Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa
File: 503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa (raw, json)
Hash identifier: WvFlduZruULH4P3eds7qbp+U1CFrtJyqpBPaf79U5gQ=
Subject key identifier: F6:1B:29:67:9E:7D:93:E9:90:64:D4:46:62:7B:08:ED:5F:55:D9:CE
Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial: 010D0C9F432858489E6B6B0F2D1C6018DABF7078
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 14618
IP address blocks: 208.64.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:6b:0f:2d:1c:60:18:da:bf:70:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=cee346ac-4ade-4129-9409-b1d357496cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:39:7d:28:51:1c:8a:97:62:d7:e5:2b:35:f5:
10:6d:ef:b8:9b:0e:80:27:aa:4d:53:ea:44:6e:2b:
e9:7c:ed:09:f7:5d:65:8f:9a:2b:fa:dc:ba:a2:6d:
cc:a8:b1:41:3b:9c:a2:ff:0d:83:03:6c:90:df:31:
e5:8a:bb:4c:6a:b5:42:e4:76:43:26:9e:58:d8:98:
7e:2d:e6:bb:dc:3c:7b:78:e9:2c:33:65:7c:7e:3c:
15:18:2c:d7:30:87:4c:08:9e:10:dc:c7:06:d7:de:
40:91:34:62:fe:38:29:98:a9:d3:1f:ab:6b:16:56:
9d:54:d9:3f:bb:2e:37:70:3b:1e:65:3f:59:e2:a6:
ef:a0:84:7f:cd:b2:c6:87:d9:a3:98:0b:7d:4e:fd:
50:6e:92:e1:52:16:d5:b8:32:1a:5a:02:1b:a0:20:
28:0b:a3:03:b1:b3:66:01:10:ec:49:f7:89:3a:ce:
f2:9a:6f:23:07:65:16:a7:55:f6:06:1e:f2:65:cb:
98:58:ab:93:e5:e3:51:d5:55:d9:b6:d1:e2:f7:5c:
89:bf:49:31:97:b7:fe:71:2e:a0:48:22:02:ff:cd:
ee:b8:33:70:a2:23:a3:be:9b:17:9a:40:b3:87:de:
b3:1f:45:93:0f:9f:27:1c:b8:4a:d9:c7:c8:62:60:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1B:29:67:9E:7D:93:E9:90:64:D4:46:62:7B:08:ED:5F:55:D9:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
X509v3 Authority Key Identifier:
keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
sbgp-ipAddrBlock: critical
IPv4:
208.64.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:e3:91:d3:b8:f8:f0:23:4a:b6:82:31:fa:c5:99:dd:45:31:
e9:cf:12:cf:75:ec:d1:d0:fe:ef:01:08:43:31:31:9c:93:df:
7e:19:3e:04:33:fb:e6:bf:7f:12:14:f4:9b:a5:e0:d9:97:50:
8a:e3:74:3e:3b:b4:b1:30:01:09:25:da:85:eb:4b:4d:68:0b:
47:d7:ba:54:75:3b:cd:86:26:ae:84:a0:b8:21:1f:a5:7e:b9:
d6:32:07:6b:e2:d7:dc:86:fb:c5:aa:b7:82:28:e0:83:e0:65:
e6:83:44:88:62:59:c9:28:00:2a:34:89:10:16:66:d1:b8:9c:
8c:06:a0:e5:fc:fa:47:27:75:e7:39:f5:df:47:2e:99:b2:c1:
de:54:fc:1b:4a:3e:d5:fc:52:e1:f3:cd:ca:15:b8:72:66:80:
ce:25:97:77:f8:9b:dc:32:94:34:14:19:5c:55:26:94:6d:3d:
dc:3f:db:b2:f8:16:1c:9b:7a:b3:f9:1f:49:65:b8:a8:92:9a:
03:61:b8:f5:61:c6:f4:f3:b0:de:4f:4a:fa:ad:68:be:1a:47:
9e:cb:ff:3f:e2:57:90:60:cf:cf:40:61:75:8c:a9:f4:51:3c:
a7:d2:36:1b:9b:10:1a:b6:2a:60:7d:3f:79:56:e1:d0:42:1d:
6d:02:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:15 2025 by rpki-client