Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa
File: ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa (raw, json)
Hash identifier: wvQYkhOlIQI9jJLoFAB94GOgEUhfaRDLnuic+mgivQY=
Subject key identifier: 98:81:28:74:26:85:53:26:ED:39:EF:99:AB:9B:B1:16:4D:A3:8A:83
Certificate issuer: /CN=804e20e1-66d3-4b19-8356-82071ce2a249
Certificate serial: 010D0C9F432858491246A8505189CBC4AD0F8164
Authority key identifier: F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 33368
IP address blocks: 208.86.24.0/22 maxlen: 22
2620:0:1a20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:a8:50:51:89:cb:c4:ad:0f:81:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=804e20e1-66d3-4b19-8356-82071ce2a249
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=3335d577-afd0-4e5a-83f4-1fd36af27d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:8b:ad:33:33:53:40:86:d4:a3:f9:bd:6f:
c8:5b:6c:a4:b9:43:19:84:91:f8:d9:c2:4e:44:f7:
a6:2f:cf:be:21:3d:f2:a2:21:97:4d:cd:ed:c4:c2:
ad:34:7a:16:df:c9:d9:a3:b9:8d:7e:7c:60:e7:df:
70:e7:78:0c:f4:14:0a:9c:dc:71:7c:28:53:f8:cb:
a5:7f:ce:99:24:ea:c5:5f:a2:b4:5c:4a:bb:7f:cd:
a2:61:b8:f9:47:e0:1b:0d:02:f2:a5:62:2a:de:8f:
11:3c:fe:df:44:35:fb:f2:07:e0:96:56:8a:4e:fe:
47:8e:30:3e:a7:53:8a:9a:2b:11:9b:d0:77:bb:5f:
51:ca:26:c0:ad:b9:13:e1:15:68:aa:84:9b:33:63:
07:f3:4d:db:65:57:86:0c:00:89:63:f5:f7:6f:83:
de:7f:8a:5b:ce:d7:96:7c:53:66:55:1a:ea:ea:a8:
4b:3a:bd:80:28:82:7e:a8:83:59:db:bf:9b:74:f4:
60:a2:c1:96:39:e1:63:5e:5f:8e:25:a9:a3:f9:da:
2c:18:68:4b:97:bb:0c:d5:39:cc:cd:26:a4:0e:3f:
89:10:71:2c:1f:4f:19:d3:69:73:37:df:89:70:5f:
db:30:99:60:87:1f:16:7f:02:74:f9:4e:59:45:b4:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:81:28:74:26:85:53:26:ED:39:EF:99:AB:9B:B1:16:4D:A3:8A:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/ea0b5d1f-a505-3821-a67c-b296d071bbbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249/804e20e1-66d3-4b19-8356-82071ce2a249.crl
X509v3 Authority Key Identifier:
keyid:F7:20:BC:47:88:C0:F0:37:C0:72:F6:E1:E3:89:7C:F5:80:3E:33:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804e20e1-66d3-4b19-8356-82071ce2a249.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.24.0/22
IPv6:
2620:0:1a20::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7d:7a:79:9b:4e:b6:01:10:d1:55:77:61:05:ae:b5:99:d0:
a7:9b:5a:c7:78:51:a8:74:58:ce:19:11:8c:24:6d:fe:12:b3:
82:c5:93:74:b3:c0:da:3e:7d:10:f3:dd:69:35:a0:b3:f0:6f:
ce:a2:cb:7a:ec:78:65:02:6c:04:b4:a4:96:ac:ec:a6:f1:35:
f3:53:c7:be:8b:26:a2:c6:a5:b8:c2:6c:dc:8d:c8:f1:d6:4e:
81:ba:9d:b4:30:9f:d0:45:a7:d4:7f:29:b7:d0:54:fe:5f:38:
0b:e7:fa:b9:de:7d:2e:25:d6:32:ec:3f:0d:f9:43:43:5b:48:
36:0c:b4:59:09:09:f2:28:ac:77:d4:2d:37:73:b4:58:be:cd:
03:db:4c:94:0c:b1:3d:10:0b:02:d3:3a:09:3b:ad:e3:0f:a3:
ab:f9:56:ce:b4:a8:6f:78:0f:bf:b2:3b:83:db:2a:1e:60:3a:
10:66:cf:49:90:b4:67:6d:92:13:a8:cb:61:7a:1e:10:82:54:
1f:24:1f:0b:34:59:1f:b7:c5:23:e3:56:2f:03:c2:40:d4:d9:
89:88:e8:13:c1:f1:19:ea:6b:54:d4:52:57:5d:3c:34:6e:36:
3e:bf:27:66:d9:a9:1e:b8:b4:0b:85:bf:46:c3:6d:0e:1b:54:
dc:47:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:38 2025 by rpki-client