Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa
File: 6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa (raw, json)
Hash identifier: csb8DBN5/g4bxRVVEkr8eGmmOYLLVJ1RV3yn4ePquPY=
Subject key identifier: C3:31:4C:75:60:E5:32:DB:A7:A1:52:34:AB:A8:6F:12:57:8F:CE:5E
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848CDE10C27645F6FD5BD403900
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 2914
IP address blocks: 204.141.247.0/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:0c:27:64:5f:6f:d5:bd:40:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=863bc805-336a-430c-97d4-bcc9b91a9c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:9d:4a:68:b2:34:54:6c:59:74:5e:56:2b:
1e:0c:78:b4:36:ea:70:58:67:d2:33:ca:3f:67:0d:
04:06:0d:1f:c2:df:23:29:ce:99:4f:4a:94:d0:ef:
bc:6a:3e:10:d4:60:2c:9e:db:a2:a0:7d:86:47:86:
2a:bb:8c:c1:f9:b8:0e:d2:e7:d7:2e:32:f3:4a:22:
69:eb:da:d6:2e:d5:e7:d3:15:bc:40:4f:2f:b8:fe:
6f:5f:fb:20:b2:18:a1:a1:04:8c:0d:d9:1f:3b:38:
17:f9:5d:71:79:7c:28:0a:45:0a:d0:36:58:85:57:
06:16:4f:36:1f:af:31:9b:00:6e:9c:75:89:12:da:
ff:96:a0:78:f8:bc:46:c9:97:b9:ce:04:7d:79:a2:
6a:c7:ba:54:7b:05:74:0c:bb:6a:26:20:01:d8:ad:
85:9a:7f:ab:71:72:e4:cb:a4:64:47:e9:2f:83:08:
8a:4e:14:77:04:ba:39:32:c3:0d:e4:72:39:4a:2e:
a0:41:2b:e7:7a:3b:c4:b1:59:30:94:0a:11:42:03:
e8:7c:b3:41:d5:d1:44:c9:8a:d2:51:99:f9:6d:f1:
5f:26:69:7d:5f:5d:64:6e:52:74:ae:d6:2c:b6:0b:
04:16:e2:7d:52:48:73:e5:e5:2a:29:00:d1:bc:67:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:4C:75:60:E5:32:DB:A7:A1:52:34:AB:A8:6F:12:57:8F:CE:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.141.247.0/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:d9:a3:23:f7:c7:a9:b4:38:f5:e0:1e:7b:89:b8:e6:07:d0:
1c:70:31:0a:76:ff:65:5b:bb:15:50:81:4a:6b:6b:59:1d:5f:
d3:61:81:78:94:df:cb:36:f1:e3:ad:c3:24:aa:f1:da:08:10:
56:53:a8:d5:68:bc:11:73:90:88:c1:d4:d9:b0:08:98:43:79:
ef:b2:00:9b:d7:cc:43:7a:c5:ca:f9:00:16:52:c6:ea:24:be:
98:7d:51:32:29:40:a2:22:e2:62:25:64:88:35:64:e4:56:07:
53:2b:3d:25:3f:7b:63:dd:9b:91:73:a3:66:36:11:dd:e8:10:
79:67:ef:44:91:11:30:c1:99:6c:ee:c8:73:04:68:0b:a0:34:
e1:8a:e0:ec:7f:43:14:0b:62:12:8c:44:bc:0b:74:89:be:bb:
a4:95:50:b4:ef:a7:68:ab:67:08:a8:95:60:27:62:31:a9:4c:
41:06:a2:a5:cb:9e:ca:85:b2:00:2b:ce:10:fc:95:3c:8d:8c:
82:e6:f2:36:7d:b6:59:a2:d5:00:49:01:93:c0:4c:1c:0e:94:
b3:14:38:01:11:82:19:06:8c:fd:bc:92:77:61:47:5d:86:2e:
65:00:21:62:d8:ab:c1:ee:47:3e:c3:dc:ff:aa:15:fe:fb:dc:
c1:c0:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:11:12 2025 by rpki-client