Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/b7944b83-cae0-338f-9671-ddf915074048.roa
File: b7944b83-cae0-338f-9671-ddf915074048.roa (raw, json)
Hash identifier: hivR80hOL1FJ9L+BC15axrLHpYEKLnbr+n5jqVRV5P8=
Subject key identifier: D3:B3:A5:A0:F5:BB:B6:C9:06:C6:61:E3:AD:8D:56:83:25:EC:D3:BA
Certificate issuer: /CN=1562c1ab-b395-48ee-8d2d-f34d47e4ee63
Certificate serial: 010D0C9F43285849203C11222B39B50F4D709780
Authority key identifier: 4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/b7944b83-cae0-338f-9671-ddf915074048.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 14041
IP address blocks: 204.228.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:11:22:2b:39:b5:0f:4d:70:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1562c1ab-b395-48ee-8d2d-f34d47e4ee63
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=411747c0-7363-48fe-a3a1-8af4ecdd35ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:5a:27:fb:7a:5c:26:cd:0d:c2:7f:12:45:
bd:06:be:b8:d5:06:76:ac:38:7f:20:cd:b9:58:8e:
dd:61:32:f0:11:43:b5:54:7f:b1:f5:e5:ee:1d:e7:
84:ff:12:13:2b:08:6c:47:8c:05:c5:8d:2c:c4:6b:
a3:92:aa:c0:cf:59:5c:96:08:b7:8c:4c:13:b4:71:
df:50:cd:d9:25:67:cd:f8:c3:ce:93:8b:dc:95:63:
c7:75:85:f6:ce:cd:fc:64:02:3a:23:ff:b0:11:38:
54:44:05:0a:13:c5:37:18:3d:23:3c:c9:d8:5f:a2:
b3:ea:ec:11:15:55:5b:cf:ad:eb:38:d3:17:9b:96:
b8:26:e7:bc:82:e6:50:e2:8d:23:9d:fa:0f:0c:59:
f3:82:02:03:3c:5a:ab:3e:d7:9d:18:e3:7b:53:57:
5d:a5:5a:6c:db:ab:bc:e3:13:86:e9:f3:7b:00:c5:
8a:36:48:38:22:95:52:c6:89:ce:e5:e6:91:49:a9:
d6:33:a0:fb:51:1c:b7:45:b6:e1:f4:f7:22:ac:26:
4e:4f:16:ab:b3:4b:1b:88:c6:55:9c:f1:47:a3:58:
9c:6b:4e:9c:bc:20:77:34:0e:23:38:c9:b8:4e:da:
e0:ed:3a:88:90:0a:2b:37:2e:ba:47:3b:d8:fb:b7:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B3:A5:A0:F5:BB:B6:C9:06:C6:61:E3:AD:8D:56:83:25:EC:D3:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/b7944b83-cae0-338f-9671-ddf915074048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.crl
X509v3 Authority Key Identifier:
keyid:4A:20:C1:78:79:88:B0:4F:18:8F:CB:40:CF:C1:8B:69:0D:82:8B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1562c1ab-b395-48ee-8d2d-f34d47e4ee63.cer
sbgp-ipAddrBlock: critical
IPv4:
204.228.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:85:1b:18:5b:fd:b7:4a:74:bb:68:ea:b6:20:90:5d:bf:b7:
09:3c:92:37:51:27:5c:03:7f:ce:d2:7a:16:e6:9d:60:5d:d3:
2d:cc:c4:9b:68:4a:5c:57:3a:13:36:a7:38:95:40:80:30:79:
48:a4:8e:16:46:39:86:bd:59:2d:2f:bd:e8:16:73:16:59:62:
88:ef:d1:2e:0b:b9:4f:88:93:17:4b:55:91:e4:1e:47:86:28:
50:c3:b4:a5:50:67:43:aa:7e:1f:fd:d5:02:27:f0:30:be:b2:
5b:d5:bf:bd:b5:6a:9b:80:c4:e7:a1:2b:a9:3c:4a:a4:49:b9:
77:0d:9d:89:4d:ff:c6:d2:46:9b:d4:39:e1:df:85:ba:ad:46:
aa:05:25:11:c5:57:4e:22:3c:15:52:ea:e8:08:77:cb:f0:10:
9c:18:6f:da:83:11:56:27:4b:d0:52:a4:d7:f6:e5:46:5e:33:
dd:47:50:e0:47:bc:88:5a:cc:89:95:22:47:62:0b:4c:08:e0:
9c:2e:53:b5:33:0d:69:0f:93:70:f0:19:5c:8e:94:f1:7d:a7:
29:63:91:1d:be:f6:f8:7e:e8:d6:74:a0:bd:8d:ba:5f:be:c6:
33:9a:36:5d:6b:d4:ce:5e:0d:25:c5:a4:10:df:b3:1c:10:a3:
70:de:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:17:54 2025 by rpki-client