Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa
File: a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa (raw, json)
Hash identifier: dRUMJlecIsKT/emtKyFiKJUSmbpM9EpIscaaZlVYKhE=
Subject key identifier: CB:C8:FD:66:92:3A:AB:51:2E:61:41:1B:43:EC:E6:03:A9:A2:EB:D9
Certificate issuer: /CN=95a5a86f-706a-45b6-baf2-da4d4e62b10e
Certificate serial: 010D0C9F4328584905B6B8B1CC5417854538B520
Authority key identifier: 04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 16509
IP address blocks: 204.138.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:b8:b1:cc:54:17:85:45:38:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5a86f-706a-45b6-baf2-da4d4e62b10e
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=1da02105-0e5c-4d15-b79c-97e1f6482e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:1b:d9:94:c4:86:14:bf:9a:6d:71:51:6e:
a4:31:e4:26:e8:2b:04:ff:a8:c9:76:ad:2e:c2:f9:
51:a6:23:b1:d0:1a:75:e9:df:4a:5c:c6:26:bb:0d:
54:50:52:4e:07:3c:99:aa:2b:fe:28:20:b3:ec:3a:
af:47:1a:5a:20:cc:7a:05:b0:c5:43:b0:c8:02:68:
c1:e6:b1:9f:91:54:0d:0d:b4:3e:ca:aa:9a:c7:7f:
41:9f:87:c2:33:4a:f3:e5:6b:b8:d4:08:4e:7b:03:
f5:df:76:6f:28:6d:1b:41:d6:65:f9:53:7c:f9:3a:
da:d3:8f:f1:e4:b1:a0:50:c7:3a:ce:ab:ac:79:75:
b2:04:02:d3:c2:07:fe:8e:c2:ec:f8:ad:9e:e9:98:
38:38:7f:13:4f:2c:0f:90:09:cd:ea:6a:9a:c3:60:
19:a4:24:7e:30:06:f0:74:01:f4:40:64:68:e0:59:
bf:d9:38:b5:1f:5b:f8:26:4d:ab:34:30:62:b6:8e:
17:f9:95:e7:e2:19:13:6e:e6:88:62:27:1b:e5:c3:
1d:77:aa:9f:35:fe:83:00:7c:a2:70:26:4e:8d:a2:
77:43:a7:34:66:21:06:e7:65:c4:9b:b8:ac:68:cd:
eb:7e:ad:ce:78:0b:4f:a7:08:ad:e8:ef:4d:57:c7:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C8:FD:66:92:3A:AB:51:2E:61:41:1B:43:EC:E6:03:A9:A2:EB:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.crl
X509v3 Authority Key Identifier:
keyid:04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.138.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:6f:0b:bd:43:7d:3d:a8:a4:c6:15:56:7a:6d:5e:12:ab:4a:
e4:ee:7e:64:d9:9a:74:53:14:2f:d5:59:11:9b:91:c8:e0:ce:
d0:4d:4c:ee:74:25:b2:04:fa:1c:88:18:f9:1c:38:eb:35:08:
20:5a:7b:1c:ad:56:fe:a8:43:c0:2c:20:11:fc:25:b3:3a:40:
6d:fb:20:58:4c:6f:8e:d6:a3:a3:8f:76:ba:d2:cd:dc:e8:85:
d8:fd:e3:50:c5:4d:15:99:4e:ef:c0:68:7e:9e:a4:e9:03:bc:
29:c6:69:85:d4:fb:48:9a:68:d5:f5:22:b4:3b:b0:08:03:1a:
8a:e2:a9:74:0c:79:a0:db:27:da:c0:4c:47:ee:b7:33:7d:b3:
76:03:ff:63:62:eb:79:72:79:cf:29:95:46:aa:e8:97:35:63:
fd:ca:88:00:a0:b5:30:bf:0c:54:0d:cc:64:93:1d:22:17:6d:
eb:e7:2c:24:ff:5c:fb:fe:95:97:14:47:91:82:fa:c5:e4:c2:
8f:c0:54:a7:45:5d:39:97:6e:27:a1:33:03:aa:b1:13:b2:35:
e5:fe:fb:b4:91:21:7e:65:20:cb:1f:e9:ee:63:49:c8:1d:b1:
8d:43:79:f6:cf:22:a2:53:a2:33:d8:11:1c:6f:35:74:db:80:
ba:58:61:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:14 2025 by rpki-client