Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/edb4852e-2acb-3ef9-b789-dceddea23eee.roa
File: edb4852e-2acb-3ef9-b789-dceddea23eee.roa (raw, json)
Hash identifier: YcYDGmrFQysdhOkVTdx4ONJHlTC6/zEoKTpKKINFOAo=
Subject key identifier: 4B:91:BE:8F:56:95:49:C0:30:33:A3:13:13:92:D3:32:8B:6E:B6:3F
Certificate issuer: /CN=69ae5b34-c59f-40db-9452-6e21ecb81731
Certificate serial: 010D0C9F43285848F926B0DB420C0600B95A2A20
Authority key identifier: 08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/edb4852e-2acb-3ef9-b789-dceddea23eee.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 32748
IP address blocks: 208.66.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:b0:db:42:0c:06:00:b9:5a:2a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ae5b34-c59f-40db-9452-6e21ecb81731
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=a90c08c5-d37a-40f9-b984-b74afb505d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:37:b4:f3:a7:c3:a1:9c:fb:f3:f4:9d:0f:
cf:76:b3:24:dc:bd:d8:46:bf:0e:05:9c:8a:00:ca:
d4:31:2f:b8:d2:9d:f8:77:05:96:7a:73:a3:6a:c5:
21:4a:61:82:12:81:57:75:28:45:bb:fd:0a:fe:f2:
0b:ba:cd:a8:a7:14:09:7a:92:8b:30:df:ab:64:de:
c1:b0:0e:d1:09:2e:0e:c9:55:64:45:71:48:02:e8:
96:a5:4d:d9:86:d9:3d:cd:64:bd:55:a6:6f:de:90:
09:c0:4a:69:cb:b6:28:c2:91:ae:ad:fd:11:8e:7b:
0c:45:6a:53:90:61:c9:cd:30:9b:1e:30:5e:6c:10:
86:4b:bd:42:1f:a3:57:c5:94:97:46:96:bf:1b:92:
74:5a:b0:b6:83:77:ed:f3:fc:5c:40:25:f8:b6:ab:
5f:93:d3:d0:e6:30:3d:96:d5:97:24:f3:75:d6:1f:
a4:b1:2f:11:24:ad:ac:cc:63:82:08:18:19:01:c9:
8c:ce:f3:50:a3:fe:cb:eb:3d:ae:80:2a:bc:05:ad:
79:15:2a:c8:16:04:58:c3:28:eb:21:e0:53:4e:44:
e7:2c:ba:07:59:f1:72:b9:ad:bd:d7:0a:1f:d4:cb:
6c:3b:c4:51:29:4d:28:f8:a4:7d:e8:5f:19:15:e3:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:BE:8F:56:95:49:C0:30:33:A3:13:13:92:D3:32:8B:6E:B6:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/edb4852e-2acb-3ef9-b789-dceddea23eee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl
X509v3 Authority Key Identifier:
keyid:08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer
sbgp-ipAddrBlock: critical
IPv4:
208.66.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:2b:2b:f0:ae:a0:3c:da:c4:3d:a3:e0:7f:fc:d9:53:ef:6c:
e2:65:73:9d:9e:96:ba:27:41:b7:ff:8e:f4:d0:59:af:b0:65:
05:34:e9:68:bc:64:38:f2:f9:be:58:5d:d2:96:99:12:37:6a:
dc:7d:1d:dd:e8:17:83:10:ac:0f:8b:e8:20:77:0a:5e:01:97:
cc:e5:e5:5d:bf:6d:56:bb:71:63:4c:db:a8:93:59:b5:8c:f5:
3a:21:79:56:75:c0:ee:7a:21:fd:64:11:70:47:04:48:cc:8b:
4a:23:c7:ba:39:91:01:69:5c:fe:cf:1e:49:07:bd:ce:ae:65:
27:7d:8f:8d:58:f4:f9:fd:71:5f:a0:4f:f8:24:5e:5d:32:97:
35:0d:fa:d3:d3:73:c4:11:29:23:c7:c5:27:c1:60:ec:5d:da:
ff:21:98:4b:11:d9:44:0c:3d:60:1c:42:7a:5a:97:2b:11:48:
d6:d2:6b:32:59:bd:d1:c8:db:b2:2a:f3:42:35:8a:2f:b4:ae:
b2:51:e9:89:60:40:f7:5e:36:55:ef:08:88:81:94:a2:34:95:
d2:89:c6:6e:14:e3:b8:ab:e9:41:ac:f3:45:17:bc:08:a0:e8:
0e:49:2c:43:5b:9e:d1:00:8c:6d:af:1b:fd:af:e6:6f:de:f1:
66:95:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:15 2025 by rpki-client