Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/e92cdb64-47cb-3fac-8940-fe72b2f480d4.roa
File: e92cdb64-47cb-3fac-8940-fe72b2f480d4.roa (raw, json)
Hash identifier: ebz37vFBR90BU9w9gwh/JI8PJY5M2gFFJgqpZ7wrZH4=
Subject key identifier: 1C:AB:77:49:FA:4B:1A:CC:B3:80:D7:E0:AB:B7:3B:76:22:C2:B7:8B
Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial: 010D0C9F432858494CC94E860FAB743AC336B5C0
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/e92cdb64-47cb-3fac-8940-fe72b2f480d4.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 19740
IP address blocks: 204.8.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:4e:86:0f:ab:74:3a:c3:36:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=d939bf0f-b9a8-4e51-8c6e-433eaa67d59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:93:41:17:d4:1d:37:61:c3:36:3e:7b:71:
53:ed:3e:3c:f1:60:54:04:90:32:04:1d:ea:fb:81:
79:05:81:49:c3:0b:88:23:88:ce:25:8e:90:95:89:
a2:db:a2:66:06:66:7c:8f:d6:dc:12:e1:34:68:e0:
d2:83:52:02:e2:57:0c:61:e4:12:ed:ce:0b:a8:1b:
f6:2f:6d:9e:8a:2e:c8:4a:88:9a:95:29:d8:f3:41:
fd:80:5b:af:eb:c5:77:ef:64:ed:c0:17:41:f0:e2:
55:05:ab:fd:c2:0b:1f:3b:91:04:17:1d:08:91:fb:
f0:6b:ee:e3:aa:b0:d2:1a:3e:6e:7d:35:ca:10:60:
33:2e:1a:dd:1c:30:30:af:03:c3:6e:09:3e:31:56:
e5:36:b1:90:1f:db:89:ca:ba:0b:bf:96:b8:c0:4c:
a0:25:57:b8:0a:05:05:ed:62:48:97:46:99:ad:44:
cb:2d:fd:3d:f5:71:39:12:9b:ee:92:72:2f:08:13:
0c:40:6a:d2:49:a3:63:6f:76:22:a3:7c:61:df:fc:
8a:ca:74:82:c0:f8:3a:9a:f0:bf:e7:f5:4e:71:f3:
58:0e:40:12:f2:17:4b:33:e8:29:bc:c4:ad:da:b7:
ce:6c:8a:4c:98:ed:e9:a1:b1:53:1b:a9:99:3b:2e:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AB:77:49:FA:4B:1A:CC:B3:80:D7:E0:AB:B7:3B:76:22:C2:B7:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/e92cdb64-47cb-3fac-8940-fe72b2f480d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
X509v3 Authority Key Identifier:
keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:9a:1a:4b:f5:41:09:f8:1b:07:63:a3:9e:f2:89:2f:aa:d1:
a1:7e:c6:d6:10:ba:ae:81:4e:e5:7a:e7:fc:43:bd:98:5c:e0:
02:10:56:17:a0:c1:45:22:dc:cc:8a:6b:a7:6b:c0:79:55:85:
ad:a6:db:73:5d:03:bc:e4:ba:89:a1:30:f4:87:b0:04:9c:09:
14:e0:3b:4c:6e:4c:68:bc:47:23:39:2e:f3:fc:87:72:ed:90:
6a:2a:ee:a0:02:4b:28:ee:e4:b9:2f:2c:c8:67:79:17:78:69:
fe:73:2a:59:a9:9b:33:39:a4:79:aa:26:47:a5:94:a4:c2:8d:
41:f7:f8:2a:f4:d7:fc:7e:e2:4d:96:aa:5d:52:f1:3d:c3:79:
cc:9b:26:49:8c:48:b2:e8:83:73:88:58:cf:ac:bf:ff:97:60:
a0:40:00:43:f2:62:a6:bf:01:c1:8e:5e:2b:02:ad:70:3a:34:
a8:d8:73:3d:37:da:a1:86:10:08:3c:9e:8f:9f:e9:f5:dd:ea:
10:8b:7f:6d:fb:4a:a5:14:6c:fa:cb:bf:12:27:a6:c3:c7:a4:
e1:73:28:9e:0e:e9:85:6f:36:dc:09:27:21:0f:a9:d8:61:86:
99:ae:0d:6a:5f:71:a0:20:4e:d3:71:f5:ba:68:37:7e:f6:8e:
fc:76:b6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:42 2025 by rpki-client