Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa
File: 32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa (raw, json)
Hash identifier: XOu0gj5ghOg0nng6Wk+YcO5hnpVtsVsXCLN/P2HzUzk=
Subject key identifier: 51:7B:87:E6:EB:F6:EE:9D:D4:13:5A:D8:D6:BB:CA:D3:35:60:FE:2D
Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e
Certificate serial: 010D0C9F4328584953C419595DB596D126905360
Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 36861
IP address blocks: 208.68.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:19:59:5d:b5:96:d1:26:90:53:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=ae278ee8-3ecf-4d8c-bc28-153fe41e43e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:65:12:1c:66:4c:42:75:43:58:7b:9d:8f:
b8:09:95:85:11:34:09:fa:ae:6d:4c:63:88:86:16:
ac:15:c7:68:98:a9:96:0b:fb:a3:c3:72:77:cb:1f:
8c:ac:28:67:31:a1:56:a3:76:e2:40:35:1b:13:d9:
02:6f:8e:84:89:b1:a8:6b:f7:31:cd:ed:63:fd:03:
0c:02:ae:0f:87:c6:84:5c:bd:11:6c:a3:89:24:51:
ac:50:76:40:e1:56:ce:aa:e8:ba:2c:f1:0a:bf:6e:
d4:95:92:66:62:48:11:33:61:a3:d4:9b:fa:1d:f2:
76:4e:50:b8:7a:9c:16:75:5b:f5:8d:22:86:81:cc:
6c:c8:63:c8:a7:fb:a3:70:a2:53:16:a2:4f:2b:e5:
40:02:9a:5a:00:f2:84:69:9e:7d:83:a9:d8:9f:9d:
0e:34:07:91:c0:19:37:37:29:7a:ce:85:1b:af:49:
5d:b3:42:5d:11:2a:c0:ec:9b:72:66:d1:14:7d:83:
39:9b:ad:39:1a:48:e9:1e:c4:95:3d:a9:31:49:14:
8c:fd:2a:6e:fc:55:68:da:b9:e4:30:8b:a5:17:f3:
7a:51:cc:e0:68:98:56:16:87:e2:fc:76:33:42:80:
ca:a6:6b:16:23:a7:0e:fe:85:b3:5b:1c:b7:e3:0f:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:87:E6:EB:F6:EE:9D:D4:13:5A:D8:D6:BB:CA:D3:35:60:FE:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl
X509v3 Authority Key Identifier:
keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d5:91:04:ce:29:37:6a:3b:eb:cf:1f:d0:1c:b3:ca:d8:d0:
07:e7:93:9e:67:c8:4a:b4:e5:f2:32:20:fb:d0:89:f9:27:1d:
47:fa:2b:13:70:19:de:25:0f:22:8e:5f:44:23:06:b5:a1:27:
40:a3:2c:e5:19:36:0d:a7:0e:06:d7:a8:db:83:01:d5:34:24:
77:71:d6:3f:0e:27:1a:f5:7a:29:bd:e9:29:14:29:91:2c:08:
ce:88:f0:af:04:23:1b:af:12:a7:0a:39:48:5c:77:9a:26:a4:
4c:7c:1c:ad:f5:67:94:eb:41:70:b6:6e:f0:b9:c4:65:ad:18:
64:90:e7:a0:71:50:f1:b4:3b:dd:30:ca:07:c5:f1:18:a8:b1:
7c:3a:d5:ef:53:59:4f:05:d5:97:88:23:99:85:43:70:fa:f1:
26:70:a3:cc:1b:53:ba:7b:d7:a3:37:d7:45:3b:12:9c:a0:64:
bf:6d:35:8a:1d:4e:eb:65:33:cb:7f:55:72:cf:d2:76:93:93:
a7:bf:38:50:bc:f9:8d:1b:6a:94:27:15:e7:16:de:d7:a6:46:
73:0b:4f:71:d6:ef:26:27:b9:be:35:06:ec:bc:c8:21:0f:5b:
05:bb:12:e7:62:a9:12:2d:07:db:82:b1:7b:0d:82:4e:0c:be:
38:7d:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:23:07 2025 by rpki-client