Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa
File: 9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa (raw, json)
Hash identifier: TTdrxhytZ64xDLkRUoSBbYk6NTO8RrJGey94130jQxg=
Subject key identifier: 39:5E:B0:37:B8:2F:46:A2:09:8C:48:96:60:8D:7F:E5:2C:7E:B8:BD
Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Certificate serial: 010D0C9F432858490E16C121ADF7FE0BAB6F8F00
Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 11404
IP address blocks: 208.70.146.0/23 maxlen: 24
208.70.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c1:21:ad:f7:fe:0b:ab:6f:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=496e1f05-4b09-4981-aced-21b554cfe1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:41:c0:32:6c:05:ec:54:43:2c:e5:55:2e:
6d:af:4d:3c:34:2d:c6:92:20:64:9e:85:b5:eb:7e:
dd:d3:fa:1e:80:68:ea:05:92:c1:6d:d4:fd:f2:4f:
8b:a4:66:5c:d0:40:c0:d9:f2:55:a1:98:2e:5b:af:
e3:97:09:26:9e:65:f5:7a:eb:e6:33:9a:6d:c8:1f:
19:42:d5:f8:2e:3e:36:58:ba:14:c9:09:ea:65:ab:
87:56:bf:93:25:f5:59:cf:92:74:ba:82:2a:92:e2:
b7:29:92:8e:76:f0:c9:6a:27:8f:69:df:34:d5:66:
45:4a:cc:ac:e3:04:22:5f:e9:bb:58:50:0e:f9:c4:
5f:4b:65:d0:f5:87:82:50:07:d8:ef:81:8a:c9:47:
39:2c:42:fe:7b:63:76:7c:c4:f4:6c:80:7a:d6:eb:
97:fd:5f:28:c4:7c:19:66:c8:4f:03:7b:09:13:ae:
96:56:69:4d:8f:fb:55:8b:75:05:47:42:b8:59:6f:
d1:14:18:64:b7:83:a2:f2:5e:90:f5:7e:8c:fc:00:
a7:dc:5c:c2:c4:56:27:90:cf:4b:a3:da:f5:56:02:
0a:3c:eb:81:7d:78:54:9a:04:b7:08:b0:20:ff:99:
3b:cd:1d:6a:1d:38:17:0c:01:95:8d:fd:3b:ef:7a:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5E:B0:37:B8:2F:46:A2:09:8C:48:96:60:8D:7F:E5:2C:7E:B8:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/9a1b0548-1d88-3285-bb31-d2afe85dad2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl
X509v3 Authority Key Identifier:
keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.146.0/23
208.70.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:74:d2:30:a5:77:03:24:d0:58:8a:fa:24:ad:8f:48:bb:e0:
eb:47:de:01:ab:d3:f5:ba:3e:1f:31:3a:7b:f9:d1:7a:57:e7:
01:9a:26:6a:a4:26:cd:41:15:14:a8:4f:c7:66:48:08:e1:05:
9a:05:7f:c7:f2:82:d3:68:ac:81:fd:65:3c:82:a0:2e:5d:64:
a7:e0:fc:86:5a:ad:48:d7:ed:0a:50:fd:33:15:e6:52:e6:af:
65:db:09:31:83:72:a1:53:f6:f0:a1:b1:1a:93:10:22:6e:e6:
b3:2f:fa:88:55:8a:18:2b:a7:4f:b3:80:ca:76:a2:aa:3c:e3:
93:6d:62:40:b4:34:80:78:ca:bd:8a:31:ea:95:c7:68:90:63:
ca:c3:5f:4e:2a:aa:02:28:f1:3d:b2:37:7c:f2:00:18:bd:e5:
cb:02:d8:71:be:6c:6e:fa:d7:16:51:bd:a2:c2:1c:a3:74:40:
0b:d2:5b:89:32:71:85:30:20:95:7f:ed:dc:9c:60:56:44:3a:
6c:69:ec:20:70:56:93:22:8b:b2:33:0e:b1:7b:c5:54:fa:f4:
73:d5:c7:c2:a4:37:b5:71:8b:6d:ec:ae:ea:05:29:71:55:40:
47:37:ae:70:b0:f9:b7:c5:5b:3e:8b:42:19:e6:d4:52:62:dd:
a6:53:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:47 2025 by rpki-client