Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e66e887b-7c8b-30de-8be9-2521bfbeebe2.roa
File: e66e887b-7c8b-30de-8be9-2521bfbeebe2.roa (raw, json)
Hash identifier: hCX6VZCGz/K0qLOVVehAkb49igfLx+dz7fGAEHCD0wQ=
Subject key identifier: 4B:F4:1A:80:16:8E:69:BF:07:32:44:52:69:D7:9B:1E:3E:FC:85:0C
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848A99646563156B8EA4643A400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e66e887b-7c8b-30de-8be9-2521bfbeebe2.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397236
IP address blocks: 204.69.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:46:56:31:56:b8:ea:46:43:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=4d4143f3-b653-4f24-a995-871ac7a22ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:2b:3b:d0:15:f7:bd:1f:ce:c0:1e:36:bf:
84:a0:c9:09:92:c5:20:0a:05:ea:ea:1a:1c:6c:67:
58:d6:f3:38:ab:e5:b8:ed:7b:76:b2:d3:06:39:9e:
08:55:0a:ee:bb:cc:5c:5b:2b:0f:0a:4c:70:47:02:
c1:c4:ac:fe:ad:e3:aa:a3:5f:61:a1:05:39:60:cd:
b3:ca:5a:89:90:ef:d6:56:95:ea:48:87:9c:86:67:
83:22:95:b4:41:ca:6b:a9:d1:fc:7f:f3:97:f8:1e:
a8:b9:ce:21:c8:5f:cc:d5:ab:c0:a9:3b:2d:79:6a:
18:a4:80:6f:c8:b6:80:27:50:19:65:1f:a9:2e:ca:
a4:33:0f:38:48:75:10:76:52:1d:c0:c2:86:6c:35:
19:d4:eb:16:92:70:e6:01:2b:c3:81:71:1e:4a:a2:
22:92:b2:e7:74:68:eb:c4:50:d0:17:12:34:57:0c:
dd:4f:cd:18:6b:28:d5:b0:57:c1:ae:46:e4:4d:67:
13:37:46:93:76:8f:81:b6:d0:c5:83:c1:cb:e5:49:
90:47:bf:28:36:d2:02:4f:56:bd:74:78:9a:2d:a0:
a7:f0:f0:9a:00:f3:b6:ec:4d:bf:9a:b2:4f:b9:a2:
a2:e7:b9:0f:ca:4e:8c:a1:54:0f:ba:05:a3:e2:63:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:1A:80:16:8E:69:BF:07:32:44:52:69:D7:9B:1E:3E:FC:85:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e66e887b-7c8b-30de-8be9-2521bfbeebe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
204.69.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:61:1d:18:5d:89:7a:6c:87:ef:15:67:ac:36:12:b3:99:48:
c6:c0:4c:a8:00:d7:5c:e6:51:11:bd:b3:52:d5:9a:6b:ae:22:
33:49:4b:71:da:cb:95:a2:18:93:31:c3:8f:35:91:20:f1:25:
89:f2:5c:39:a5:b9:cf:4d:0e:89:5d:97:fe:7d:c0:d8:43:6a:
3f:3a:e0:dd:37:6a:f2:82:6e:58:2a:6a:6e:0f:15:0b:91:09:
f8:d3:af:e4:f0:4a:c1:64:a7:7a:16:02:04:40:23:34:bc:b0:
fb:44:23:d8:51:68:df:bc:7d:e3:f4:92:7f:ed:8d:04:0a:e3:
10:d4:b3:39:fb:f5:ed:17:7a:a0:fe:3d:82:40:ed:e9:f3:56:
0d:4c:d7:dd:54:05:e6:e6:86:37:34:0d:d7:63:0d:40:4c:ec:
0d:e7:d1:b0:37:1f:95:d8:7b:26:29:47:65:a1:f6:2f:6a:50:
39:e8:fd:f1:68:81:c6:8e:a2:2a:42:c4:b6:4d:ed:06:7f:9f:
e5:13:95:ad:e7:a8:83:86:bc:b0:6a:37:88:58:a6:e6:5c:bf:
1b:03:da:8b:76:8b:d2:37:48:d8:6d:c4:c1:88:c6:95:d0:fa:
7e:7a:37:81:e6:ec:14:91:5b:ad:41:0d:00:43:2b:b5:de:b4:
e6:4c:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:38 2025 by rpki-client