Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa
File: 8981f9f7-457a-3b83-995f-2557ffc8cb47.roa (raw, json)
Hash identifier: cn/d6FfYMmNkqb8/MVONevmbe/BgbY5gHWUpPqE4Hv4=
Subject key identifier: 2D:B8:78:50:FF:F1:5F:2E:A8:19:09:85:39:76:95:55:0A:BA:84:88
Certificate issuer: /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
Certificate serial: 010D0C9F43285849071BE78BF2BCFFD7F97F5300
Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 26461
IP address blocks: 208.91.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:e7:8b:f2:bc:ff:d7:f9:7f:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=03fa4a48-2128-431a-a071-cbb326dfcc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:66:25:85:2f:77:75:9b:94:94:52:2d:5f:
16:4f:48:bd:f0:50:e7:70:2b:e1:66:dc:07:02:0d:
fa:3e:0c:be:a7:c9:2d:81:32:a1:7b:04:cc:53:cb:
30:85:97:33:77:48:00:41:32:ad:eb:78:c3:c2:23:
df:31:47:32:fd:5e:51:c6:4d:0c:d9:fb:94:5c:c8:
40:61:dd:56:5b:f3:2a:ef:a7:af:cb:a6:26:27:b2:
4d:c2:1b:3c:64:7e:94:eb:54:89:ff:51:11:7c:73:
ff:c3:36:a6:7b:cf:8e:dc:9b:a4:11:9b:50:bc:55:
19:b3:dd:70:ad:6e:6a:1c:07:ca:e6:de:ca:a6:b2:
41:2f:75:66:df:33:c6:a0:cc:5f:67:a0:a0:3b:64:
c0:08:ad:d4:15:c7:e1:85:31:18:08:cb:73:28:d7:
d2:78:89:f4:6d:42:a0:56:03:1b:34:f3:e3:e6:7f:
2e:ca:57:67:43:20:77:28:9f:dd:26:f8:c8:ba:d1:
21:e9:89:8f:88:68:a8:2a:94:de:8d:b5:7a:3b:2b:
59:b8:30:ba:49:73:36:c6:66:f3:61:61:f2:63:60:
7e:47:5e:a8:8f:9e:7b:81:d1:bb:13:19:83:fb:b1:
ee:de:35:b3:6f:e4:b3:83:b3:ed:64:45:ab:d2:26:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:78:50:FF:F1:5F:2E:A8:19:09:85:39:76:95:55:0A:BA:84:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl
X509v3 Authority Key Identifier:
keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer
sbgp-ipAddrBlock: critical
IPv4:
208.91.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:26:00:e3:56:52:c2:07:75:5c:e9:db:63:58:cf:eb:96:11:
63:a4:77:23:5f:61:ad:e1:8b:55:ae:ce:6c:c1:49:36:a7:59:
10:be:0e:65:43:2f:40:65:3e:e7:94:01:f7:c7:87:3d:ff:51:
4e:77:a2:49:ab:88:29:82:8f:85:34:0b:23:db:cb:b5:9d:8e:
bd:90:90:fe:8f:64:66:82:45:6f:22:db:7f:9f:63:06:fd:be:
e6:3a:85:1e:14:d6:d3:40:9e:f9:06:36:ad:be:92:2c:43:bb:
5b:7e:2d:98:34:63:3a:1f:7a:b7:40:e6:42:e9:08:19:7b:ed:
50:3d:52:17:8a:f9:df:ce:86:55:fa:51:46:34:01:33:1b:03:
8b:f0:be:8b:40:73:b3:ee:19:8d:a0:d0:00:16:4c:9e:d0:96:
1c:57:cb:c5:5d:86:2b:88:a1:40:b6:22:2f:2c:58:7f:63:b5:
e3:0e:8d:4a:08:f5:70:d6:77:d4:ac:c1:ce:ee:5f:79:59:db:
a5:54:45:c4:28:d8:27:d5:c1:51:e9:1d:69:d4:89:25:b4:81:
c5:3c:13:98:b0:bb:43:33:a1:76:c5:b8:43:7c:00:8d:3b:97:
54:2f:ab:ca:76:2f:02:ec:05:42:92:fa:71:dd:a0:01:8c:b5:
b8:09:23:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:08 2025 by rpki-client