Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/86e2c39d-d166-3f9f-b4b9-e70794a93110.roa
File: 86e2c39d-d166-3f9f-b4b9-e70794a93110.roa (raw, json)
Hash identifier: nni4zIEAslnL61KAe1h9GCNptmb+oPQ/3FtWLk8KC54=
Subject key identifier: D7:8D:33:FA:43:8A:3C:84:E3:86:9E:C0:FF:DE:BB:FF:21:42:53:F6
Certificate issuer: /CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4
Certificate serial: 010D0C9F43285848B4C0D5B5895BA0555E7C1D00
Authority key identifier: A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/86e2c39d-d166-3f9f-b4b9-e70794a93110.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 204.154.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:d5:b5:89:5b:a0:55:5e:7c:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=68390166-f172-4e25-9455-def517073380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:0d:a0:5f:c6:7a:57:5c:91:b6:0d:56:ff:
84:db:75:68:85:2c:d2:cf:51:5a:a1:ad:3c:10:10:
10:ba:da:54:c3:d2:9c:01:e3:72:bc:2b:33:d0:35:
a7:38:1f:d9:68:9b:48:51:bb:44:c6:d9:fa:2d:eb:
e1:f2:b2:cc:79:b5:e1:bb:dd:02:42:f8:5f:00:d5:
9f:5d:63:0d:94:48:f8:ee:d6:e9:23:21:c5:57:a1:
19:d7:ad:71:e2:43:35:d2:86:92:90:2b:47:db:09:
8a:3a:10:48:d9:9f:b0:19:6e:dc:25:32:b1:64:fc:
91:80:60:62:8c:1e:07:7b:4d:09:53:ab:99:56:50:
a6:2c:5c:b7:fb:d0:5d:ec:7b:90:07:0c:18:02:ca:
ff:43:78:7f:55:26:e7:9b:56:28:59:3d:f4:03:70:
8b:a7:28:13:60:2f:05:a1:cb:8a:f1:13:8a:ac:e9:
f5:10:cf:7e:db:37:7a:c1:1f:86:b5:5d:bd:ac:39:
65:d9:34:6f:5d:b5:2f:2f:80:5a:21:e3:b7:86:b2:
db:0c:b9:e4:44:90:b8:da:47:ec:6d:57:2d:de:8c:
19:d0:d5:4d:75:b7:9e:e4:d4:84:82:7a:68:dc:00:
4d:c4:4c:d9:ab:56:90:2d:d3:c9:0e:9e:61:e2:da:
6f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8D:33:FA:43:8A:3C:84:E3:86:9E:C0:FF:DE:BB:FF:21:42:53:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/86e2c39d-d166-3f9f-b4b9-e70794a93110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl
X509v3 Authority Key Identifier:
keyid:A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer
sbgp-ipAddrBlock: critical
IPv4:
204.154.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:d4:b6:50:10:2a:2f:89:58:f1:16:86:80:8a:33:2b:8d:af:
09:89:4e:a8:f6:44:ba:f5:a9:1e:58:35:79:cf:f2:29:fa:a4:
b7:95:ac:b4:6e:c3:d5:2b:2c:08:bc:f4:ed:bc:49:41:ba:58:
01:27:64:09:e7:d5:c2:d1:83:34:bc:81:47:52:86:30:3a:ba:
42:db:25:5d:d9:c9:7e:74:01:eb:fd:48:12:1e:aa:44:46:4e:
44:11:df:dc:69:94:54:f0:7d:dd:91:02:6a:3c:f0:46:3c:29:
ac:d9:e6:47:8a:2d:ec:2d:08:a8:68:f1:c9:17:64:6f:36:86:
66:69:3f:78:80:d6:5d:e2:3c:37:42:c2:9f:3f:f0:9b:c9:ee:
5d:a4:50:09:44:82:96:49:e3:f9:cd:1d:dc:9d:aa:49:7b:04:
b6:70:7f:1f:78:28:d9:2f:45:df:bf:63:42:46:dd:88:e5:c6:
f2:e9:87:56:55:ce:51:b5:8e:55:9c:4e:8d:0c:c2:80:d8:2e:
b2:62:e9:84:a0:2e:4d:ad:d4:fe:da:18:0a:59:0d:fd:c2:27:
9c:68:06:f9:f6:9d:2b:e6:51:22:82:4a:dc:53:18:d6:c5:f4:
73:69:2b:9b:a5:a7:51:66:e0:62:75:95:67:8f:b9:98:48:b9:
a4:ba:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:53 2025 by rpki-client