Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/8e344bd4-636a-3e4d-a541-2b2a8938ef00.roa
File: 8e344bd4-636a-3e4d-a541-2b2a8938ef00.roa (raw, json)
Hash identifier: 1l329c9Ix2ezxFV/tqSzRwnctbcHATdj9AaIq+81iSU=
Subject key identifier: 61:2E:F5:20:A0:30:5A:31:A4:10:83:AD:55:C9:A4:B8:9C:96:44:E8
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F43285848EF615461F5A735090EBA0A40
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/8e344bd4-636a-3e4d-a541-2b2a8938ef00.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 205.220.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:54:61:f5:a7:35:09:0e:ba:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=cd3e51d3-d468-4365-80c6-64eb93715e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:25:ca:07:9b:5e:4c:f9:d7:cb:7d:6d:a4:
32:4d:bd:b9:0b:72:76:20:a0:43:92:0a:be:70:b0:
9c:c9:f5:e8:ae:50:60:9d:a4:de:ba:29:90:3e:6b:
7c:bb:e9:df:ec:8e:5e:d6:e1:cf:a8:32:a3:49:b1:
19:40:22:f1:ea:c5:de:d2:09:fc:47:0d:ac:c4:61:
5f:2c:7e:36:8b:cb:9f:4f:40:a6:b2:8c:6b:b7:df:
1e:75:5f:90:ac:fd:19:f7:58:bf:11:72:19:19:69:
fe:50:c3:79:12:77:80:88:14:78:f1:c5:ad:0f:be:
b4:18:8c:73:e7:83:38:68:02:3f:28:b3:b1:48:68:
e1:19:bc:99:ad:9b:6b:cc:0d:e6:c0:52:c5:a9:c9:
bb:8d:ff:d4:0c:33:f1:eb:e5:c2:23:43:8b:94:35:
d2:06:f2:04:67:50:d3:30:87:e6:ed:77:c1:d2:fe:
c6:b1:2d:76:77:5f:91:b2:a5:1f:8b:94:af:b7:e9:
41:54:0b:0a:d1:75:d6:0b:05:fc:46:67:f6:5b:f6:
e6:20:d7:e9:a1:04:aa:8d:a7:08:9e:4e:87:da:41:
aa:63:db:3c:2c:77:e0:be:77:38:c3:f8:37:36:4b:
d8:2b:2f:95:a5:1c:02:d3:a3:d4:85:5b:09:d6:5c:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2E:F5:20:A0:30:5A:31:A4:10:83:AD:55:C9:A4:B8:9C:96:44:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/8e344bd4-636a-3e4d-a541-2b2a8938ef00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv4:
205.220.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:85:c7:f5:61:4b:d1:f3:62:e2:cb:d5:f0:e4:33:cc:13:c4:
f8:ef:3e:1f:76:de:d1:e3:f0:b4:b7:a8:45:fa:3f:94:01:cd:
59:a7:2d:79:e2:d5:6c:bf:92:ed:96:19:65:64:87:6c:2f:77:
c9:d5:c3:62:70:09:7b:42:f3:d1:20:ad:c1:71:26:9d:ad:8f:
d4:a0:aa:bf:55:1e:7d:a7:e6:9c:ab:69:7c:40:40:06:e0:c9:
ab:a7:df:5b:5c:10:1c:be:06:0d:4a:f4:e1:85:a8:bc:55:b0:
ad:bf:a6:0c:32:b9:13:af:13:bc:39:4d:f4:55:b0:e2:d2:23:
51:15:4e:fa:cb:f9:8e:a4:53:1e:0f:db:b5:70:76:4c:2c:02:
1c:69:45:b4:f0:68:bf:9e:f7:7c:cc:c7:a2:d0:8b:db:4c:a0:
ec:75:3c:3b:c5:0c:9a:cd:10:c2:7d:70:5a:ca:96:b7:60:a0:
44:be:0c:6f:98:34:18:23:c1:15:a1:7f:c5:08:47:35:96:21:
95:97:1e:38:40:79:e3:0f:59:11:9a:e4:ed:35:d1:7c:40:81:
6b:21:73:f7:a4:a9:8c:53:68:80:b2:6a:73:d2:37:34:eb:78:
fb:96:8f:13:8d:7d:74:cf:a6:2b:61:4b:56:e1:0c:9d:06:9d:
df:1f:a2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:04 2025 by rpki-client