Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa
File: 529eec86-aabc-3d34-8797-dab3f5a00262.roa (raw, json)
Hash identifier: ObP+eRekYDy/oxH/1/Rk+HMQeclzZrwnO30a8qJcjMw=
Subject key identifier: 0F:8B:B2:36:CF:70:43:AB:22:4E:37:E1:DF:B5:80:D0:3A:80:FB:2A
Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial: 010D0C9F432858491246B6F9535D1A6A0A09D500
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 3565
IP address blocks: 208.68.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b6:f9:53:5d:1a:6a:0a:09:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=a255abbd-c1ef-4c6c-984d-428791e39cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:99:b5:d8:4e:27:0a:03:f0:45:21:17:6c:
a0:39:67:ae:d0:65:cb:44:ee:fc:ca:21:2d:3d:f2:
59:98:e0:4f:33:57:11:4f:57:41:b5:11:81:8b:ce:
88:cc:aa:93:db:60:e6:c3:d5:23:08:19:2b:43:6a:
d0:9e:85:a4:3e:a2:b2:8b:72:16:47:26:57:f0:45:
38:e7:15:42:52:e0:1e:37:20:db:c3:b4:0d:be:63:
05:6b:8a:97:97:2c:0e:f1:7d:c1:e1:08:db:3e:fc:
fc:fa:cf:f5:fb:02:45:08:7a:3a:6a:05:6f:db:62:
a2:94:93:36:8b:71:0d:70:a6:2c:22:36:9e:54:a3:
80:7b:fb:0f:a7:cc:e4:6b:65:12:db:55:86:a4:99:
92:c2:d8:f3:b4:5e:19:1b:fb:3e:f5:fd:83:f2:eb:
5d:88:70:d6:51:40:62:48:35:ac:93:0d:62:8f:59:
1a:d9:8d:cb:df:77:d6:66:8d:70:86:33:0f:20:49:
c9:8e:1c:70:6c:73:0d:e2:fb:9e:3a:fd:31:20:00:
56:8e:a4:b2:67:a6:51:d0:d3:ff:22:b7:b3:c3:3d:
96:a9:0c:02:39:9a:80:5c:d5:cc:45:a2:de:e9:67:
79:40:2c:2b:8c:ef:64:c4:95:ff:fc:d7:8e:78:7e:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:B2:36:CF:70:43:AB:22:4E:37:E1:DF:B5:80:D0:3A:80:FB:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
X509v3 Authority Key Identifier:
keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:39:d0:47:73:d2:a4:4f:51:4e:08:ab:12:71:d3:91:70:61:
46:ea:62:62:e8:e5:a1:4c:f5:3e:71:cb:dc:3e:79:b0:c9:a3:
9e:f8:e2:87:1d:75:24:86:ff:b7:77:66:67:df:80:7a:55:8e:
f9:97:25:2f:8a:92:cf:fd:8e:b6:d7:fe:ab:96:69:84:cf:74:
9d:4b:2c:ad:31:5d:1b:c9:b2:8b:3b:90:a2:ae:4a:1a:58:28:
da:1b:16:53:ee:ae:6c:1d:45:2c:b0:7c:89:60:66:bb:3a:06:
c2:6a:c3:8a:dd:e3:31:46:1c:ad:b8:ca:bd:0a:61:2c:0f:a3:
38:a6:ab:d9:2d:41:c9:b7:cc:9d:12:8a:61:ad:eb:6b:62:e9:
7b:c8:5a:07:5e:a7:a8:9e:bb:1f:a3:a1:c5:b4:b1:9f:86:1e:
9a:7f:2f:e0:77:b1:cc:6f:3a:c7:57:8d:18:66:ff:84:9e:1d:
c5:85:9c:85:51:63:d5:e7:c7:d8:5d:92:16:a6:c3:4f:9c:3b:
9f:52:52:e8:25:b5:2a:6d:c6:ee:3e:5b:bc:e7:c3:0f:64:c9:
47:51:6e:f6:69:43:0a:db:88:63:5d:98:41:a2:6d:db:67:58:
06:f6:23:ed:0f:3f:27:b8:6d:bc:85:3d:f0:e5:f3:1a:63:16:
02:94:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:19:22 2025 by rpki-client