Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9c2e05f-a7d4-3c4f-a6f4-04c4232cc3b2.roa
File: f9c2e05f-a7d4-3c4f-a6f4-04c4232cc3b2.roa (raw, json)
Hash identifier: nJTz6z/MOhk7qtc4UrDJNg3R8Xfhb1n3Pi9kPYUmYzk=
Subject key identifier: B6:20:4D:94:6A:6A:EA:3A:F2:C7:4A:B0:DA:6B:0D:C8:5F:26:2F:19
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848B62621D74AC4B207C42BF500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9c2e05f-a7d4-3c4f-a6f4-04c4232cc3b2.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 11273
IP address blocks: 208.235.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:21:d7:4a:c4:b2:07:c4:2b:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=51d19871-5a16-4dfe-9f52-f3fc48a04ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:87:c9:9c:3d:27:f1:2b:2f:14:5f:cb:31:
59:8c:90:fd:99:22:dd:75:73:b5:32:cc:14:98:eb:
cf:81:07:3e:89:04:c8:35:f0:2d:52:b2:a5:cb:38:
0a:5d:ab:5e:98:8a:15:4e:6e:c7:1d:40:65:6c:1b:
6c:86:29:f8:a2:68:c5:15:64:be:24:f9:3d:58:29:
32:39:d8:f1:ea:e0:14:ab:d4:44:ca:51:60:e1:35:
29:4a:b6:d1:93:66:2c:c1:1c:94:d3:21:f2:f5:1c:
8f:6f:fa:2b:b8:53:a2:b0:1f:1e:0e:52:fa:2e:21:
7a:02:21:cc:ca:4e:d4:76:96:ba:d2:92:6c:f8:04:
1e:86:a1:7a:89:83:5b:01:4d:20:31:43:fb:5c:77:
08:b5:9e:d4:44:56:31:9b:a2:c0:0d:6d:65:31:ae:
ac:69:42:6c:f6:1d:65:49:36:e6:c8:e7:3c:a2:97:
83:20:8a:0b:ee:94:e0:c5:f6:38:cd:ac:32:ae:2f:
06:16:ca:47:78:29:2c:52:6b:8e:22:63:04:fe:63:
a8:56:32:bc:c6:78:d1:98:19:e1:83:91:74:51:33:
92:4e:cf:99:2a:38:51:ae:f7:09:5c:d7:a5:15:d5:
53:d3:dc:13:2e:02:3e:8a:08:01:64:32:16:e4:47:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:20:4D:94:6A:6A:EA:3A:F2:C7:4A:B0:DA:6B:0D:C8:5F:26:2F:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9c2e05f-a7d4-3c4f-a6f4-04c4232cc3b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
208.235.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a8:f0:b4:ce:9d:49:64:37:0c:13:4c:26:d7:95:b5:e8:ce:
09:83:e8:cd:51:cf:85:9d:46:6d:b3:12:18:6e:42:ae:ef:19:
16:8f:4e:7c:b4:6d:43:8f:31:ba:96:19:2e:96:3b:a1:80:de:
01:c4:6c:d8:37:da:0a:87:34:6f:fd:b1:a6:a7:42:12:f3:9d:
1a:a4:18:29:43:4a:f4:bb:c4:74:ae:f2:0d:5a:d9:fe:83:83:
20:28:42:c9:6a:e0:c0:e3:5f:83:6f:d5:8d:47:0e:49:16:76:
eb:1a:a6:d2:9c:ab:8d:60:5c:52:d8:7f:82:91:f6:6a:34:51:
fe:30:11:52:c8:45:8f:26:88:70:04:d3:0f:55:53:c3:28:b3:
a1:4a:bb:ab:c2:5d:5e:6d:08:47:a1:1c:e3:f8:57:93:b7:37:
d8:0a:81:f5:83:3a:7b:3a:71:d3:f6:ec:e6:97:a7:57:3a:4c:
98:e1:0a:07:27:00:4c:db:76:58:58:48:67:dc:59:eb:6e:b8:
d0:2d:33:b5:5d:a8:30:e1:df:a2:d4:79:da:82:17:8c:74:54:
b8:1f:87:46:b9:71:c4:e2:a5:0b:c7:d9:f0:f2:f9:fc:70:29:
38:a0:0f:93:6d:fa:5c:1f:bd:26:f4:0f:7d:85:b5:eb:c3:82:
61:0c:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:55 2025 by rpki-client