Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa
File: 55304d86-38bb-30a6-9c19-973accc138e1.roa (raw, json)
Hash identifier: ezeFPvO6m8kH4O1wyjfgG4/wZkutv7oZXbNR6OgbOEo=
Subject key identifier: CB:49:D3:2D:50:39:41:CF:28:F2:9F:A8:B5:D8:C2:DE:2E:89:86:F2
Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
Certificate serial: 010D0C9F432858487CEB2F5D56DC840292E33480
Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 396982
IP address blocks: 208.94.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2f:5d:56:dc:84:02:92:e3:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=0ba8d5a3-0b8c-4103-8abc-24ae30fad5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:02:37:ae:c8:29:7d:8e:dd:80:7d:fd:8f:
c2:f6:82:15:a5:23:42:43:e4:dc:0c:d0:d5:36:d4:
04:06:1b:d6:ed:94:d1:42:e3:2b:24:c9:12:cc:89:
dc:99:77:2f:32:be:8f:20:ea:78:0f:9d:ed:b8:86:
aa:e6:30:7b:79:51:9b:e2:50:cb:47:d0:b4:8c:75:
f8:a9:5c:d5:94:28:05:df:21:24:c2:16:6a:20:62:
d5:83:b2:a6:2b:45:74:5f:0e:7b:c5:ce:7e:a3:d6:
63:a5:62:5f:02:f6:cd:f8:2d:2f:29:eb:37:2e:c4:
64:90:ed:37:05:93:a7:3e:c6:00:12:b4:c9:ba:90:
5e:16:63:f1:30:bf:a3:e4:d4:fa:cf:10:a7:96:3e:
30:94:1f:ea:15:ee:05:6b:95:7d:ab:a5:bb:04:37:
7c:63:5b:ba:d4:6b:7f:85:ed:99:16:32:f8:fe:a7:
25:f9:04:22:0d:31:63:66:30:60:d7:a1:7c:7c:12:
f4:90:5c:11:0c:47:a8:7e:07:bd:b1:5c:43:9c:68:
09:77:06:ee:2f:28:19:33:85:ab:0c:52:65:ac:7d:
a6:7e:d8:e7:f8:a0:2c:39:2f:6a:31:f5:fe:a5:03:
b7:60:df:de:97:56:a7:cb:7f:13:ba:49:05:a8:58:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:49:D3:2D:50:39:41:CF:28:F2:9F:A8:B5:D8:C2:DE:2E:89:86:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl
X509v3 Authority Key Identifier:
keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:d4:a4:40:d0:53:34:9a:81:5b:18:ed:94:06:82:b9:c0:a7:
9a:b9:42:80:77:63:9c:e5:cc:cf:d7:44:d4:91:0f:be:1f:13:
63:1a:4c:ff:d2:85:b3:1e:93:f9:0a:71:5c:ba:ce:8f:8b:59:
14:01:d1:f8:81:d7:a5:07:47:1c:c3:c0:88:18:c0:15:eb:e3:
bc:4a:95:b9:17:72:a0:5a:4b:46:8b:df:bd:4d:48:4c:ea:4c:
ef:f2:25:d4:20:f4:2d:b8:b8:72:d3:9d:f6:7d:8b:82:22:c1:
5e:21:b5:8a:67:20:ed:26:a4:d7:14:ea:6e:c2:05:35:24:92:
72:a2:cb:a4:b0:52:3c:b8:53:c2:a3:48:8d:9b:57:30:01:86:
30:5d:66:2e:d8:eb:09:14:57:cf:de:54:58:b4:aa:f4:d9:de:
05:04:61:c9:fa:af:d1:02:62:dd:e8:b0:21:f7:e2:08:15:0c:
a6:c4:a1:96:19:ae:a4:43:a3:9e:fe:d5:32:75:11:c6:bb:e6:
4c:42:d7:9e:05:2b:15:db:e1:30:4d:5d:39:1c:b7:4c:d3:1b:
af:c6:9d:f2:df:3b:b3:ee:8c:23:4e:97:49:b4:d9:bb:99:89:
dc:09:2e:e1:01:f7:b9:77:7d:47:94:2e:81:2b:81:d8:e0:49:
08:1f:cf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:59:57 2025 by rpki-client