Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c35ba012-b023-3826-aa1c-f48042f6ae6a.roa
File: c35ba012-b023-3826-aa1c-f48042f6ae6a.roa (raw, json)
Hash identifier: IpD3wU2eE3Q6N9Wx6PqVnuZUUICsOvlIE2NfIqoNNo8=
Subject key identifier: 8D:DC:82:F7:6D:00:18:D1:56:0B:2A:19:D8:61:8C:D2:31:E4:8A:F4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848ED4C6A92BD34B387085939B0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c35ba012-b023-3826-aa1c-f48042f6ae6a.roa
Signing time: Tue 18 Feb 2025 20:07:26 +0000
ROA not before: Tue 18 Feb 2025 20:07:26 +0000
ROA not after: Mon 19 May 2025 19:07:26 +0000
asID: 14618
IP address blocks: 208.214.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ed:4c:6a:92:bd:34:b3:87:08:59:39:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 18 20:07:26 2025 GMT
Not After : May 19 19:07:26 2025 GMT
Subject: CN=357796d5-1fea-4bde-b6cf-1fd8fc4ce016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:75:b9:5c:f1:9f:60:0f:7b:2f:c7:31:26:
d0:16:85:0f:2a:83:70:21:f8:22:08:59:0d:10:a6:
2c:4b:b5:ae:79:ea:31:63:ed:f9:c2:4c:18:e8:5d:
1d:8a:71:5d:f5:cf:db:d3:d5:af:75:7b:87:05:fd:
6b:68:54:78:32:90:d5:83:79:f1:8c:7a:b1:6f:51:
fe:f8:ec:db:6c:fb:2d:e1:8d:f2:1f:15:8b:28:d0:
ea:e5:15:b2:70:21:e1:cb:c7:23:7b:60:4b:2d:5e:
9e:b3:52:6d:4a:a5:ff:87:5d:31:4c:87:1a:b3:77:
51:1f:7d:1f:97:64:21:c1:8c:89:fc:9a:f5:8a:03:
24:1a:10:de:43:13:df:f7:c2:a7:90:58:ea:29:40:
fb:4e:f7:57:0c:49:9d:5e:1e:33:86:b0:b0:96:0e:
09:70:18:f2:bc:54:22:1f:24:8f:97:9c:a0:de:12:
4f:58:51:fc:0f:b2:b4:56:a3:34:80:01:01:17:76:
33:51:e8:15:76:eb:3e:82:26:2a:bb:c5:ea:3d:86:
73:7c:88:3a:26:ac:6c:78:eb:04:b3:40:30:7a:af:
24:ff:b1:22:ed:af:2b:23:66:4c:50:d6:bb:6a:60:
f1:b9:a4:47:1f:0f:43:3b:42:f8:6c:c1:91:ad:f4:
90:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DC:82:F7:6D:00:18:D1:56:0B:2A:19:D8:61:8C:D2:31:E4:8A:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c35ba012-b023-3826-aa1c-f48042f6ae6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.214.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:1d:1a:f1:fb:ff:16:bb:a9:39:73:eb:38:b4:fb:e3:8a:48:
57:57:14:33:0b:d1:06:bd:4b:d0:28:53:96:42:31:fd:93:52:
8a:00:74:7d:2b:82:b7:ae:42:cf:76:8a:45:8b:7d:da:ff:fd:
a1:2d:e3:4e:25:95:f0:7a:c3:1d:27:98:27:88:70:08:85:e2:
a1:82:8d:bd:2b:fa:de:61:d1:bf:6b:c0:78:39:f8:e2:4b:be:
b5:a7:a6:05:7f:5a:bb:19:36:13:91:74:22:9a:ba:84:c4:e6:
c0:40:a0:d8:e2:34:41:99:4b:18:e9:3c:a7:4a:26:f1:e8:c7:
98:40:27:b9:ec:de:24:78:12:a0:09:ee:ff:6e:cd:52:4f:41:
c7:bb:73:16:70:a5:4b:f9:74:cc:2f:0b:e7:7b:86:27:04:b3:
5d:2d:18:f9:5d:03:3e:5e:b9:57:22:bf:c5:7b:2b:c8:8a:e7:
a4:e2:f0:51:29:33:49:01:72:53:21:d8:1b:69:cf:d4:ff:d2:
c7:14:75:57:7f:bf:82:51:7a:75:38:b7:ed:e1:0b:03:bb:24:
15:98:c3:a3:a6:46:72:0c:0e:1b:37:15:ec:56:91:8a:92:8b:
4e:f0:b6:46:e6:55:42:5c:c7:f9:98:b3:78:e0:83:03:bf:cf:
1c:cd:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:13 2025 by rpki-client