Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/2c3e03e6-02c5-347d-b291-fc8d740b703b.roa
File: 2c3e03e6-02c5-347d-b291-fc8d740b703b.roa (raw, json)
Hash identifier: gLwuEnKOs8D5CSdtiawSkKhyouux6lgd7OhsK28GBZo=
Subject key identifier: 61:15:FF:FA:C1:DC:CC:C1:34:F7:D2:92:97:7B:2D:7F:4E:7B:65:53
Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial: 010D0C9F43285848C53F4E22CB8E70F7789E0F00
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/2c3e03e6-02c5-347d-b291-fc8d740b703b.roa
Signing time: Tue 04 Feb 2025 11:48:41 +0000
ROA not before: Tue 04 Feb 2025 11:48:41 +0000
ROA not after: Mon 05 May 2025 10:48:41 +0000
asID: 46562
IP address blocks: 208.131.152.0/24 maxlen: 24
208.131.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:3f:4e:22:cb:8e:70:f7:78:9e:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Validity
Not Before: Feb 4 11:48:41 2025 GMT
Not After : May 5 10:48:41 2025 GMT
Subject: CN=86f515e2-9599-4211-837b-882c8c1a851b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:b1:1e:1c:ac:0f:a2:9b:a3:18:1c:c7:d1:
1f:31:bb:78:09:05:48:e1:42:52:a2:33:46:04:7c:
d0:be:c0:2b:f2:c7:9c:25:bf:42:52:60:4e:f1:9a:
a4:5b:cc:6c:76:04:93:53:3b:e6:af:d5:13:59:3d:
7a:5b:b0:13:8a:4b:e1:51:01:ed:1d:e5:ab:90:34:
bb:63:78:e6:d2:23:46:27:1c:6d:19:7a:ac:57:aa:
95:73:2d:fc:8c:2c:42:53:12:17:a8:c2:34:43:43:
14:fd:5a:34:29:cd:65:d2:a8:d5:38:23:0b:f2:4b:
bc:a3:58:54:b9:73:1a:f5:9d:ca:52:b4:9e:26:a4:
93:43:2d:a6:62:00:78:d2:e3:08:65:02:a0:44:c5:
ae:b5:6f:28:b6:14:dd:bd:c1:46:11:9f:ee:1f:de:
b7:64:5a:0e:66:3c:b3:50:c9:78:1a:cf:91:2d:24:
23:b9:24:2f:09:a4:9e:7c:08:c5:56:d1:f7:41:99:
9d:f5:8f:bf:8b:8e:7a:5b:69:fb:42:d3:a9:f0:20:
42:0a:01:8f:80:c5:0a:a4:52:84:5b:69:5a:85:c2:
60:10:42:ae:f8:34:41:6e:1a:9e:94:04:22:aa:ae:
88:51:00:89:14:6d:96:75:11:d0:4a:9b:95:6a:a3:
5d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:FF:FA:C1:DC:CC:C1:34:F7:D2:92:97:7B:2D:7F:4E:7B:65:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/2c3e03e6-02c5-347d-b291-fc8d740b703b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
X509v3 Authority Key Identifier:
keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
sbgp-ipAddrBlock: critical
IPv4:
208.131.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:7c:03:38:11:8d:0e:25:cc:06:04:35:40:78:a0:be:48:87:
36:4a:36:62:f3:46:57:c2:03:18:f2:e2:ff:52:29:34:e3:35:
05:87:33:59:bd:62:03:b6:51:9c:85:22:c3:07:2d:9c:1e:6c:
3c:fc:8d:53:66:e2:1d:9c:9e:a2:3e:77:fb:53:3d:da:b2:25:
fc:1c:8f:64:18:6b:cf:0d:ea:74:74:37:4e:eb:b9:34:aa:0b:
f0:a9:f8:f9:fc:48:a6:7a:a0:46:b1:3b:24:1d:21:a2:18:ac:
bf:e9:31:89:3d:7f:73:4f:a1:4e:c5:32:bd:47:a8:58:40:d8:
9e:8d:4d:23:13:54:f3:78:4d:93:62:cd:db:88:13:24:0b:46:
8c:27:d2:be:8e:2a:5c:e0:7c:50:b7:4b:34:c5:1c:57:72:47:
ef:0e:c6:82:b9:8b:68:42:26:c9:6e:be:69:87:d3:56:09:b1:
19:03:d2:80:04:fe:bd:13:07:ba:6b:4b:6f:2c:28:44:7d:c7:
8c:6c:4f:17:78:24:16:c0:97:7e:d2:68:6a:35:0d:05:56:fb:
0e:dc:54:5f:36:d9:87:ab:94:92:1a:b8:4b:eb:82:8f:f7:5c:
a9:c2:21:89:18:d6:d5:7e:46:ee:dd:44:f4:ed:14:2a:eb:73:
78:b6:ea:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:24 2025 by rpki-client