Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/a43ea527-a9e0-36fa-8d5e-c6f038a541a8.roa
File: a43ea527-a9e0-36fa-8d5e-c6f038a541a8.roa (raw, json)
Hash identifier: P9wOUnS5vP7YajqvqtyzWteDoKoYguM5pQ7L3BrZllw=
Subject key identifier: B7:D5:74:9C:3D:1B:1F:FA:C3:40:2A:1A:0D:AC:1D:CB:1A:1D:C8:53
Certificate issuer: /CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522
Certificate serial: 010D0C9F43285848F926867A3A65CF6643AA3580
Authority key identifier: E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/a43ea527-a9e0-36fa-8d5e-c6f038a541a8.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 43009
IP address blocks: 208.93.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:86:7a:3a:65:cf:66:43:aa:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=96f5584a-21ff-433d-8854-95a6a2d34063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:de:4f:02:a0:83:b6:86:04:51:ba:66:15:
f0:19:2d:4a:19:b9:c2:18:5e:a3:07:39:28:14:fb:
ca:fc:8d:ad:21:dd:6c:57:5c:92:a2:6a:6b:f3:61:
27:96:cd:1c:cd:85:74:a4:50:74:10:ea:e8:a9:4a:
a2:9f:3f:2b:26:22:11:9a:74:e1:94:7a:53:dc:04:
b0:4c:0b:12:6d:a9:f7:40:11:04:8b:d9:0f:b9:21:
23:a0:2a:dd:2f:a3:74:f6:e7:c1:e3:5c:52:37:6b:
0f:d9:2d:9e:64:db:44:e5:8e:95:32:d2:92:53:92:
d7:02:79:35:8f:1b:c3:11:2c:a0:72:ef:94:4b:75:
2c:2f:0f:d0:41:fc:65:c5:cf:c8:c3:44:da:11:9e:
20:f0:35:40:57:06:35:86:aa:c5:31:b3:1e:9b:4c:
d0:69:0a:c0:3f:b9:5e:c0:71:16:80:8f:2d:7a:0c:
e6:15:11:d0:6f:06:cc:f5:6e:35:d0:f8:b5:ce:0d:
16:f9:b6:e7:ba:ce:85:df:87:a2:b7:26:03:32:f5:
08:eb:4c:b2:42:63:9f:62:db:89:f3:6b:8a:de:35:
0d:26:c8:b8:e7:29:7c:10:12:12:6c:ab:6b:91:6d:
99:84:4c:73:71:c6:97:2d:cb:fe:52:dc:55:96:47:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D5:74:9C:3D:1B:1F:FA:C3:40:2A:1A:0D:AC:1D:CB:1A:1D:C8:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/a43ea527-a9e0-36fa-8d5e-c6f038a541a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl
X509v3 Authority Key Identifier:
keyid:E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer
sbgp-ipAddrBlock: critical
IPv4:
208.93.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:65:6b:29:8c:62:99:36:a9:47:00:70:72:14:b3:db:1b:3f:
c4:1b:90:45:61:1c:e1:71:d5:46:2d:42:eb:4b:c9:53:1b:7d:
0a:aa:e5:9a:aa:10:33:45:e8:94:a6:30:bd:c4:61:95:35:71:
e8:f0:21:ab:7c:14:47:c0:19:0c:bf:cd:4b:fe:a3:60:99:3e:
ac:8f:8c:f4:d3:0c:5b:fe:fb:dd:36:a3:b0:e6:db:d0:63:75:
42:c5:78:58:27:88:6a:39:8c:5d:62:4e:00:45:7b:4a:ec:8e:
01:37:69:c5:8b:10:87:29:6b:cb:ab:43:05:a9:cc:c9:9d:70:
90:db:5c:46:ac:17:f5:54:63:9d:b4:07:85:2e:69:8f:b9:9d:
c2:b9:f7:1d:3f:ed:c8:0c:ca:eb:b2:df:84:d9:d3:6c:7a:40:
0d:30:30:3b:99:f1:94:8f:73:cd:4d:38:5d:b4:88:6b:12:08:
51:ec:78:b6:11:87:b1:b3:bd:7b:f2:af:42:98:06:fa:10:e4:
d4:50:9b:2f:76:4b:a3:1b:23:9d:26:a8:59:3c:4d:52:5e:c7:
0c:1b:23:15:c9:b7:47:43:ad:4f:c9:ea:13:3e:4e:f3:3a:6b:
72:ee:5a:cb:52:49:8f:b6:ed:b2:09:3e:d6:84:f9:77:5c:c8:
fd:12:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:41:08 2025 by rpki-client