Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/adf8ca17-f454-38d8-8818-6ba2724ad500.roa
File: adf8ca17-f454-38d8-8818-6ba2724ad500.roa (raw, json)
Hash identifier: 6BCgB3DLb83/YiAiTKNwFsAVguAIgUUQ3Io5AVXXWkE=
Subject key identifier: C3:95:68:44:6B:C3:1B:3A:AD:38:F0:27:22:38:48:63:F8:53:5C:E7
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848EF61664ED893BA1C14970490
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/adf8ca17-f454-38d8-8818-6ba2724ad500.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 0
IP address blocks: 208.238.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:66:4e:d8:93:ba:1c:14:97:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=2b499a58-4b1a-4b1c-abdc-ded3bbbf559d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2a:ea:aa:84:9c:1e:e7:d3:fb:8f:1e:72:2f:
2a:1b:24:05:08:82:c2:d7:20:93:19:4e:3b:83:1d:
cc:3c:5b:1c:75:12:c5:39:e5:65:79:48:47:a9:be:
49:8b:7b:1a:69:c7:73:9e:2e:82:2e:c0:7e:e3:d2:
6b:6d:93:62:12:f9:9e:9f:57:b4:23:c4:98:67:a2:
f4:11:9a:c5:1c:15:27:ab:a4:9b:08:75:86:4b:45:
d9:8e:e8:0a:dc:44:7e:35:4c:94:54:c0:44:72:fb:
b0:8f:25:f3:b0:72:92:57:df:2e:3f:fa:67:53:34:
7a:ed:c0:4f:72:2b:59:fa:68:1e:ce:77:ca:00:62:
7a:9a:6a:b3:8e:fc:d0:17:f0:d1:a4:5c:c2:ca:f0:
38:c2:a0:1e:b8:c1:ea:62:0c:a7:9b:ff:bc:18:95:
87:33:a0:4b:44:b2:0d:a3:f4:1c:76:9b:9e:16:33:
6a:94:f1:b3:2c:c5:62:90:a9:52:ff:0f:1a:6a:19:
eb:84:ff:59:38:89:33:3a:bf:0f:29:f5:d4:ad:56:
ff:6d:38:16:1d:5b:19:1b:e1:ae:6e:6c:74:41:e6:
e9:26:b4:16:8e:36:2d:5b:ce:5c:b2:4b:48:e3:95:
a7:a5:4c:3b:87:9d:7f:3d:ac:dd:6d:21:29:25:36:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:95:68:44:6B:C3:1B:3A:AD:38:F0:27:22:38:48:63:F8:53:5C:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/adf8ca17-f454-38d8-8818-6ba2724ad500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.238.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:40:49:c9:07:cd:b5:84:6d:6d:2e:82:55:10:05:e9:ec:0b:
e3:dd:1b:83:68:5e:65:b5:fa:23:8e:90:7f:c7:5e:f8:bc:af:
bf:e4:72:bc:09:79:ae:a3:15:4e:58:d6:d8:5a:4b:77:ef:26:
ed:22:bb:09:45:75:4a:bb:33:ef:f0:3d:06:c4:03:56:72:22:
bb:58:6c:a9:5e:6a:3f:6d:d5:21:9d:01:1a:12:da:69:4b:77:
4f:b0:85:d9:f9:be:54:68:1e:67:b4:f4:53:09:88:ad:92:97:
34:35:be:4a:68:4a:cc:23:6c:02:2c:a3:d5:e4:4f:44:78:ad:
e3:ca:11:ec:fe:30:b9:a1:21:6a:6f:a2:fb:c4:ea:89:2a:80:
dc:eb:bf:32:b6:2f:de:d5:fc:16:ec:ff:93:58:31:2f:24:1d:
ee:c1:cd:4c:ec:b1:c2:30:33:24:ff:03:57:db:8a:a6:c3:a1:
b9:55:43:4c:a5:b0:e7:67:85:6f:b6:36:73:ed:8f:8f:66:87:
5f:08:12:e4:bd:17:c5:b1:63:b1:93:6a:77:f6:cb:d7:4f:7a:
a0:bc:95:69:99:f2:2a:e6:16:21:16:ad:66:c0:bd:58:f8:b2:
b3:53:ea:39:cd:5f:6d:7d:3d:e2:6c:74:af:eb:c2:09:e7:25:
14:41:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:09 2025 by rpki-client