Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e7216377-bcf3-3502-a37b-750a6d09b099.roa
File: e7216377-bcf3-3502-a37b-750a6d09b099.roa (raw, json)
Hash identifier: AfsbEIZUzzk6qhi3StBjXK5MWojD0zt/6saXBNfdpek=
Subject key identifier: 20:37:1E:6D:10:CA:01:EB:32:1F:B3:AC:3E:59:EE:3A:47:90:A6:9C
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584916B3B3BF84102ACF17739000
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e7216377-bcf3-3502-a37b-750a6d09b099.roa
Signing time: Wed 05 Mar 2025 16:03:41 +0000
ROA not before: Wed 05 Mar 2025 16:03:41 +0000
ROA not after: Tue 03 Jun 2025 15:03:41 +0000
asID: 22691
IP address blocks: 204.141.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:16:b3:b3:bf:84:10:2a:cf:17:73:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Mar 5 16:03:41 2025 GMT
Not After : Jun 3 15:03:41 2025 GMT
Subject: CN=68a5fd86-2dbd-436b-937e-085f10b28463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:5e:5b:1b:03:bf:d2:c3:f0:3f:7a:e7:8b:
8d:e3:d0:75:b5:bc:88:a8:e0:07:d5:5f:e1:b1:38:
55:e0:1e:ab:ff:96:da:b4:73:d0:3b:f6:03:96:db:
24:f3:d3:f6:f1:ab:d3:25:0e:9a:00:1b:f5:f4:b6:
e7:61:f0:fa:00:2c:7e:ba:68:da:bd:03:04:ed:08:
7b:12:6e:11:99:44:07:ba:32:2c:1b:4e:b0:e6:f9:
ae:47:ce:08:39:e0:fc:2f:bb:a4:52:ad:97:01:58:
24:fa:3c:99:e1:ba:e5:f1:b9:d4:85:34:a1:88:90:
cd:eb:82:ab:e2:79:91:f4:64:04:d1:20:70:a9:aa:
4b:ff:9f:e3:6f:60:89:c4:d4:1d:c2:bb:75:6a:63:
bb:be:e8:dc:43:e4:dc:09:33:46:19:49:30:b6:ea:
84:59:7f:3b:e4:a4:0d:80:23:e3:85:ed:33:f3:52:
10:51:fe:7d:b7:d6:ad:7c:e2:e9:a9:94:8a:a9:5e:
8d:50:bb:f9:4b:06:2b:68:a8:48:d6:e5:11:74:c4:
e1:9a:75:93:ff:64:68:02:55:69:bb:fd:3e:15:da:
23:56:49:85:54:bf:6c:f6:6b:37:96:a1:2f:d6:36:
d5:bb:a2:12:6f:a1:f6:bd:f2:9f:68:c1:93:a4:4d:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:37:1E:6D:10:CA:01:EB:32:1F:B3:AC:3E:59:EE:3A:47:90:A6:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e7216377-bcf3-3502-a37b-750a6d09b099.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.141.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:1a:41:81:19:ed:74:ee:bb:24:85:f5:01:e6:d6:8f:7b:c7:
60:11:bf:a2:75:4a:f9:bc:27:4c:24:1a:1e:8f:6f:16:fb:13:
70:ab:64:7c:b0:f4:cb:fb:55:50:2d:6c:f7:1e:53:19:be:a5:
fd:55:10:e4:3b:c4:55:8f:6f:04:08:8b:90:fe:04:28:68:18:
bc:f2:41:f5:8f:4d:28:54:9c:07:fd:68:11:33:4d:83:b0:b8:
02:08:39:25:d9:2d:bc:e2:83:f7:2f:6e:25:91:ba:22:92:78:
49:c4:59:3b:88:2b:43:13:08:f9:69:7e:47:61:c7:b9:3f:3c:
f5:68:35:9e:fa:be:4e:39:4d:5a:6b:a4:81:b4:5b:20:bc:7b:
a5:e8:5a:3d:50:84:c6:ed:c3:62:84:6e:6d:f1:6b:b1:f4:19:
32:6a:dd:85:6a:25:47:c4:b5:55:cc:49:c1:fd:49:e5:26:99:
a0:b7:d3:92:a5:1f:b7:26:51:91:33:05:38:c2:99:fa:d5:7e:
91:3e:0b:82:65:84:a9:65:cf:f0:98:85:32:03:6a:cd:78:48:
c3:0e:95:bf:91:84:a0:83:6f:5f:39:1b:2b:11:4b:ba:4e:f5:
0c:ee:8a:66:9b:f4:2b:09:cb:4a:7c:6c:e8:67:0b:3e:cd:bf:
a3:02:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:35:19 2025 by rpki-client