Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/b467ffea-ab7e-37bf-a807-f672713a612f.roa
File: b467ffea-ab7e-37bf-a807-f672713a612f.roa (raw, json)
Hash identifier: rXuWDOOLjHjnFGsuEQ/Eod2d5SkEMQY59WMIdOK9vCA=
Subject key identifier: 71:3D:89:19:DD:BF:98:D7:8F:A6:AA:CD:4F:EF:EF:2B:ED:81:84:39
Certificate issuer: /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial: 010D0C9F432858491AA6CE119EBDD51C59C31280
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/b467ffea-ab7e-37bf-a807-f672713a612f.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 400344
IP address blocks: 204.154.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:ce:11:9e:bd:d5:1c:59:c3:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=a4956071-002f-493c-b176-5eb61d6d67a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:be:7b:7d:0c:0b:07:e4:25:6b:11:31:31:
9b:85:6d:42:71:e5:bd:51:53:5f:6e:39:f2:15:9c:
0d:c2:a5:1e:d5:5f:dc:d2:d0:19:3c:98:75:2a:86:
05:b0:bb:bf:f7:f7:bd:dc:75:63:28:9d:1e:dc:b3:
31:9f:c6:08:ff:82:6c:fa:4d:1f:9e:32:ce:58:c1:
ee:dd:95:6b:d9:a8:96:07:3d:53:43:83:4c:53:ee:
50:d2:b0:fa:23:36:9b:9e:29:cf:71:e1:3d:41:42:
36:82:ea:99:d4:ba:59:d5:c3:6e:ec:62:f8:e5:b6:
12:09:7c:85:ec:52:18:a6:d2:59:29:02:e9:70:9c:
04:ea:10:29:0e:76:f4:c3:e4:9e:c4:8a:68:9d:07:
b7:30:9f:86:e9:6b:0d:5a:a9:a4:30:78:c0:83:19:
3a:cc:9b:cc:e4:c8:91:77:04:81:82:3f:48:e1:2a:
5d:3f:fb:b1:73:9a:e5:e6:62:8c:89:72:8e:dc:f6:
ba:a9:af:9f:08:8f:54:d0:31:e8:55:95:8b:92:85:
84:13:71:dc:cc:38:a5:cd:f6:ee:9c:9a:0e:be:42:
fd:9c:c0:97:bd:1d:e2:66:41:65:16:af:91:30:43:
1f:04:48:05:1e:79:81:20:9a:e9:2f:c7:20:89:aa:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:89:19:DD:BF:98:D7:8F:A6:AA:CD:4F:EF:EF:2B:ED:81:84:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/b467ffea-ab7e-37bf-a807-f672713a612f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
X509v3 Authority Key Identifier:
keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
sbgp-ipAddrBlock: critical
IPv4:
204.154.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:8a:6a:a0:9b:f9:e4:b9:10:ba:3c:76:8f:ab:3b:61:ed:d4:
53:65:1a:53:9d:a8:cd:e5:db:6c:9d:79:6d:43:1d:a4:4a:55:
0f:02:6d:62:92:45:34:9f:c2:10:7e:d5:13:ca:4f:4b:b1:29:
ff:09:61:a9:cf:4a:8c:8c:26:2e:3d:3d:3d:85:e2:fb:43:33:
66:2c:41:72:c4:65:07:75:dc:5c:39:07:46:b9:4f:8a:90:17:
47:be:69:e8:00:42:f1:64:8a:a9:14:47:cc:bf:9f:8d:38:80:
de:e7:ff:fe:59:e3:b3:a0:e2:3e:a6:ae:4d:59:aa:4b:62:bb:
15:7e:46:1f:04:28:bc:8c:48:63:98:80:e1:95:3a:98:82:b9:
65:51:7d:bf:68:61:9d:57:36:70:dd:b6:7e:aa:a1:0b:ae:6f:
b8:59:be:f9:38:80:bc:c2:b2:24:68:ec:b6:70:48:80:e9:27:
88:f1:41:a6:4a:25:a1:14:a0:c5:8c:7d:ee:9f:8f:af:60:a6:
30:29:a0:4d:6b:e6:1c:a6:e3:68:fd:1a:e8:2a:72:55:96:69:
8b:55:be:36:7f:fd:cb:fb:7a:cf:5d:79:4b:66:4c:49:71:ad:
48:4b:e1:4a:3b:ae:11:7c:62:26:b9:48:a3:7b:b5:0c:b2:70:
9b:2b:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:11 2025 by rpki-client