Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa
File: 15918682-1f44-3387-abb8-f7772b5f9f5e.roa (raw, json)
Hash identifier: JqU85PkRT9vbND0/rBrnssSnXZcvUp14TqbF4MkajFE=
Subject key identifier: 65:B0:CA:5A:39:0A:0E:1E:13:76:39:75:69:66:F7:A4:18:01:53:C6
Certificate issuer: /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
Certificate serial: 010D0C9F43285848FD569A0F145F6D30E9016480
Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 208.91.36.0/24 maxlen: 24
208.91.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:9a:0f:14:5f:6d:30:e9:01:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=570947ff-43d5-41e9-8291-5c5586ed7a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:b9:b8:7f:9e:03:1f:4b:4c:17:8b:11:82:
89:61:4a:8f:cb:59:3f:80:98:35:a2:b4:b3:1b:66:
a1:6b:5e:df:e9:09:79:28:14:a2:25:bb:29:0b:ae:
b1:06:7f:db:5e:d3:d7:ef:61:2a:26:0c:5e:d9:50:
2c:57:15:2e:f1:fa:b4:28:ba:72:9e:8a:8b:44:91:
80:cf:c2:29:e9:97:05:80:46:00:b4:2b:bf:af:ce:
59:56:0e:aa:9e:6a:b9:52:2d:35:c6:c2:7f:b9:af:
38:0e:11:1b:87:46:b6:34:d3:74:ad:15:36:cc:bc:
dc:92:ab:79:f1:4d:13:37:80:8a:75:75:53:e5:ab:
0a:1c:af:23:1d:65:f0:de:0c:db:c1:41:3e:5c:56:
63:ce:5a:1d:42:79:cc:b7:72:f7:19:12:bb:80:d5:
9a:02:1f:ce:83:27:92:84:0d:f2:91:e0:86:73:55:
70:c7:2e:e5:78:ad:7f:86:be:70:cc:e2:f7:73:4c:
89:33:e7:f0:dd:90:c5:db:e3:93:ee:1e:cd:85:49:
64:56:8e:96:76:51:41:75:71:eb:86:f6:c4:c2:37:
cb:43:2c:52:3b:cc:d2:1a:d5:88:c6:48:a4:fa:08:
53:0e:a4:3e:32:35:9e:38:cf:eb:c2:ec:57:af:35:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:CA:5A:39:0A:0E:1E:13:76:39:75:69:66:F7:A4:18:01:53:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl
X509v3 Authority Key Identifier:
keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
sbgp-ipAddrBlock: critical
IPv4:
208.91.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:86:91:46:e3:94:7a:3a:5e:5e:a8:23:5c:8a:4b:d6:03:9a:
f5:24:ef:f9:bc:80:03:ae:c9:fb:15:eb:65:58:f3:54:21:de:
dc:d4:90:a4:10:c1:c2:97:be:f8:1d:40:af:8b:38:c6:56:d4:
7f:8c:7b:51:d5:95:eb:49:3a:ab:78:30:14:34:df:b6:d0:eb:
8c:c4:31:27:c1:fa:f7:5b:f9:8b:24:88:fa:72:1f:47:79:50:
f5:7a:32:25:88:7d:8a:d4:83:c0:31:a8:c0:f9:52:24:0b:2a:
94:fb:c3:91:4d:e1:29:fa:af:c9:d3:37:8f:2f:04:77:87:09:
3f:cf:f9:1e:13:6d:d0:f6:b1:8a:30:37:56:4c:ee:55:2f:40:
38:a1:d4:6d:1a:cc:99:d6:cc:7d:92:0d:73:bb:1d:e3:8b:aa:
9d:48:55:eb:61:e1:55:8c:f0:da:e3:20:b1:6d:f1:66:23:45:
b4:eb:ca:4d:fe:30:a0:67:50:a5:6f:b3:fe:72:a0:ce:3d:a7:
e7:b2:80:38:39:7f:80:d1:eb:7c:28:92:a7:c4:a2:91:f6:30:
8e:c4:41:11:b0:2e:b1:9e:a5:eb:29:2c:20:be:4c:27:ad:2f:
17:8c:29:c8:24:ee:ba:ea:97:61:02:06:09:e2:6d:61:4d:89:
cd:de:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:17 2025 by rpki-client