Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/4199fdb2-52b2-3293-9988-f8544855d1a2.roa
File: 4199fdb2-52b2-3293-9988-f8544855d1a2.roa (raw, json)
Hash identifier: b80lWqK2MfmCFfgU5tikV8HuFTDf8sjDpHICnp7gn8w=
Subject key identifier: 4C:8A:10:5A:AE:5B:FB:CC:95:D4:4E:D5:35:34:6C:8A:68:42:09:22
Certificate issuer: /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial: 010D0C9F43285849393E713C768BC4072147DC00
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/4199fdb2-52b2-3293-9988-f8544855d1a2.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 18594
IP address blocks: 208.70.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:71:3c:76:8b:c4:07:21:47:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=fe4501fc-13e9-4d79-949d-5151a6a20e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:6b:6d:86:24:c0:00:c2:c9:e0:b1:1c:63:
6d:e4:99:4b:2c:12:60:ec:12:2e:53:b9:c2:ae:5a:
4b:80:e8:2a:71:55:a0:bd:0d:83:6f:71:c8:43:de:
6a:3d:93:19:0b:1b:f4:94:8d:7a:54:53:d6:0d:cd:
e1:5d:f5:04:3b:dd:89:e0:a1:bc:ae:98:0b:b0:5c:
03:d0:50:7f:82:15:42:6c:d6:ac:b9:dc:47:c5:95:
eb:d9:d8:ed:f7:cd:43:79:5a:35:54:82:40:2e:af:
44:2f:84:a9:1a:ef:b4:44:19:ad:55:b9:61:4a:22:
bc:36:43:a1:81:09:49:6a:e3:4a:4d:3f:db:87:eb:
41:72:b8:5c:80:9d:d1:d7:3b:5d:b0:2e:5e:6b:f0:
ac:ff:bd:6f:fd:bb:d3:36:2a:e3:d5:e2:fd:b3:2d:
a7:69:ec:79:9c:be:4a:9f:ed:24:40:03:4f:31:54:
cf:72:19:a0:c1:22:61:3e:db:03:67:35:2a:81:9b:
39:93:7d:28:d9:92:f2:c8:9d:0f:28:be:79:ca:a3:
28:f7:cd:73:fd:ea:6a:e9:4e:86:be:63:0b:7d:d5:
86:90:09:fa:57:99:90:83:4c:c3:51:11:eb:1b:f3:
fc:ee:7f:0e:d4:2a:b8:48:ec:05:0b:02:fa:96:c1:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:10:5A:AE:5B:FB:CC:95:D4:4E:D5:35:34:6C:8A:68:42:09:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/4199fdb2-52b2-3293-9988-f8544855d1a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
X509v3 Authority Key Identifier:
keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:d4:78:08:43:7d:82:83:93:fe:2b:5a:f0:52:f0:c6:c7:ae:
3d:25:89:fe:64:78:19:68:d7:47:42:62:37:79:95:32:1c:aa:
51:6b:dc:36:2e:43:1a:fb:36:09:d2:19:b7:52:c8:10:79:67:
71:bf:c7:8b:2c:17:36:d4:a5:18:51:11:97:1f:9f:dc:0c:b8:
0c:68:17:f0:51:f3:59:19:54:bd:54:13:82:64:fd:76:67:4d:
db:1b:91:f3:cd:62:8b:f5:9d:d8:5c:5c:82:64:97:8f:0d:e9:
3d:73:bb:a8:07:f6:b1:41:e7:4c:74:6e:dd:2b:b3:34:76:09:
3a:6f:cb:48:23:49:52:89:87:17:77:cf:b0:30:fe:ce:f9:19:
dd:ef:1b:da:6d:49:15:08:a2:f6:45:76:e7:ac:a5:64:bf:95:
40:c7:bd:e7:f8:7d:9f:e3:cc:ba:44:ce:4e:da:f1:f5:55:9e:
ef:7d:ac:f7:0f:3d:4c:92:37:bc:55:46:64:ba:05:1d:56:de:
98:8e:f3:ef:6b:a8:24:fb:2e:00:55:c7:41:1d:cf:33:d3:79:
c4:b9:ca:5b:ce:3e:1c:0a:f7:2c:b8:b7:95:19:03:df:6d:f9:
88:d9:43:55:5c:06:61:ea:ae:27:48:a3:65:05:40:e1:bf:d7:
05:ad:3f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:05 2025 by rpki-client