Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/f58def73-1ce2-3295-a928-78a8cb366a47.roa
File: f58def73-1ce2-3295-a928-78a8cb366a47.roa (raw, json)
Hash identifier: uC+XaUZETvyvb1eY3sdr2virYqnwhJUZVTQmoHgefPw=
Subject key identifier: 10:12:CA:BA:E9:3B:99:D9:98:3A:90:33:6F:59:55:B5:B3:8A:15:9B
Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial: 010D0C9F43285849393E76CAFB6A21C79B80AD80
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/f58def73-1ce2-3295-a928-78a8cb366a47.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 6079
IP address blocks: 208.72.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:76:ca:fb:6a:21:c7:9b:80:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=8e6a8669-cd86-488f-8597-b09c1c08f228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c7:76:dd:a2:88:0c:94:7e:f1:e0:b0:33:4d:
46:4d:5f:45:02:90:65:dc:ae:ab:e1:37:b1:b3:cb:
04:02:8b:d1:a9:eb:ae:e5:55:35:59:47:63:d7:8f:
64:73:f4:3b:9b:5f:35:c7:48:96:1a:11:a6:fd:93:
6c:53:c6:70:1c:6e:6e:fd:74:90:2a:99:46:b1:2a:
4f:d4:95:ed:ad:2e:8a:6f:58:a7:60:95:3f:7e:21:
5f:e6:6c:00:76:74:a9:1c:01:96:20:30:be:ec:da:
d8:d9:de:02:17:bc:07:1b:2c:60:23:02:09:dc:69:
41:b8:49:5d:cf:ec:4e:d8:84:81:44:73:23:e7:61:
83:24:fc:ae:62:8e:d4:10:56:ab:d9:c1:3d:ef:b9:
15:c1:7c:b7:5b:7e:b9:67:9f:7b:00:92:dd:cb:cf:
70:8d:3f:d0:fd:d1:83:80:19:c3:07:a4:a5:7e:fa:
63:21:f1:31:a0:36:f2:cc:7e:34:9b:b6:01:32:6c:
7c:44:9e:fa:6e:47:b7:e9:14:14:38:04:49:0f:93:
c6:ab:6b:dd:f1:93:55:67:42:10:7a:a2:bc:c9:b5:
f0:d8:17:6c:aa:33:57:90:ee:36:8f:90:90:5a:fd:
89:67:26:08:9f:f8:72:89:54:f2:72:3e:d3:1e:c7:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:CA:BA:E9:3B:99:D9:98:3A:90:33:6F:59:55:B5:B3:8A:15:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/f58def73-1ce2-3295-a928-78a8cb366a47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
X509v3 Authority Key Identifier:
keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.72.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:f5:4a:7b:e0:90:4f:22:72:5e:10:99:3f:35:5e:a2:7e:fd:
0d:ac:e9:86:fc:2b:60:90:42:ed:37:e5:95:3b:1d:ac:77:5e:
2d:ee:9f:58:90:e9:20:c7:5c:f9:60:36:5f:3a:b5:ce:dd:b7:
b4:47:b2:f7:21:8e:4a:71:53:69:a2:9e:bd:8f:a9:7d:a1:5f:
5c:f9:ac:64:09:42:14:14:f3:88:14:de:82:d4:32:22:13:d5:
2a:cb:cc:a0:36:49:f1:a8:e9:b0:aa:27:70:ae:60:c8:76:2f:
e0:74:52:b1:a8:b7:4a:cb:a9:ac:9b:66:4e:36:63:aa:17:dc:
74:fd:a4:fe:de:b5:f4:39:4b:6e:41:6c:e1:0c:da:3f:dd:1c:
92:9c:56:69:ba:33:af:b2:02:6b:b6:d7:4f:9c:7f:94:cb:b2:
45:42:71:32:da:1b:c7:fd:c1:92:9f:9e:89:fd:b7:d8:78:c9:
b6:51:43:18:ff:86:94:cc:ae:3e:76:e5:c8:77:0c:a6:2f:bf:
9a:cb:e5:b4:fb:e8:35:f4:66:1c:ae:79:48:79:13:39:1d:9e:
39:2d:cc:d4:a1:aa:f2:34:5a:91:75:a1:20:dc:d3:b8:de:c1:
70:3a:55:d5:87:1b:7b:14:8d:df:22:69:51:7b:54:2e:25:3e:
a7:36:21:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:38 2025 by rpki-client