Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa
File: b1c86e78-67c7-333a-928e-a0cff3179bb3.roa (raw, json)
Hash identifier: MJAtcdbFETynUjOVVuzZPrOa/hLWQLwT2t6jvPYhfpU=
Subject key identifier: CB:E1:3C:33:2F:14:41:1B:03:7F:78:40:61:F8:B2:47:E2:5F:59:72
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584925B3A7EC924A9B8160855100
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 13576
IP address blocks: 208.53.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:a7:ec:92:4a:9b:81:60:85:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=0fc43376-13e5-41ea-beee-8eb422df2f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4e:f7:53:4d:8c:98:3d:96:56:ce:97:b5:8f:
6d:eb:06:6b:a2:ae:64:c2:5a:46:e1:77:5a:e4:be:
5b:9d:93:7e:10:38:5f:32:b9:12:c4:c0:90:df:cd:
4c:cb:cc:e7:61:0e:24:bb:a3:a1:7b:de:09:05:4d:
e0:23:e7:6a:57:f4:7f:44:88:a4:37:b7:18:f0:c0:
8f:a8:7f:d8:4c:91:0b:67:17:eb:34:79:15:52:0e:
59:21:6f:35:57:af:69:da:ee:f9:c1:73:5c:cb:de:
74:16:9e:05:f4:03:0b:96:f7:a5:1d:17:dc:e4:38:
01:df:e2:b1:8b:7f:51:47:0f:cb:4b:9c:f1:cf:52:
1b:54:e0:ed:3e:15:ca:3b:cf:c8:80:9b:dc:ff:0c:
bb:94:3d:01:c7:ea:0d:84:1f:ae:46:7c:a3:60:d8:
94:ba:59:a2:d7:39:67:67:04:3a:7e:3c:a9:7b:af:
58:a3:3b:a5:08:bc:fa:fd:94:b9:f2:2a:22:fa:89:
cf:c2:0c:fd:ad:66:26:57:93:79:e6:e1:6f:25:6b:
37:13:43:a3:69:d4:41:bf:6c:fd:1e:17:f8:f7:88:
bd:07:34:6c:4c:05:9c:16:04:61:c1:52:f4:a2:c7:
52:d6:08:df:50:e5:8a:d0:8d:33:eb:b9:10:a8:40:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E1:3C:33:2F:14:41:1B:03:7F:78:40:61:F8:B2:47:E2:5F:59:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b1c86e78-67c7-333a-928e-a0cff3179bb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
208.53.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:23:3c:8e:ee:36:a5:3e:a6:a7:01:f1:2e:a9:74:1d:01:2c:
f2:67:26:3c:c1:1c:14:ee:6f:d1:2a:1b:ee:8a:77:51:ba:44:
98:d4:b5:56:aa:c9:09:03:74:ec:f5:d0:82:62:ca:8d:ed:dd:
9f:b4:00:92:02:92:e3:f5:03:43:af:12:79:84:55:55:3b:49:
fd:05:33:ad:32:f9:6c:b4:3c:db:d8:39:a8:c5:e9:49:a0:7c:
b6:0b:74:b0:d2:9c:c6:d2:a2:8a:65:bc:a8:8a:be:b6:ff:c4:
50:e5:0c:e5:b3:03:f1:8d:b6:de:ca:a5:ed:ae:a0:f2:3d:aa:
a6:f2:e0:c9:2f:05:eb:4c:1f:38:76:9a:e9:77:11:53:e4:15:
26:f3:24:2c:db:f5:0a:0f:29:26:08:4e:46:49:1e:55:5c:24:
85:0f:65:21:48:7b:9a:ba:50:ca:32:a9:4d:7c:3a:bb:9e:21:
48:17:b8:c7:d5:3b:d7:03:ae:07:e7:fb:0a:96:bb:36:53:a2:
b5:d7:0d:f6:e8:82:ce:6e:4c:9f:d6:e3:96:1d:7d:86:e8:24:
a5:44:85:02:36:85:03:39:7a:52:c3:1d:62:4c:04:7c:01:42:
d1:f1:c4:0a:40:87:da:fb:80:65:6d:51:a6:02:8f:83:b2:57:
2c:03:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:53:55 2025 by rpki-client