Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa
File: de0c75c3-d3bc-3f50-9911-fde5dd621864.roa (raw, json)
Hash identifier: sHt9MCLvQFTgYVk3SrYquSBeQEDVfp9DG5kJJRXUm0s=
Subject key identifier: 4A:0C:6B:1E:2B:7F:84:3A:BC:C5:9C:79:C8:B7:CA:B1:B5:57:19:C2
Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial: 010D0C9F43285848A049114604664F3BAA78D300
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa
Signing time: Wed 22 Jan 2025 06:03:27 +0000
ROA not before: Wed 22 Jan 2025 06:03:27 +0000
ROA not after: Tue 22 Apr 2025 05:03:27 +0000
asID: 19165
IP address blocks: 208.66.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a0:49:11:46:04:66:4f:3b:aa:78:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Validity
Not Before: Jan 22 06:03:27 2025 GMT
Not After : Apr 22 05:03:27 2025 GMT
Subject: CN=52400b7d-2a2d-4bf4-9e7c-140634da8321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:dc:36:45:bc:26:51:b1:65:6e:0d:ef:61:
fa:e2:a6:d3:d9:8f:84:e5:ec:45:e6:85:c9:99:d9:
5a:bd:92:1d:3b:f6:a0:f4:f9:54:94:e8:5d:81:a0:
2d:fc:b5:66:93:b3:bf:14:75:78:bd:5c:98:1f:3e:
48:1b:76:9f:9d:11:72:af:31:32:63:26:38:50:33:
a7:0c:b5:76:89:68:09:08:d9:7a:81:13:bf:bf:c5:
9b:61:a8:58:5a:5b:77:db:45:59:dd:76:9a:af:94:
d8:8d:f6:44:ae:dc:36:f1:d9:b9:0e:e5:d0:19:17:
c7:16:97:25:e3:c0:05:5a:09:a1:b3:bb:e4:7d:26:
7f:7e:af:7b:e4:08:71:fb:f1:86:7c:68:8a:5c:ee:
41:06:56:19:6a:f7:61:d6:f6:e8:6a:eb:41:02:30:
a8:4e:e6:ed:f3:35:55:ef:2a:b4:23:56:c5:ae:db:
aa:ff:19:c5:f0:dc:f9:a5:3c:57:43:07:62:cb:97:
73:78:7d:e8:33:aa:da:bf:63:41:a1:3e:a5:02:af:
16:ab:21:5b:da:79:f4:e1:78:d5:6c:18:2c:fd:4d:
e0:83:40:61:1e:f0:26:45:b6:0c:10:bf:59:c2:ec:
1d:6f:2e:97:c6:74:97:64:3c:73:30:bd:1a:28:6d:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0C:6B:1E:2B:7F:84:3A:BC:C5:9C:79:C8:B7:CA:B1:B5:57:19:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/de0c75c3-d3bc-3f50-9911-fde5dd621864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
X509v3 Authority Key Identifier:
keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
sbgp-ipAddrBlock: critical
IPv4:
208.66.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:37:12:ce:fc:63:32:bc:17:38:9c:12:e1:43:f9:ae:8a:7a:
ec:ce:16:13:23:b3:7f:a7:ff:ad:5a:af:54:8a:ab:14:c5:2a:
8c:df:78:88:eb:c8:6d:07:2d:ee:bd:92:98:3b:23:cc:61:84:
9f:fb:39:7d:03:bb:59:2d:9b:b5:6b:e7:66:4c:73:ea:a2:1b:
30:6e:fe:0a:6b:a3:e2:a2:d4:07:13:19:70:a0:c9:70:85:f9:
f1:07:00:a4:ec:5d:81:32:82:59:99:36:d9:29:83:60:bf:ad:
54:03:5a:3c:b3:09:23:1d:29:c5:b3:ea:40:e0:b3:47:48:58:
4e:66:96:c8:ee:9c:94:eb:d4:c3:3c:32:72:7b:48:64:d8:e9:
15:28:17:02:a0:48:7a:63:75:df:0e:ba:82:60:cf:47:42:89:
e1:74:71:91:0b:49:19:c3:e0:4e:7e:fa:09:66:83:3a:ad:fe:
8d:78:0c:20:b9:73:00:5c:92:24:bf:7f:11:d8:74:92:81:be:
dd:10:6e:db:52:98:3e:d4:6d:bf:43:e5:44:ad:09:e4:60:ee:
ca:da:28:cc:eb:77:b0:22:90:04:b1:6b:4a:a7:5a:9a:da:35:
43:3d:cc:a8:0d:be:67:e1:00:a7:7a:e9:68:74:af:17:7d:a8:
8d:7b:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:09:15 2025 by rpki-client