Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa
File: 709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa (raw, json)
Hash identifier: /yhexvVX+8NgLXvtzqcbo/Fvq31XGeY8f+qMz+L/HIg=
Subject key identifier: 0E:D2:87:CB:38:1F:9E:DD:D8:75:8F:CE:66:F3:4C:C3:32:45:77:C0
Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial: 010D0C9F432858488C45CE5B488D82CD09798680
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 22359
IP address blocks: 208.52.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:ce:5b:48:8d:82:cd:09:79:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=ce484906-282f-4687-bc31-e84d017ced8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:b2:72:57:53:e6:f2:d8:0e:81:4f:5b:45:
9d:3b:5f:2e:3b:40:1e:3c:2f:55:d3:3d:98:b3:92:
1f:98:50:7e:89:5b:1f:da:e4:7a:4f:b1:1f:34:b7:
d7:b8:6e:0d:56:16:25:d0:23:53:9d:ae:ee:85:f3:
8d:d8:e7:23:ba:11:9e:e3:a2:ec:94:d8:b3:78:08:
bf:82:b7:51:ec:81:e4:ce:70:ec:8a:dd:64:62:94:
6e:80:9a:4e:f0:a2:42:b1:78:74:82:47:a8:f9:06:
3a:66:93:58:04:8a:7f:84:2e:5d:51:b4:05:0a:8f:
16:f6:99:39:fb:b1:b0:ac:bc:03:b0:59:ae:70:07:
0d:1d:79:97:02:77:c0:6c:f7:eb:84:09:f8:65:9d:
5c:c6:6a:89:c3:79:b2:36:b9:db:95:82:3b:eb:7b:
f6:8b:cd:56:16:06:6c:5a:f7:05:37:2b:b6:a1:2d:
db:1f:70:f4:93:6f:0a:9b:59:70:ea:91:69:6f:7c:
f5:fd:90:9e:c9:a7:aa:51:57:c5:ec:4e:c2:a6:66:
9d:3e:7e:10:8a:01:9a:b4:94:0f:ee:39:e4:d1:07:
4d:11:26:f1:07:e0:d6:b8:da:dc:9f:74:06:84:52:
6a:53:44:ad:0d:5d:b5:64:df:9b:29:6a:a1:e5:80:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D2:87:CB:38:1F:9E:DD:D8:75:8F:CE:66:F3:4C:C3:32:45:77:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/709acb8c-a359-3e83-92b9-2dd7fcaf5d5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
X509v3 Authority Key Identifier:
keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b7:2d:c0:a2:8a:bb:80:94:e5:a4:78:af:49:25:3f:5c:0e:
af:29:58:b1:e8:8d:d1:86:51:7a:1e:df:91:8a:a0:28:d0:1b:
be:53:b4:47:fe:2d:60:07:d8:41:09:88:af:72:76:36:e0:96:
dc:3b:23:0c:23:ed:ca:59:25:6e:25:50:df:06:39:13:cd:6c:
95:a0:a8:44:3d:21:6d:41:70:01:bc:d5:21:f8:cc:5d:41:ee:
c6:1a:35:43:ef:93:64:d9:b5:7b:61:dd:f7:70:0c:58:bc:6b:
fb:6c:c2:58:34:b3:14:bc:a0:af:2a:1d:96:31:09:ef:61:ca:
7d:c3:dd:8c:ff:fd:70:7f:d5:7c:48:ba:b2:bf:db:00:fe:c5:
db:ae:9e:9c:b8:d6:43:95:df:71:07:31:69:7d:17:e3:ef:90:
7f:b6:5e:ff:33:60:2c:fc:ec:4f:a2:b4:25:5a:e8:b1:e9:07:
95:ff:d5:37:3d:b0:6b:87:e2:6c:dd:9d:b6:19:4a:c0:53:e2:
ec:18:e8:7a:5a:64:50:d0:1b:52:ed:5e:3f:d7:47:79:68:e1:
ea:f1:aa:91:0e:90:c8:de:52:a4:50:43:5f:ce:e8:ee:e3:11:
25:16:a0:46:93:e8:06:cb:88:ad:bb:d4:e7:3f:a1:61:d5:ec:
30:fe:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:02 2025 by rpki-client