
a3:2e:a3:a7:ba:1e:66:c1:e1:05:74:a3:12:c2:f7:
94:a6:0e:9d:7b:73:b2:d7:34:8d:d0:90:ee:ad:fb:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:80:EC:B6:A4:B0:2D:F9:07:B7:0F:FF:A7:5F:0A:C5:B6:65:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/1f48e073-6e9a-3a08-828d-3cd18bc3564b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.109.139.0-208.109.140.255
IPv6:
2603:4:1014::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:5e:91:a8:95:43:63:c9:1e:ce:11:92:07:b3:e5:15:73:7d:
a4:bb:e3:87:d9:68:57:d8:4a:90:56:77:97:2e:fd:b8:2a:a0:
03:9d:83:94:7a:25:21:44:20:ad:cc:70:87:98:bf:e3:39:e3:
34:20:81:ae:28:be:53:85:fd:28:65:7a:81:84:20:11:82:00:
6f:68:f7:fb:3a:80:62:65:55:03:49:0e:17:2d:5e:cf:0d:ab:
19:ce:1b:01:cf:16:c4:8c:99:1a:e6:06:8b:c8:41:92:1e:72:
c9:c9:ff:65:2d:c3:67:f9:18:54:4a:bc:14:57:ec:d4:e3:a5:
a9:ea:66:f9:77:ae:10:bf:b7:1f:84:55:04:7d:c1:f9:02:6b:
bc:b4:fc:ed:9c:6e:e7:24:4f:85:95:0a:2e:68:3c:a7:62:f0:
da:d7:d0:26:04:ff:16:a9:0d:82:f4:42:8f:a8:aa:4e:bf:03:
99:3f:b1:2a:56:ca:23:29:5d:f3:e5:a5:c7:ab:d2:92:40:5a:
da:af:3a:51:88:3d:a9:63:fc:a1:b5:bb:4b:ce:6c:3d:e3:12:
a5:97:b7:d7:58:c5:df:c9:b9:1d:6c:ca:32:42:8f:c5:cb:91:
e9:d8:68:9f:4c:28:3f:cf:60:36:3d:8c:d6:dc:e8:2b:37:41:
44:cb:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:54 2025 by rpki-client