Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
File: ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa (raw, json)
Hash identifier: 4QXcmXClTqzdPs7FSMX6KY4365n+tpoKPejKdv3OdOQ=
Subject key identifier: 28:05:F6:EC:35:7A:FD:65:BD:DE:AC:DE:EE:B3:57:3E:EF:5E:2D:83
Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial: 010D0C9F4328584950F96E78CA9749906D763C00
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 14618
IP address blocks: 208.88.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6e:78:ca:97:49:90:6d:76:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=09f1e8f2-34c5-499c-9486-9eb21071aad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:38:3a:5b:0c:59:b6:c3:4a:8f:77:dd:e5:59:
a7:ab:56:56:fa:08:04:4e:8e:78:78:ef:5a:0e:61:
34:68:c1:f6:c5:96:74:10:04:ff:16:4a:19:79:8d:
37:85:34:43:ea:ff:7b:f1:e6:f6:7a:1d:2f:33:1c:
fb:20:4a:5c:39:56:99:d2:72:45:33:0b:cb:21:f3:
da:b6:13:8c:a1:db:81:89:13:0c:37:44:a9:25:73:
34:44:40:28:4f:aa:aa:5f:12:04:c1:7d:65:18:cd:
50:57:d4:de:0f:fe:64:2d:25:32:ef:e0:b0:fd:6a:
2a:1f:7b:a1:aa:d8:09:9a:11:7a:e0:2c:31:61:29:
5a:40:a2:42:fc:00:0c:f4:6c:d5:dd:17:d6:9a:64:
11:4e:72:41:a2:54:c1:04:4e:0c:02:63:ec:04:17:
ba:7f:0c:c1:01:16:c7:6c:49:64:67:32:13:69:70:
65:83:44:d0:5e:ca:5b:38:70:63:ea:ee:49:67:9a:
86:34:0c:90:1d:89:cd:6e:64:31:4b:40:72:31:15:
c5:71:e3:b1:a6:76:3c:1b:d8:43:e7:f7:d6:6a:64:
0a:04:f5:65:f8:fe:80:dc:ef:d3:fe:4a:90:b4:4e:
2c:aa:83:b2:85:c8:20:dc:be:fb:94:13:9b:2b:36:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:F6:EC:35:7A:FD:65:BD:DE:AC:DE:EE:B3:57:3E:EF:5E:2D:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
X509v3 Authority Key Identifier:
keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
sbgp-ipAddrBlock: critical
IPv4:
208.88.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:15:79:88:8f:f7:64:86:4d:00:78:cc:24:26:d8:d3:c2:74:
f2:36:eb:0a:19:42:8e:2b:3e:7d:de:13:c2:36:69:da:a6:ef:
0a:5b:64:66:81:a8:8e:70:6f:c6:f6:ac:c7:8b:f7:e3:0f:98:
a8:d1:d5:a8:ba:7b:23:d3:3c:ec:e8:3f:24:d6:b2:6b:9b:5e:
88:5d:89:05:3f:77:cc:07:31:3d:ba:1c:e0:2b:00:58:1a:f4:
53:7b:8d:2e:cd:b5:f8:2d:a7:ec:5d:10:5e:f0:38:2b:98:f7:
13:c7:6f:fc:54:05:88:6c:d1:f3:b8:2a:15:60:08:0e:7e:ec:
60:02:52:e7:c0:80:20:80:81:b5:31:c0:27:69:d1:77:72:bd:
d3:94:8e:ed:52:19:e8:40:5e:ee:d2:05:d3:32:eb:aa:31:d0:
3a:6b:cb:5c:dc:07:c1:b0:0a:75:2a:2c:ca:3a:5e:c0:2f:be:
06:30:0a:0d:59:61:80:5b:e7:45:b0:6e:4d:70:23:14:91:28:
1b:38:cd:f2:c3:5b:92:44:35:d3:cd:e4:19:76:de:79:06:94:
1a:63:0e:00:a6:09:80:c2:78:6d:f0:f3:f9:98:6d:e1:ad:c2:
b4:04:bc:2b:c4:d7:76:f3:f5:40:a4:12:a1:a1:4f:15:86:16:
83:81:2a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:21 2025 by rpki-client