Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/3cc28a91-f7d9-3cd5-aa0b-d151dd067306.roa
File: 3cc28a91-f7d9-3cd5-aa0b-d151dd067306.roa (raw, json)
Hash identifier: r1GGOo0S86Y7NgOUEAEy4cObN88p9d4+AoTETaM4uhQ=
Subject key identifier: 73:38:08:21:38:87:58:2B:34:27:1C:2F:1A:E3:B8:5C:FA:15:10:81
Certificate issuer: /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial: 010D0C9F432858490E16C5DCBE2837B18DB36D80
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/3cc28a91-f7d9-3cd5-aa0b-d151dd067306.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 11924
IP address blocks: 208.83.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c5:dc:be:28:37:b1:8d:b3:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=08fa2ad2-9ead-4b22-8b07-19d384c19aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:62:fd:67:87:09:7a:48:bb:1f:c6:ef:5c:
ac:33:db:d7:c1:0d:ab:4c:cb:06:a5:e6:70:d4:1e:
d2:65:79:a7:b6:ff:25:04:07:20:25:72:7d:75:6f:
4d:c7:52:ac:1e:03:09:e2:c5:99:45:65:61:73:ff:
59:a1:98:32:2d:78:ba:97:4d:bb:2e:b0:bf:d2:a7:
7e:32:8b:30:0b:4d:3f:ce:15:e3:9a:e9:b7:f2:c3:
0d:eb:c5:d4:37:e9:2c:a7:eb:c9:83:b3:a6:39:ab:
28:28:47:4b:bf:e6:75:97:e1:23:3d:24:16:9b:2f:
0f:a0:e1:b6:35:41:c8:5a:5b:6d:2e:4a:5b:2e:68:
1b:dd:cf:aa:6d:8c:bb:d6:d5:94:1a:55:d1:c0:0b:
f3:be:77:38:f0:0a:8e:b1:19:48:2b:8c:7e:91:55:
97:7a:1f:db:e0:d0:e0:3f:7e:63:b5:ba:55:83:52:
f1:c3:28:fa:6e:41:69:8d:0e:9b:b5:48:b8:60:0a:
48:92:66:98:f2:05:70:93:63:a6:5a:a5:ba:60:24:
92:a6:60:78:ca:d6:10:db:b8:9f:77:15:de:03:cf:
17:72:05:97:0f:4b:dd:05:6e:47:41:dd:f9:8c:c5:
c0:8e:5c:18:05:6a:81:f5:a0:ad:74:7a:7f:da:7a:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:38:08:21:38:87:58:2B:34:27:1C:2F:1A:E3:B8:5C:FA:15:10:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/3cc28a91-f7d9-3cd5-aa0b-d151dd067306.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
X509v3 Authority Key Identifier:
keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
sbgp-ipAddrBlock: critical
IPv4:
208.83.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:0b:4a:f3:a9:92:46:23:ac:d2:26:d6:8b:7d:71:28:19:8b:
f7:9e:c7:16:34:c7:d8:87:24:73:7a:4a:5b:b6:e9:73:b4:74:
01:5f:c4:c1:d1:ba:8b:bc:e8:49:1a:dd:6b:1f:a7:d3:5a:ad:
79:47:90:6d:fe:5d:77:dd:bd:0d:3d:e7:0c:83:3f:d3:95:52:
1d:27:4e:9a:59:d6:7a:1a:e2:4b:69:48:bc:17:7b:f6:fb:eb:
14:32:ba:88:ef:50:5d:f7:25:cc:e5:82:41:51:1b:d5:40:f4:
c4:11:fb:eb:43:94:eb:cf:1e:00:b6:a6:41:09:58:0d:5a:f8:
c7:a1:c7:8c:cc:5e:9f:6d:9e:35:08:ca:04:30:58:b1:46:04:
33:e0:32:36:1c:43:76:cd:5e:f2:7f:b0:c9:1b:9f:cd:6b:1c:
a7:e4:2e:ec:7e:9e:5c:46:38:76:79:94:f6:ad:9c:82:c8:03:
9d:ff:ca:a2:bd:48:3f:b8:db:de:e3:3c:fb:b6:1b:03:86:62:
4f:2a:f7:f6:fb:77:81:6f:59:93:38:42:6a:04:80:2b:d1:68:
ab:67:3b:7e:94:ee:92:ec:95:75:f1:2a:a5:7a:04:17:38:77:
1c:47:23:9d:ac:f5:c4:77:8d:a6:f9:eb:fe:ff:86:6b:b5:56:
a5:13:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:47 2025 by rpki-client