Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c58e5e19-c930-3ac1-9a3c-c277eb8593b0.roa
File: c58e5e19-c930-3ac1-9a3c-c277eb8593b0.roa (raw, json)
Hash identifier: W7oCT2XBzEGW+5B4w7z2d9EY45/jOdMLiZaSgkqY4vI=
Subject key identifier: EA:09:FD:DC:DB:F5:2F:B5:7F:C3:93:A5:99:78:D0:91:A6:E7:96:2C
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285849071BF111C8DAAE564F9DA700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c58e5e19-c930-3ac1-9a3c-c277eb8593b0.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 0
IP address blocks: 208.211.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:f1:11:c8:da:ae:56:4f:9d:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=0842d2e9-abaf-4a54-825e-26e90b6d56f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:a4:8f:58:ee:1c:ad:a6:38:67:e9:37:dc:
7c:52:c4:fe:fc:01:3f:ff:4a:02:fa:93:3c:ec:c3:
92:32:51:39:9c:f7:6f:2b:7b:e5:88:a9:be:aa:29:
13:f3:ee:a6:b6:7a:2d:c1:a2:7c:db:6b:93:cd:cc:
a9:90:55:d8:2f:54:6c:6c:66:60:d3:0c:8d:57:b7:
2c:62:35:f7:62:99:11:a0:66:ce:df:aa:b6:0e:4f:
d0:05:64:0d:f1:d5:e6:0d:11:d0:3d:a1:2d:73:97:
ff:56:a7:de:66:20:8e:1d:48:52:9e:84:f9:8c:24:
7f:f8:e2:1a:ce:f1:d1:9e:5c:ba:27:50:a3:f8:4f:
19:3d:05:0f:a9:43:4f:c7:6c:92:5a:89:e7:28:9b:
97:85:0f:4a:41:2c:47:7d:e0:16:51:3b:79:84:91:
90:42:63:58:0d:ed:5c:ad:16:3f:ec:6b:b3:ca:96:
3b:8b:a0:4b:64:e4:f1:09:9c:67:5c:da:a9:ed:f8:
20:92:ce:76:74:8d:cb:3b:a4:78:49:0c:43:fb:b8:
39:2b:d7:42:18:19:db:f3:49:0d:72:ed:5e:82:74:
02:22:02:6f:4b:a3:92:2d:3a:d9:0f:d5:82:86:7c:
97:c9:42:49:37:c6:d5:04:eb:4b:6d:0c:99:cf:8c:
1b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:09:FD:DC:DB:F5:2F:B5:7F:C3:93:A5:99:78:D0:91:A6:E7:96:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c58e5e19-c930-3ac1-9a3c-c277eb8593b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.211.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:cd:43:75:11:35:5d:8d:27:a9:f8:03:21:96:f1:f5:9c:5b:
9f:c2:3b:28:c2:f7:de:76:7e:22:c7:a2:24:e6:73:0e:7a:1c:
db:d0:65:35:6c:e3:fb:cd:9d:69:04:57:95:89:dd:9d:50:e0:
dd:0f:e5:5d:05:b3:a3:70:57:f8:ed:58:33:7c:ec:b3:e9:f9:
dd:fe:eb:f5:c0:23:e7:69:45:41:2b:d6:fc:f4:79:c0:4a:01:
33:b4:ed:f3:4b:d4:59:51:56:69:fa:2f:77:21:50:5f:17:bd:
22:82:8e:8d:e8:73:02:15:57:9a:ee:6e:25:c3:85:ae:0d:f5:
5a:1e:da:1c:2e:df:bc:df:39:95:2f:a8:18:3c:ab:87:fe:18:
80:03:a2:ae:d2:58:e1:2d:39:9f:d0:91:19:a2:07:c6:c4:ee:
d6:58:07:8b:3d:17:6f:19:f0:56:60:f7:88:67:0d:b0:83:32:
42:42:42:14:3c:11:05:39:24:2a:7b:93:4d:b0:79:1a:c9:b2:
07:ff:2f:29:6f:95:f3:f5:fd:d4:3b:7b:ab:5e:bd:c7:04:f2:
63:5f:39:09:4f:bd:2e:83:cb:b6:57:a9:f1:ef:75:ab:ff:b4:
8f:63:54:f4:98:f8:cc:9d:ac:a1:84:b9:1a:d4:3d:da:d9:f5:
a1:dd:68:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:38 2025 by rpki-client