Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/186ed7ac-325e-3492-846d-0e71a30f3fd6.roa
File: 186ed7ac-325e-3492-846d-0e71a30f3fd6.roa (raw, json)
Hash identifier: /jNkadIbaIkXTU3XsT2nrh9sAlHF0kr8eqA3K7SXbKI=
Subject key identifier: 60:58:93:CA:6C:8E:EA:A9:A0:6D:F4:B7:F7:8E:BD:A4:EB:8E:12:5C
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584925B3A83A984ADD5D6543CC00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/186ed7ac-325e-3492-846d-0e71a30f3fd6.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 13576
IP address blocks: 208.53.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:a8:3a:98:4a:dd:5d:65:43:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=67848b7d-c8e3-43fd-91c2-c1f859a7a4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:b8:e6:46:fc:1a:14:9a:ed:d0:4c:59:dd:
ab:55:3b:5c:e9:93:b4:f3:b3:a4:e8:ee:9b:08:4c:
21:61:8f:8c:40:12:68:b8:f9:25:45:a1:00:87:42:
47:19:94:5a:37:85:cd:ae:59:86:19:39:0f:17:7a:
ee:f7:53:f1:e8:41:da:35:c7:75:c3:f8:f5:fa:8d:
99:e5:4b:5a:8a:ba:3b:c7:b1:60:45:2f:d6:06:7d:
95:34:25:f0:e8:6d:49:cb:a9:0f:a7:e8:fc:d4:cf:
7f:2e:db:25:29:cb:23:f0:57:69:2e:bc:6b:b2:a9:
35:1e:51:19:13:66:63:41:be:fe:93:1b:2c:e2:06:
6d:1e:be:a6:56:46:f4:2b:00:14:83:18:04:f6:ad:
08:75:a8:a5:bd:09:c9:96:a5:79:7c:1f:b0:39:64:
52:ab:b5:6b:c9:b3:a5:62:c3:e8:ca:93:28:07:e0:
19:5d:ab:f9:5b:33:2f:0e:c3:ee:bc:cd:04:fd:3e:
13:04:53:e5:87:a9:7e:91:90:9c:f0:79:1e:41:0c:
80:a1:d7:25:d0:f3:c1:71:46:e2:3a:e9:5e:90:a4:
a1:af:f5:7e:fe:9d:28:7e:50:bf:db:43:f6:9e:c0:
21:c4:1e:f6:b7:f3:ce:e1:b1:cb:17:5c:16:b1:02:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:93:CA:6C:8E:EA:A9:A0:6D:F4:B7:F7:8E:BD:A4:EB:8E:12:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/186ed7ac-325e-3492-846d-0e71a30f3fd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:a0:95:60:a0:8a:5b:71:84:2a:cf:d9:0f:b8:bb:83:e6:60:
43:35:e7:a4:9d:3f:85:45:58:d1:b8:0c:d9:ec:be:cf:1b:4a:
1b:fc:5b:29:e7:b2:05:47:a5:84:ef:7b:9b:58:f6:30:3d:9b:
27:ec:50:ab:53:e4:ed:5b:51:43:5f:62:31:96:bf:f7:d9:32:
ad:ff:70:e8:34:e8:c0:5a:8c:ab:fd:fc:33:b5:8b:a0:cb:88:
e9:6b:0f:bb:5d:d5:7d:26:e8:4b:f4:01:d2:00:a0:1b:73:e1:
f9:13:cb:bb:92:d4:53:8d:90:04:4c:fb:1f:b6:14:8a:b9:dd:
eb:8a:a2:4c:b3:6d:11:68:0f:d0:1c:da:7c:3e:63:85:ca:bc:
7b:f1:10:d6:86:3c:b2:da:01:9b:c1:14:63:95:db:33:fe:4f:
45:11:ff:eb:b8:f7:54:8c:98:3c:c0:5b:83:da:0b:53:7a:03:
67:49:c2:5e:36:6a:70:79:ad:f5:e5:c1:5e:33:43:cf:c9:83:
5f:91:d5:09:45:77:93:e7:50:e8:bf:e1:26:13:bd:9d:79:72:
c1:89:a6:68:39:99:c3:68:d1:a1:1d:f6:a9:a0:18:35:3e:06:
a2:29:81:13:51:1b:a7:5b:c8:00:6d:2c:76:7d:27:2d:c8:da:
93:97:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:13:26 2025 by rpki-client