Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa
File: 6aa5ffe9-2c06-36ee-8129-d66c21390799.roa (raw, json)
Hash identifier: GafDimOKvySLLUP54wz6eF3EO6ekYEkODdlczdC5JBU=
Subject key identifier: 2D:B1:83:90:C4:15:74:51:0C:DB:2E:E8:38:EE:DA:6C:7C:95:0F:73
Certificate issuer: /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
Certificate serial: 010D0C9F4328584917DC023175CB50ED39721066
Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 26461
IP address blocks: 208.91.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:02:31:75:cb:50:ed:39:72:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=1b464750-a95a-42ed-ab73-259031777baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1c:1d:57:5b:28:ca:37:df:78:82:dd:03:49:
b7:ed:e1:06:1a:de:0c:49:9d:90:e9:53:9c:23:bc:
4b:89:ce:7b:bc:be:bc:1a:bd:b6:72:d7:e3:b0:ac:
8f:d2:fe:7d:18:76:06:9e:1e:64:b2:b5:da:d0:e6:
91:7f:c1:13:97:ec:79:fe:23:fc:80:29:32:28:2b:
f6:ec:ba:04:8e:6a:05:51:b2:0b:3d:64:2f:fd:1e:
23:5d:6e:99:1d:25:69:77:cc:e9:7c:e9:0f:7b:4a:
a3:e6:bf:13:fa:1e:76:f3:41:c4:77:94:fb:82:c9:
43:7f:af:ae:bb:71:5d:22:85:10:04:5d:c7:02:f2:
a2:ae:39:ea:3f:30:43:77:2a:f6:7b:6e:97:28:1c:
84:83:34:af:74:c1:1d:0a:70:10:a9:3a:71:1e:7b:
f4:18:d3:70:fc:af:aa:2f:a9:3b:73:39:1f:d5:2b:
ff:0e:b7:0f:30:85:ce:59:e5:74:02:ba:25:c1:ec:
17:07:c8:8d:12:a3:b1:a8:1a:9e:4e:93:66:92:00:
ff:44:e1:d3:77:d8:54:bf:1b:48:79:a4:70:9b:bf:
52:ac:f2:04:8c:58:ab:3f:39:a4:08:70:e4:08:51:
39:a5:a0:03:c2:03:16:55:bb:f8:79:69:b2:9b:5d:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:83:90:C4:15:74:51:0C:DB:2E:E8:38:EE:DA:6C:7C:95:0F:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl
X509v3 Authority Key Identifier:
keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
sbgp-ipAddrBlock: critical
IPv4:
208.91.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:3c:4c:a1:ae:8c:53:b1:61:d9:63:d8:49:a8:cb:38:fb:7b:
b2:82:f7:25:d6:2e:e9:d4:87:b2:1d:db:d5:6d:aa:d3:f6:f6:
6a:63:93:1a:a0:41:77:b9:61:bd:70:34:8f:0a:28:87:81:63:
a6:f5:91:cf:b2:72:58:55:3c:f0:37:2d:a7:1a:d7:a3:ee:1d:
03:c6:99:38:f5:2e:36:21:31:b6:01:a3:4a:c5:f7:88:c4:9d:
2f:b8:85:75:e7:19:44:43:78:71:2e:ec:4b:76:9a:53:ae:25:
db:3c:4b:7f:67:01:76:48:0c:d9:81:3e:ee:ee:09:27:fd:71:
1e:f2:68:00:df:7f:b2:d4:f6:99:12:3a:fa:4c:bd:d9:8f:b3:
2e:95:ee:45:bf:15:c0:77:08:96:b5:99:ce:29:b2:7a:a8:91:
7d:ae:92:ae:45:e4:2e:74:6a:f9:e6:0a:fa:d7:91:df:42:f6:
50:d1:c4:69:3a:a8:9b:c8:9d:bb:a1:84:82:45:3a:23:a3:54:
3b:ba:ac:9b:38:3a:ac:56:2e:8d:2c:58:2b:06:0b:0d:1a:93:
9b:91:fc:da:ee:4a:36:c0:61:3a:c3:4c:5d:85:39:75:f3:1a:
12:94:a0:71:36:95:87:63:8f:ae:51:e6:0b:b9:70:34:e5:a6:
7c:cd:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:06 2025 by rpki-client