Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/cf2344fd-ae0f-376c-bb1c-dc7230820578.roa
File: cf2344fd-ae0f-376c-bb1c-dc7230820578.roa (raw, json)
Hash identifier: Cr5j1iWldlz5Z7O3yBdcN9/YxbBI/vJxnVpVNJjHhgc=
Subject key identifier: 22:2C:B5:BF:58:96:22:0E:3F:5C:FD:41:B9:6A:75:70:47:A4:21:D2
Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial: 010D0C9F432858492E13C0FFBBA529D51A496900
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/cf2344fd-ae0f-376c-bb1c-dc7230820578.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 400400
IP address blocks: 205.234.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c0:ff:bb:a5:29:d5:1a:49:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=f0f8a8fd-027f-4bab-8812-a6e2831b92b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:b3:c6:38:69:db:e1:7c:15:df:64:a7:2f:
5d:27:45:84:24:4a:2d:9a:76:50:bb:f4:35:a9:71:
48:eb:1a:75:44:3b:0e:a1:3f:09:b7:b8:49:5e:3b:
1f:5b:e2:a2:de:e2:1f:4e:cf:0b:41:92:00:75:3d:
e7:cb:1e:07:55:50:5a:fd:49:0d:f2:88:f0:e8:10:
93:49:5f:87:5e:8e:69:97:26:ba:17:87:ce:c0:71:
ae:0d:d5:e8:b6:69:ac:a4:d4:91:08:c2:9c:dc:86:
f1:82:94:3e:73:65:69:c0:40:dc:d6:82:7d:92:8e:
5f:81:b3:ce:e1:b2:6d:da:54:ff:36:77:62:08:36:
49:c7:c6:5d:1c:58:35:30:ea:af:c4:30:0c:1a:b6:
46:84:a5:f6:54:d6:cd:e6:13:53:ce:ca:d4:74:f3:
52:7d:83:28:8f:4b:1f:57:8c:ad:a3:24:a7:c9:f4:
95:fe:16:d3:b7:00:e2:1e:4c:01:09:e9:ea:88:3a:
40:13:b1:9e:34:45:69:9c:4a:d3:ff:aa:d3:85:51:
af:a3:7a:0d:83:e7:2b:d7:59:4f:46:a4:ec:a8:01:
15:6f:ed:99:8b:a2:cc:8c:ab:82:3d:0a:b9:34:54:
43:4f:0e:da:9d:9c:75:fc:7f:05:4b:34:95:f4:d7:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:B5:BF:58:96:22:0E:3F:5C:FD:41:B9:6A:75:70:47:A4:21:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/cf2344fd-ae0f-376c-bb1c-dc7230820578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl
X509v3 Authority Key Identifier:
keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
sbgp-ipAddrBlock: critical
IPv4:
205.234.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:1f:fb:e4:53:42:b1:bd:b6:a1:e7:ad:a9:50:f7:0a:da:01:
7f:0d:ca:fb:77:6c:64:c9:b2:96:fe:fe:a2:1a:fc:4f:47:0f:
fa:c1:72:8b:ca:43:bb:91:f0:89:e0:5a:a2:14:75:4d:36:6c:
98:0b:95:6c:7c:cb:e1:50:99:4b:c9:af:55:23:a3:ce:8e:4c:
39:6a:22:f9:0c:1b:80:cb:e7:b0:25:fc:2e:da:0d:84:6b:1b:
67:c3:36:da:c7:8f:ee:24:72:39:75:c2:e6:f5:af:64:9d:66:
d3:8e:ab:66:6f:71:91:5d:b5:27:03:d5:6c:fe:60:28:ed:97:
fe:76:af:2a:25:8b:b0:d2:d2:a4:36:14:75:22:80:d0:dc:6a:
b0:e8:e1:a6:88:2a:ec:ab:c5:50:90:bc:e8:84:89:d0:7e:d9:
e2:03:fa:a8:d5:cf:ca:d3:87:4f:f2:ca:ee:0d:bd:78:0e:9e:
ae:25:05:0e:cf:64:f0:e0:8b:e9:ad:24:b1:2c:10:f2:94:29:
4f:5d:8e:82:25:d4:db:c9:1a:99:70:41:d3:18:8b:07:e8:81:
4a:98:9b:ce:6f:f3:97:b8:79:80:28:fa:88:06:63:0e:49:ac:
66:d3:aa:90:3e:1c:94:4b:e2:9e:d2:c5:da:e2:09:b5:ed:80:
0b:a2:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:50 2025 by rpki-client