Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
File: e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa (raw, json)
Hash identifier: EPgxRQY9TuQshQ8zLlbhgw8NX2G2BILQ2GL5J4Ouv94=
Subject key identifier: 12:A7:37:FB:4B:DB:A9:11:97:B1:57:8E:18:CB:E8:F4:68:49:CE:76
Certificate issuer: /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial: 010D0C9F4328584953C4155B8A6066688B2EB980
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 208.70.136.0/23 maxlen: 23
208.70.138.0/24 maxlen: 24
208.70.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:15:5b:8a:60:66:68:8b:2e:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=7cab285d-76b7-45f6-aa02-832ecda5866d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:7e:56:91:71:22:40:8c:84:4b:ef:94:fd:
65:43:18:b4:9b:46:67:2c:4c:8b:b7:39:11:29:21:
98:0d:b2:a3:7b:58:2d:f8:1a:e3:fd:34:c9:d3:cb:
56:0a:08:f4:69:01:c0:6d:cc:0d:0a:e6:57:37:0a:
8e:eb:b8:d9:73:bd:c6:ea:8e:a2:c5:89:2d:40:12:
dc:58:c7:45:d1:0b:a7:8d:e1:44:dc:88:98:69:d2:
af:86:d3:04:07:b1:58:5e:d6:1e:51:be:72:cc:e5:
8e:f0:f0:9d:b3:83:a7:d9:a0:d4:c7:6e:3b:67:c2:
90:26:1e:5b:aa:fc:9a:80:99:1d:b2:ab:7e:eb:21:
e1:b9:c5:fe:00:69:0d:9d:d7:69:36:ef:52:40:05:
e7:39:c5:f4:a6:81:b9:a1:d3:26:3b:67:88:0b:5c:
4f:22:3c:26:3e:a8:7c:e9:0e:c8:7d:5b:7d:99:ed:
eb:fb:f2:b8:e0:07:4d:48:49:5b:de:44:3c:46:37:
5c:dc:2d:4a:3d:3c:3e:db:b2:e5:8a:5c:79:ce:e6:
e4:ef:71:91:bf:64:76:24:29:27:cf:46:74:50:6a:
e2:01:d8:94:b6:03:41:2b:e6:a4:df:0e:e3:e8:60:
fc:cd:62:f8:df:39:a5:5f:05:da:41:30:e3:79:cf:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A7:37:FB:4B:DB:A9:11:97:B1:57:8E:18:CB:E8:F4:68:49:CE:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
X509v3 Authority Key Identifier:
keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:29:3b:bc:88:f7:bd:7e:71:c4:ba:18:4d:c3:85:a3:96:3b:
05:47:74:08:97:7b:bd:db:10:71:1c:8a:c3:ca:ad:fb:ab:04:
85:77:18:e9:c4:7b:d6:4d:db:6c:0b:e1:47:a4:73:33:4b:5c:
f0:c0:43:eb:39:c2:d5:b7:cb:16:a1:2d:46:e5:ab:44:e7:bd:
16:fa:b0:b2:2f:77:b2:ea:ba:03:e5:e1:f4:54:ea:61:0e:f8:
a5:17:42:ba:30:81:a5:69:fc:61:66:bd:8a:bf:64:14:64:c9:
94:f3:24:27:67:69:57:5e:61:c6:5b:db:bc:61:ce:fa:72:d9:
33:53:bf:64:60:fc:22:2d:5f:78:eb:77:2c:16:00:bf:0d:9a:
28:53:28:04:20:d4:8f:b4:57:ec:41:72:fc:47:6a:19:38:54:
ad:e7:be:69:4d:71:c6:cb:0e:d7:6e:ff:c5:0a:f5:7f:f1:5f:
de:39:03:e4:a4:86:df:cb:34:f5:f0:18:2a:41:82:4e:49:30:
a6:a4:0a:6d:47:7b:cd:fc:7e:b7:96:51:7a:33:1a:35:b9:62:
69:cd:49:98:0c:64:93:fa:0e:63:d1:3b:e0:81:e1:df:6a:5c:
4c:fc:e6:2d:cc:13:ed:4b:93:b1:18:9d:04:4d:e8:14:61:6c:
ed:84:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:42 2025 by rpki-client