Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/c7f7d80b-5cf0-37a3-b573-c0d8868d6eb1.roa
File: c7f7d80b-5cf0-37a3-b573-c0d8868d6eb1.roa (raw, json)
Hash identifier: tuPqOMj3+1oF8nnNY77oDocScIKJpOGGT7gPTeLLo6g=
Subject key identifier: E0:4C:56:69:AD:B7:6B:2D:E1:51:8C:58:27:95:41:53:55:A6:9B:02
Certificate issuer: /CN=28cbed49-e939-45fa-95d9-3bb13f35a47e
Certificate serial: 010D0C9F43285848A9961ED06D4684A65711F300
Authority key identifier: 1E:15:DF:79:45:AC:BA:E8:B2:49:FB:8C:DD:85:42:DD:0D:AF:E8:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/c7f7d80b-5cf0-37a3-b573-c0d8868d6eb1.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 26930
IP address blocks: 208.99.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:1e:d0:6d:46:84:a6:57:11:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cbed49-e939-45fa-95d9-3bb13f35a47e
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=9fb57499-f5eb-405e-9530-56f57f8722ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:75:a1:70:f4:b6:37:28:1e:f2:7a:6f:0d:
1d:f4:04:76:b2:3c:b3:e0:20:71:a9:a7:80:a5:ad:
0a:1f:73:c2:1a:f6:c7:56:d8:4e:16:46:3f:1d:dd:
bc:0d:4c:f3:ac:e7:53:3b:90:d0:4c:e9:4e:2e:1d:
1d:57:77:4b:61:87:ab:9a:69:77:a3:5b:c2:c1:03:
af:17:0b:b2:77:c4:fb:b8:6b:d0:8d:09:74:26:95:
7c:92:6c:2a:53:4c:b6:81:77:74:d1:00:d8:91:09:
12:6d:1d:61:ce:3f:39:d6:da:4d:3d:39:b6:8d:73:
93:07:f6:24:c5:b2:9b:41:a6:14:27:39:b9:62:76:
4a:51:6e:9c:83:64:34:26:94:51:8c:85:24:8d:a3:
d1:ed:69:16:56:40:c1:cb:82:51:41:85:48:e4:87:
ca:35:d2:94:af:5b:66:e7:62:40:76:b1:e7:4a:97:
7e:27:c7:ab:29:5b:8b:e2:86:8b:37:43:b5:39:ae:
3c:59:eb:1f:ad:24:ba:02:cf:d9:7f:70:10:f2:26:
df:be:eb:1a:41:65:a3:53:e3:62:83:b9:93:1e:8c:
75:7d:e4:18:40:88:08:8a:8c:8d:14:86:43:d5:9e:
0f:ec:2c:cc:71:6e:86:0a:4d:67:24:ea:e9:ea:07:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4C:56:69:AD:B7:6B:2D:E1:51:8C:58:27:95:41:53:55:A6:9B:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/c7f7d80b-5cf0-37a3-b573-c0d8868d6eb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e/28cbed49-e939-45fa-95d9-3bb13f35a47e.crl
X509v3 Authority Key Identifier:
keyid:1E:15:DF:79:45:AC:BA:E8:B2:49:FB:8C:DD:85:42:DD:0D:AF:E8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/28cbed49-e939-45fa-95d9-3bb13f35a47e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.99.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:83:b5:ae:e3:90:df:9c:93:01:99:10:95:11:ce:c6:d7:f3:
d3:d3:5f:1e:4f:ce:31:26:88:56:74:a8:39:bf:26:43:5a:81:
89:ba:f1:e1:e0:26:65:f1:c9:9d:eb:25:00:46:fe:63:15:f1:
97:3d:6d:91:a4:c1:02:71:7c:ad:c3:32:36:be:3f:4a:af:65:
c3:96:d9:de:1a:cb:e8:44:88:c3:be:41:c8:1d:90:e3:cd:6d:
67:e4:50:72:28:50:aa:83:52:ed:55:c3:38:91:03:0b:f9:39:
85:4d:42:7d:92:fb:a3:25:c9:95:9e:18:ac:07:0a:e4:9e:a1:
af:29:89:77:73:da:45:ad:38:f3:bb:9b:09:af:5b:85:69:43:
15:4d:92:78:d7:ca:45:ec:d1:a7:24:b8:f8:ca:97:86:0c:a8:
4a:a5:27:10:36:5d:1a:79:18:e8:d4:f2:c6:44:d1:1b:1f:1f:
3d:f4:5f:e3:38:f6:cc:7e:2d:bb:a8:5e:5b:17:17:f9:cc:02:
ef:ec:8f:24:14:7b:67:03:17:08:12:d5:41:a6:a0:9e:77:17:
03:cb:ca:65:89:6b:18:f4:15:25:88:54:cc:03:6c:3d:2e:14:
a6:b8:be:99:dd:27:ef:62:dc:d1:2b:7b:8c:c6:e2:e5:40:ab:
98:3b:91:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:47 2025 by rpki-client