Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa
File: 80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa (raw, json)
Hash identifier: F8B1WLv0zjt1wgm6g9xgzoC1PhkuVxEvSnl+UKYjySE=
Subject key identifier: BE:C1:03:37:2B:2B:0D:6D:C1:9C:C9:CD:23:CD:AC:79:E8:35:D3:2E
Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial: 010D0C9F432858491AA6D087848A8B6A72E19D00
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 6079
IP address blocks: 121.91.208.0/20 maxlen: 24
121.91.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:d0:87:84:8a:8b:6a:72:e1:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=e9bc856b-f9af-4b6d-ac32-0cfc41906c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:e1:cc:70:2a:76:01:b1:48:3e:b4:d9:f0:
62:80:b1:fc:a0:21:19:58:c7:c7:f4:c8:04:39:c8:
51:3f:05:31:dc:14:63:c0:51:37:cd:7d:6b:49:f2:
bf:19:b7:14:48:0a:50:67:77:6b:35:d3:1e:62:48:
49:f7:af:c6:17:61:31:e6:75:87:06:f7:a9:22:ec:
73:9d:ae:e1:21:9b:05:f0:bf:ba:1a:68:80:19:80:
16:bb:37:fb:92:92:ca:c7:66:29:e0:ad:58:cd:eb:
b4:59:cc:ba:54:a7:67:7c:fc:01:ae:c3:e2:41:ca:
56:6f:51:7c:1a:6a:52:57:b5:4a:7d:ba:b5:62:59:
8e:e5:12:b1:9a:fb:4e:c0:99:af:a9:cb:ad:ec:13:
88:b3:21:00:33:04:1c:01:f8:fa:1e:9a:cb:e2:cd:
7a:3d:37:ff:b9:a9:c7:a7:36:8c:6f:f8:bd:17:b3:
66:2b:fa:c2:59:0e:30:33:a7:df:4b:65:4b:b5:36:
d6:01:98:42:ff:e2:40:dc:78:6e:f6:81:5e:d5:87:
a8:17:6b:f0:54:c9:29:25:d8:8b:2d:cc:df:be:ef:
93:da:a8:29:f0:12:40:a8:90:7d:01:e4:fd:5b:8d:
70:98:1c:53:71:61:fe:40:c0:e1:66:ad:dd:ce:54:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:03:37:2B:2B:0D:6D:C1:9C:C9:CD:23:CD:AC:79:E8:35:D3:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
X509v3 Authority Key Identifier:
keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
sbgp-ipAddrBlock: critical
IPv4:
121.91.208.0-121.91.255.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:50:b8:47:8c:e5:fb:13:c6:79:61:94:fc:c2:ff:a6:48:22:
05:81:eb:1d:58:a0:5e:6c:61:27:93:24:6b:0a:db:6a:36:e3:
28:99:66:fb:1b:0c:bd:98:46:9d:fc:fa:0e:45:bf:f6:bb:9e:
47:23:08:ca:67:b2:5d:18:0b:57:15:b0:34:82:3e:96:c2:e1:
97:52:4b:7b:a2:ca:23:f2:0c:1a:07:6e:ff:c6:29:36:39:e2:
f2:f8:39:f5:0a:91:db:b1:85:aa:2c:45:ee:39:9e:52:0b:4b:
35:95:ce:48:2b:c9:df:06:7f:be:d7:d4:31:4e:75:7a:ba:c5:
39:c8:a9:27:36:e3:2a:10:db:66:ef:af:58:30:fd:a5:05:10:
06:ae:73:aa:18:3d:5c:72:7d:ab:11:8a:46:7d:f6:96:de:06:
dd:95:f0:2a:ca:e5:88:2a:23:64:39:d8:26:c0:57:24:30:b9:
fe:c6:8a:f1:cc:72:43:0a:17:09:a1:8d:72:5c:33:c9:64:ec:
ad:bd:91:5a:05:fa:3b:78:7c:1c:38:57:7d:56:37:23:64:b3:
00:b7:ab:20:8a:a4:8f:4f:fd:66:b1:ec:d7:e9:24:39:bb:14:
53:27:e6:7e:58:77:e2:01:80:ce:65:26:01:36:df:94:90:07:
b7:e1:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:13 2025 by rpki-client