Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa
File: 25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa (raw, json)
Hash identifier: xX2ap6ITvAVMXnR/z1j3ZEqDqE27CwigpN/N7NatICY=
Subject key identifier: D6:FB:CE:CB:99:05:F8:CF:47:40:A4:B9:C9:DC:4B:C7:82:10:8A:D9
Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial: 010D0C9F43285848DEA114CE2A3F81E85858BAF0
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 1239
IP address blocks: 208.94.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:14:ce:2a:3f:81:e8:58:58:ba:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=2543b2fe-318d-41ad-98c5-0ccd802d4e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:53:15:6a:a2:04:ff:cf:41:50:28:0b:7d:
55:ad:b4:52:a4:61:6a:4f:ca:ad:a7:32:87:0b:ac:
f8:b0:60:f1:75:31:47:4c:51:4b:3d:c9:15:ef:bf:
1b:c9:70:6d:ea:5e:ca:c7:f4:ef:84:b7:d2:81:9f:
69:6a:8c:52:72:bc:62:5a:10:f1:a2:ca:f8:c9:60:
ce:f6:c6:be:ac:6e:b5:81:e0:0b:49:b2:d1:08:8c:
35:cb:79:0b:14:57:5a:66:70:c6:69:08:67:a2:fe:
a2:7c:4b:41:da:3c:c9:b8:5f:bf:c4:bd:73:6b:5a:
4f:ea:ae:ff:b0:ce:04:28:ea:02:79:0e:16:08:d7:
94:b1:2b:06:b5:57:13:46:b3:29:1b:0a:e5:00:22:
11:10:8e:f1:9d:91:0d:5e:94:29:81:d5:9f:a9:49:
74:c0:91:bf:45:d1:8c:b0:14:a0:4d:df:08:40:88:
19:1f:75:5b:9c:7d:a7:2b:0b:ec:5c:97:ad:e7:15:
ad:0d:96:f4:5c:f4:1f:a1:cd:55:7f:41:08:d2:f0:
a3:2e:b3:dd:a7:bb:b3:20:90:e5:c8:18:c0:c4:70:
1c:83:e2:11:59:00:72:e6:a9:ae:41:aa:54:e1:0d:
80:56:3b:d2:31:20:de:d2:a9:af:78:f0:3e:fe:e2:
0d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FB:CE:CB:99:05:F8:CF:47:40:A4:B9:C9:DC:4B:C7:82:10:8A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
X509v3 Authority Key Identifier:
keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:6c:30:ff:17:4d:2c:9f:d3:a3:c8:8e:fa:77:a7:d7:cd:23:
9e:dd:16:8f:11:cd:26:ba:20:d3:ce:2d:04:54:3d:e8:49:99:
1d:54:ce:2d:47:d7:18:3f:d5:58:2a:78:ab:20:a9:5d:25:e6:
3f:20:83:e4:8b:c4:7f:6e:68:b2:67:01:77:7e:fc:93:32:1c:
3b:fb:d8:c5:82:5f:4e:66:8e:cf:6d:3c:57:ef:b2:97:81:31:
a7:99:e8:c3:2b:1d:cf:be:77:2f:35:c8:28:7c:75:35:43:da:
d3:44:ec:58:6f:14:93:f3:23:2d:80:52:29:db:a4:71:64:a4:
30:de:ca:b3:50:f5:bb:82:59:59:70:dd:99:71:5b:13:e8:e4:
88:0a:8a:d2:52:25:96:10:57:f3:97:cf:be:64:68:99:6f:f4:
7e:10:a0:e9:dc:9e:1a:6e:9d:41:47:9b:f6:a3:47:04:46:4e:
1e:be:7f:32:ba:8f:d1:b9:e0:08:6a:44:81:3a:d9:73:d5:e3:
4b:b3:a2:0f:85:fb:4e:da:57:55:06:04:5c:4d:c5:32:4d:92:
e9:a5:c8:31:98:87:98:a4:75:f4:4c:63:37:16:cd:f1:59:a8:
00:20:20:66:33:dc:c3:34:fe:bf:c6:1b:22:00:05:85:d7:81:
ad:c1:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:44 2025 by rpki-client