Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa
File: 89fdbba5-c305-3bf1-be38-0d9990f5f655.roa (raw, json)
Hash identifier: D3Q2nVV/wUB73joAPjot+OwdI62VDF+HjGLR36Dcqes=
Subject key identifier: 71:7B:E2:7F:21:F6:C1:96:32:28:18:C7:27:81:0D:04:71:30:BC:4A
Certificate issuer: /CN=0067e111-9d19-4c1e-a1ef-86f133669a8e
Certificate serial: 010D0C9F432858494303E982751D64ACECC49B40
Authority key identifier: 96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa
Signing time: Fri 21 Mar 2025 13:00:50 +0000
ROA not before: Fri 21 Mar 2025 13:00:50 +0000
ROA not after: Thu 19 Jun 2025 13:00:50 +0000
asID: 393966
IP address blocks: 204.239.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:43:03:e9:82:75:1d:64:ac:ec:c4:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0067e111-9d19-4c1e-a1ef-86f133669a8e
Validity
Not Before: Mar 21 13:00:50 2025 GMT
Not After : Jun 19 13:00:50 2025 GMT
Subject: CN=151d9651-4c82-419b-ba38-319a4db4783b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:1e:64:9e:fa:f5:5b:5a:71:4f:fc:16:e3:
0e:fa:79:1b:55:4f:72:16:48:61:04:a2:77:8b:fa:
ea:29:4a:15:6d:34:4a:37:04:66:6e:2c:92:bc:42:
3e:fa:ab:17:d7:0d:a1:da:da:d7:cb:52:e8:42:95:
63:6b:67:5f:e4:e3:20:de:6b:39:fe:b7:12:e6:85:
e9:06:cd:6c:27:b0:dd:a4:2c:ca:69:14:ec:bf:d6:
11:ef:9c:35:d5:45:2a:3f:62:e2:0a:1d:db:bd:b3:
ca:28:31:e1:d8:f8:98:6a:88:63:9a:46:d5:94:81:
86:38:26:6c:7d:37:6e:a9:da:f5:59:7e:7e:c7:b3:
08:e4:32:12:01:69:d1:06:a6:ee:35:2a:ec:f0:65:
2c:fc:0a:d9:ad:00:5b:3b:8b:2f:65:f9:ab:b8:c0:
03:a6:44:a1:05:95:c9:61:1f:49:c3:a6:db:06:96:
ee:21:6f:dc:f1:34:50:9c:1e:ad:18:3c:e6:47:6a:
39:1a:d2:c9:e2:23:c9:cb:38:ca:c2:f5:bc:82:ce:
3e:ee:56:5d:48:e3:0e:aa:2e:31:d0:3b:89:d1:0c:
ed:bb:66:6a:5d:c9:1e:0d:ef:2c:19:95:90:3a:73:
e4:66:92:98:39:28:11:f9:03:06:03:6c:aa:37:0e:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7B:E2:7F:21:F6:C1:96:32:28:18:C7:27:81:0D:04:71:30:BC:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/89fdbba5-c305-3bf1-be38-0d9990f5f655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e/0067e111-9d19-4c1e-a1ef-86f133669a8e.crl
X509v3 Authority Key Identifier:
keyid:96:C9:16:5B:07:FA:AD:FC:DA:FD:53:09:8E:03:12:16:D4:83:92:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0067e111-9d19-4c1e-a1ef-86f133669a8e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.239.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:82:62:d7:b5:ed:e0:c7:e1:8f:04:c1:e4:00:43:aa:d9:5a:
72:ff:04:fa:eb:c8:f3:5d:10:09:7a:40:2f:92:c7:69:20:bd:
70:f4:22:de:93:14:7e:5c:6e:3d:be:a9:f0:62:34:ea:8d:86:
bc:34:db:c8:10:50:f4:4c:a2:ea:b0:01:30:8b:6b:da:84:8b:
0a:e0:79:28:45:19:2f:3e:64:2e:8d:69:40:33:c5:85:c7:6d:
23:c8:7c:bd:16:89:bd:01:c0:53:4e:46:4f:a8:49:c3:c1:ff:
cb:90:85:58:ef:81:fc:75:1a:57:5a:8b:2b:eb:97:ce:19:43:
91:80:79:21:8e:6b:e0:ec:c0:68:d2:e3:fc:41:f3:24:66:96:
fb:bc:5b:55:94:07:79:3f:10:80:57:40:1a:bd:51:4b:97:b9:
0c:d3:27:54:0d:0f:c7:99:53:d5:f7:1f:6b:c8:73:1d:be:a7:
49:fe:09:cf:6d:87:1d:70:90:36:0d:71:4a:97:77:04:04:c3:
20:90:54:34:ac:2a:5c:c6:f5:57:bd:eb:28:0c:74:8b:50:0c:
f6:64:fb:35:1f:99:25:f5:d3:db:cd:ca:d3:c0:c2:88:43:f2:
51:51:a5:10:05:e3:c0:57:3a:77:53:68:02:81:c2:8f:5f:d7:
79:8b:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:38 2025 by rpki-client