Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa
File: 518fb9f3-6845-3e45-af69-497c8740ed7a.roa (raw, json)
Hash identifier: 0HCpwk3RDD51KuS8VYvpmOEIQcDCaMfzRfxxLIlI9DE=
Subject key identifier: FE:0A:23:7C:26:D9:F6:22:90:CC:1E:D8:21:D0:A7:69:50:D3:C6:EB
Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial: 010D0C9F43285848F926A6561D09B1D0A43FBD00
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 208.70.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a6:56:1d:09:b1:d0:a4:3f:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=6fb23ca8-2470-4902-874d-220769a7f59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:01:16:5b:3f:73:1b:da:a1:34:35:57:e4:
fe:19:63:83:18:60:dd:b7:85:b3:8b:34:cd:fe:9a:
52:1f:bd:73:54:12:74:7f:ba:78:cf:80:fc:db:f9:
eb:8f:af:9d:6a:8c:f9:85:3a:c7:d0:45:b5:0d:0e:
a3:41:30:8b:db:3a:a6:6a:f3:36:76:80:b3:1a:c8:
d2:bf:1c:16:a9:24:ec:57:8a:86:9a:bd:40:38:93:
19:d9:a8:f4:a4:91:81:68:d2:f7:c7:55:f7:c0:7c:
cb:fd:ec:e5:aa:d6:5d:ff:24:b5:3a:52:74:9e:70:
83:4c:aa:cd:c6:e1:22:00:17:4d:4d:74:c3:10:28:
a8:29:93:31:9f:72:e8:67:59:a7:22:27:02:9d:4e:
c5:3e:50:fb:1a:bc:0c:82:0d:eb:45:7a:5f:85:27:
95:ae:6c:61:f7:09:fa:dd:84:67:31:e7:06:32:0e:
cc:35:b6:af:8a:bd:c2:b8:f2:7f:8d:ad:fa:0a:8f:
67:24:b5:a0:f2:fa:52:a1:00:b3:9a:fa:67:cb:e3:
71:09:c3:8f:ca:14:07:39:bb:14:a2:47:be:4f:7b:
1e:de:d7:47:d8:08:33:39:c6:55:48:c1:66:52:47:
bd:ad:ab:57:a6:52:36:fb:bb:67:95:c3:5a:c8:d1:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:23:7C:26:D9:F6:22:90:CC:1E:D8:21:D0:A7:69:50:D3:C6:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
X509v3 Authority Key Identifier:
keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
sbgp-ipAddrBlock: critical
IPv4:
208.70.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:1c:cd:99:92:d9:3e:c2:00:e6:78:ce:2b:f4:af:70:7c:ba:
8d:b0:4f:df:56:b6:1d:43:67:b3:d8:3c:77:95:13:4f:ea:7e:
81:3b:66:b7:4a:ce:d8:55:0b:d3:f2:ad:f9:6e:84:c4:08:0a:
ce:9b:ee:98:ef:23:93:e4:14:c5:87:18:0b:f6:6b:af:26:8f:
f5:e9:c1:db:22:b8:ce:7c:78:b3:a3:43:6a:22:5b:94:16:6d:
67:dc:61:48:5e:eb:d2:80:62:51:aa:b0:ab:3e:c1:e1:d5:80:
d2:3b:71:8e:03:f2:d4:12:64:71:c3:9f:f6:52:4a:55:9b:d4:
17:7c:78:12:4f:f1:b6:65:61:17:40:b2:35:30:fc:1e:c7:51:
5a:29:0b:21:94:56:0a:ce:69:b5:4d:df:78:c2:51:8f:53:ca:
74:aa:a2:0d:6b:21:44:74:93:73:50:fe:23:84:57:0e:54:c0:
84:70:00:c1:de:dc:95:c0:4b:86:44:2f:7c:12:31:db:04:6c:
47:18:f9:8b:0c:08:00:ba:f2:63:5d:73:44:d3:7c:59:1f:a9:
4e:31:4d:1c:99:52:d7:6a:6b:b6:48:82:24:f2:a4:3c:d1:55:
11:83:6b:bf:59:bc:e8:48:95:ce:f7:0e:9d:4a:a4:b4:26:16:
02:6e:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:18 2025 by rpki-client