Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4defe137-ec22-3bbc-b7a3-8e3bfd58eef2.roa
File: 4defe137-ec22-3bbc-b7a3-8e3bfd58eef2.roa (raw, json)
Hash identifier: D989h1qXJdr/NF4qsTFiJyyLzW2tKjO8MnyHIp7MN/E=
Subject key identifier: 3D:02:B5:32:CF:4E:B6:05:B3:19:DC:18:68:A3:7F:44:F5:39:20:DB
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99645F8EB9A0B3DCA9F6E80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4defe137-ec22-3bbc-b7a3-8e3bfd58eef2.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397229
IP address blocks: 204.69.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:45:f8:eb:9a:0b:3d:ca:9f:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=cc01a704-0798-4617-9f13-ca6f4b44e26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:51:3d:a1:7a:0e:a8:bc:9b:63:1c:f5:98:
13:76:e0:b5:1f:b2:05:cc:04:ca:e7:33:0e:f3:10:
32:56:c6:ee:ea:50:4d:90:41:f7:ea:d6:59:90:aa:
db:c6:0e:45:25:2e:87:f8:5c:71:31:7f:fd:0f:f7:
70:cf:cd:81:b9:c0:5a:a5:83:fc:57:35:86:ca:0a:
44:8b:a6:3d:07:df:43:34:52:c8:75:2f:b9:2d:27:
d6:bb:2a:69:ce:b7:3a:0a:c5:28:22:c5:50:d1:2d:
22:76:ab:00:bd:c5:5b:73:44:45:eb:52:56:d4:87:
82:3d:da:40:bd:59:8b:48:6b:cd:c8:b7:99:a4:20:
48:4b:ac:c8:5d:35:ce:79:f9:d2:17:cf:b2:70:cd:
9d:6a:57:d6:81:da:02:51:88:81:bd:88:61:12:7f:
eb:87:d3:59:e2:0a:02:c6:83:0d:93:29:d7:c2:8e:
a5:3d:0e:b4:50:bd:ad:5a:97:6e:c4:fd:07:43:bd:
f5:22:e7:55:c8:55:9a:1b:a0:17:cc:a4:31:d5:f3:
77:aa:7c:0a:f7:bf:f6:dd:15:9e:ea:49:ab:b0:e5:
2a:13:9f:45:9f:1e:01:1d:e3:bd:c5:7a:4a:f8:86:
33:a5:ae:32:a5:36:e4:38:a6:74:f4:60:7f:f7:d7:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:B5:32:CF:4E:B6:05:B3:19:DC:18:68:A3:7F:44:F5:39:20:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4defe137-ec22-3bbc-b7a3-8e3bfd58eef2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.69.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:17:17:5d:bc:35:e0:fc:76:79:ef:73:e3:2b:59:51:91:00:
40:29:2c:0f:71:28:87:36:93:34:be:18:f1:06:6e:48:8c:39:
bf:d2:4e:00:c0:e1:15:e9:a4:94:4a:98:31:22:9d:35:05:96:
18:54:72:02:f4:13:ea:73:58:63:cd:89:7f:27:ce:27:8a:61:
46:3e:72:a4:9f:24:e6:2e:24:85:07:16:61:b1:d1:5d:e6:6d:
b5:30:e0:32:bf:24:4f:28:84:90:0d:fe:c2:28:a6:db:97:d9:
74:c7:4c:d9:f4:48:d4:33:b2:57:ea:4d:c0:c8:0b:53:7b:4b:
2d:56:70:08:f8:2d:db:0b:af:10:db:b2:08:9c:de:47:2c:9e:
0a:f1:cc:10:f5:26:79:00:79:56:ad:95:68:f3:80:72:ca:c7:
ce:63:49:e0:fc:f9:cd:c0:bd:51:49:79:ee:44:85:2d:3b:04:
cd:8b:49:5d:03:32:67:3b:6c:57:32:8f:fc:e6:b9:70:34:f8:
1f:95:f2:62:82:6b:68:29:d8:cc:0a:0a:e4:90:e2:c0:ff:6d:
c6:de:b9:fd:cc:6a:8c:cb:10:50:96:e8:b7:17:31:e1:27:4d:
22:5b:aa:f6:1d:d6:0a:c9:2b:25:05:1e:76:68:a6:71:e5:e8:
ff:26:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:49 2025 by rpki-client