Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa
File: f45bc517-864a-32c1-b059-db26a9dffa20.roa (raw, json)
Hash identifier: WwkyeMWdHBMuWNZwSo4Pe7LJmm9fQuD6gkNrHogtFaY=
Subject key identifier: BB:C8:11:7E:1C:FE:D6:FC:1D:CC:1E:B7:A6:68:BF:EB:01:50:71:A9
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848F65BE6BA5D867492E5681100
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 3938
IP address blocks: 204.141.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e6:ba:5d:86:74:92:e5:68:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=a5b2577b-3e36-4bd8-9d34-a6866bb3aa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:6c:a8:f9:87:f3:ca:5a:83:79:10:e4:e9:
65:d3:04:ba:e3:a9:90:3c:03:10:5a:e7:1a:2d:53:
58:f0:e2:84:61:2f:4c:5a:7b:8f:ee:eb:55:cc:47:
be:ee:1e:4c:68:8b:f0:a4:20:ef:4d:45:07:f8:12:
93:2f:02:57:5d:7f:1c:52:41:ce:b6:9e:cf:4d:d5:
6e:10:da:fb:8b:42:a0:d4:c7:3a:99:36:db:be:fd:
9e:e4:58:9d:24:bf:ed:e1:82:e2:f1:b6:3f:07:6e:
ef:b1:35:65:54:96:d3:c6:f9:d9:c3:fc:ae:47:de:
19:ac:de:7e:5d:34:ea:c2:1a:86:b5:c1:8e:55:4e:
c5:37:cc:96:2f:9c:64:71:0b:cb:9a:c6:fd:14:89:
ac:c1:66:bb:e2:8e:5f:f9:82:ac:90:27:5c:89:36:
f2:8b:25:9b:2e:52:a4:e8:7b:5e:cb:6f:0b:a4:2f:
ae:60:9e:6c:f6:86:69:18:e3:b4:2c:51:2a:42:fa:
da:bc:51:3e:a6:05:a0:6e:53:82:0a:5c:06:de:b0:
0d:0b:26:e6:e5:7e:25:1e:c8:b8:e2:77:f0:7d:47:
5b:fd:13:cc:7c:61:71:0e:42:14:78:2d:72:0e:e8:
f9:b0:82:ac:4a:27:21:0f:19:9c:d7:4a:c7:be:c2:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:11:7E:1C:FE:D6:FC:1D:CC:1E:B7:A6:68:BF:EB:01:50:71:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.141.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:5b:77:cf:72:de:a3:2d:57:04:0f:92:93:62:c0:9f:07:8d:
fc:91:a4:95:ca:eb:d3:cc:64:2d:53:ea:5e:da:bf:6f:c6:87:
40:03:1c:d9:2a:30:5b:6c:78:b8:a5:6c:44:46:cc:c9:95:b0:
cf:aa:18:7a:6c:a6:9d:c7:59:3c:7b:95:74:df:a1:06:52:40:
37:cc:6a:05:83:39:3a:63:a3:24:ed:ad:e2:f8:17:5d:ee:cc:
93:79:be:bf:d1:7f:ed:e3:f4:65:88:5a:66:fc:37:5b:fe:95:
01:3c:42:a1:ae:bb:a6:a2:c0:d1:39:f9:cc:80:04:ed:32:60:
3a:52:02:62:8d:62:ff:1e:7d:d0:20:30:af:4a:93:ef:51:6d:
22:d2:eb:ef:c7:5a:60:1a:e1:39:48:e0:c2:d6:36:51:32:c5:
d8:c4:3e:f5:09:83:cc:99:90:91:20:16:a1:f9:c8:f3:f0:05:
76:d0:a3:e3:b8:7e:46:95:cf:ef:26:50:48:ad:9c:c0:40:d9:
d8:f2:db:17:44:6d:bc:28:d3:fb:14:36:5b:04:7b:93:22:e3:
69:ac:42:86:cd:67:c2:e0:f8:ec:7f:7e:45:ac:7c:be:fa:60:
46:c2:0a:6f:66:e9:e5:31:a4:b2:f4:21:77:6a:32:45:70:e6:
d1:53:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:15:00 2025 by rpki-client