Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa
File: dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa (raw, json)
Hash identifier: qtyYtDE01U2DuYsITvWKLyQkmtUfA5IfopFMgnZBJUc=
Subject key identifier: 7E:E2:29:AE:FD:1F:70:FA:09:22:06:CC:49:E9:F2:6C:23:C1:B5:1C
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848ADC609216078DDD32AF7ED00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 21723
IP address blocks: 208.181.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:09:21:60:78:dd:d3:2a:f7:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=66d685ef-5a06-4459-a299-72d9d185d41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:7e:ec:b7:22:9c:d1:c6:37:14:9c:b3:9e:
c1:10:5a:be:bf:bf:76:c6:f7:21:be:f7:3a:3d:d6:
7c:d7:73:7f:9d:43:23:03:4b:c9:ef:bc:3c:65:36:
6c:11:72:90:7c:d7:a0:b5:40:2f:67:33:1a:a2:2f:
c6:92:50:11:ce:32:b0:d4:37:26:40:01:31:0b:72:
20:53:f1:19:ca:92:2c:66:7e:08:84:a2:50:06:40:
d2:44:f8:01:fe:d4:fc:2f:99:36:27:d0:87:73:89:
a7:0a:cc:31:e8:20:f0:40:b7:20:5c:2e:3e:2c:6e:
ae:94:e8:c6:1d:30:3d:93:80:c3:5e:72:97:d4:ad:
43:62:5b:93:dc:12:0c:8e:79:6d:93:4e:af:dd:5b:
95:a9:45:4c:fa:f9:ff:21:cb:49:c1:fa:28:9d:05:
b5:a8:a7:fb:a7:d9:fd:ac:2e:62:7a:2c:67:26:4d:
1e:60:db:cb:d7:23:17:f2:f3:20:30:b4:34:c4:db:
50:e0:2c:47:85:6f:72:93:2a:64:77:81:92:8c:77:
f1:49:20:bc:8b:86:c9:90:d4:f4:8e:e0:ad:ba:6b:
e1:7c:ce:aa:a4:2f:e0:a9:d6:bb:e2:35:e3:3d:91:
6c:d3:67:01:fa:20:92:2c:76:78:c4:33:15:49:14:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E2:29:AE:FD:1F:70:FA:09:22:06:CC:49:E9:F2:6C:23:C1:B5:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/dc252e64-dd22-3a4a-bdda-ca69ab5cd878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
208.181.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:5c:8b:cb:4a:b5:c5:8d:12:08:cd:fb:aa:bf:9a:28:eb:39:
dd:98:c8:24:b6:69:1d:e2:26:57:b8:36:1c:fa:c4:23:f5:50:
7f:17:ba:6f:8f:9b:41:c5:df:40:92:2d:3d:9c:f1:55:73:74:
27:5e:e1:a7:f6:76:a2:9a:7b:df:d9:c5:63:33:92:7e:77:19:
8f:f1:f2:1d:03:19:83:5d:61:17:52:80:c0:94:fb:82:2f:27:
50:e4:f1:09:97:1c:ab:51:56:22:06:fe:83:ef:ad:e0:64:4b:
25:1c:00:a5:d3:1b:ee:95:d3:fa:77:62:a9:0d:b5:62:36:d4:
6c:c9:b6:ca:2d:89:da:61:14:a4:a6:70:77:ad:db:7b:23:d2:
1c:14:3e:2b:5d:36:39:74:40:6f:ca:00:19:33:fd:45:64:bf:
bc:dc:7b:83:8a:c2:62:10:50:d5:d4:ce:25:be:90:18:1e:83:
2d:15:62:ba:b8:c2:24:fa:22:c7:73:a7:9b:e4:ff:d5:3c:74:
1b:c9:19:4f:0b:97:81:59:fe:ce:05:dd:ce:f3:d5:dd:c5:15:
ca:9b:fe:60:1b:14:f9:f3:af:5d:3f:fa:ed:0d:0f:71:a6:27:
57:f3:41:24:44:bf:b8:ab:f1:8d:e4:b4:da:50:e1:92:1d:66:
af:57:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:18:58 2025 by rpki-client