Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa
File: 17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa (raw, json)
Hash identifier: JHwFiFguFVgVrcgjW8cgEHgGBscXfYdkCgG5rKcemnw=
Subject key identifier: E3:3D:3A:F8:47:21:E7:60:52:52:D1:DD:D4:26:57:32:9F:28:B1:19
Certificate issuer: /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial: 010D0C9F432858488E7DA58DCA2AE57F767EB000
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa
Signing time: Wed 15 Jan 2025 21:04:50 +0000
ROA not before: Wed 15 Jan 2025 21:04:50 +0000
ROA not after: Tue 15 Apr 2025 20:04:50 +0000
asID: 400928
IP address blocks: 204.89.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8e:7d:a5:8d:ca:2a:e5:7f:76:7e:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Validity
Not Before: Jan 15 21:04:50 2025 GMT
Not After : Apr 15 20:04:50 2025 GMT
Subject: CN=d76ddda9-f0c1-459d-8514-cc684f675954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:dc:e7:f1:50:cb:6b:13:b4:da:e4:a7:6b:
06:5c:d3:85:77:c0:0e:93:98:a8:17:33:71:8b:ef:
2f:7a:c6:e7:5d:04:75:c0:cc:13:df:cb:76:7d:17:
7b:ef:2a:b0:be:91:78:68:11:6c:72:07:5e:0d:7f:
ed:c6:fd:70:6f:79:35:52:73:77:ae:54:0c:b2:01:
81:e5:fb:07:ae:3d:19:d6:04:6e:c7:15:80:6a:f9:
c9:22:79:1b:ed:e6:5e:fb:ce:cc:c2:b5:1a:1f:73:
00:9f:2c:d7:b1:17:08:ad:56:18:1d:e1:12:f7:8b:
c8:67:35:5b:77:59:9e:5f:3d:f2:7f:eb:b4:b0:c7:
1c:0c:e6:1f:03:db:49:1f:af:5e:eb:97:a5:fc:8c:
3c:33:57:7f:cf:ff:79:3b:d6:9c:a6:38:cd:57:84:
04:aa:80:4c:d4:9a:61:96:78:c1:9d:04:89:e4:66:
e6:03:4f:18:48:89:cc:59:33:54:ed:81:92:8a:63:
1e:8a:dd:8d:99:6e:21:a3:8f:19:6d:a3:e2:3d:3f:
8e:7b:64:55:93:33:eb:31:f0:4b:cf:84:61:81:de:
79:7e:d9:c7:c7:91:46:99:c8:82:c7:87:23:06:2b:
3e:59:d2:59:45:4e:26:f3:42:0f:a0:db:d5:ff:98:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3D:3A:F8:47:21:E7:60:52:52:D1:DD:D4:26:57:32:9F:28:B1:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/17527c31-4f0d-3bb2-b43a-d7f6ca3e748c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
X509v3 Authority Key Identifier:
keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.89.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:23:df:0c:af:0f:bb:3c:0a:5e:15:c0:e7:dd:d9:4a:97:9e:
d8:8c:a4:e4:6d:9f:b0:e2:1b:85:b7:33:13:30:ee:f0:09:96:
e8:4e:80:3b:ad:16:32:57:89:e4:9f:a2:b8:28:d4:56:0a:a9:
03:f0:40:48:24:22:7a:21:03:98:8f:6c:f8:7e:46:f6:11:9d:
41:a5:94:39:e2:a6:e1:c5:4c:90:99:3b:40:60:e1:40:bf:8a:
e5:ab:bc:f2:c6:1a:ba:30:07:dc:8c:46:9f:69:a2:62:e8:34:
a1:24:87:8b:70:50:06:7b:7c:67:26:47:20:5a:a0:98:27:74:
4c:95:6b:0c:a7:32:5b:08:15:d1:83:cf:20:db:5f:84:eb:f2:
a6:f7:97:cc:0f:0a:d4:11:61:20:90:5f:53:21:9b:8f:be:9a:
b0:a4:90:a6:dc:b4:d9:2f:c3:46:1b:36:d4:66:22:e8:5b:88:
49:dc:46:88:67:32:54:cf:6f:5a:4a:13:6e:7f:c4:68:9e:c3:
ec:ef:96:9c:a5:2c:22:59:24:29:e8:0e:ad:aa:08:25:89:ff:
be:c3:67:e1:66:29:15:21:89:b7:20:5e:46:41:ab:29:49:b7:
4a:47:1f:9b:da:cb:e0:6e:7e:fd:fc:3a:0e:9e:36:f2:18:0c:
34:62:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:08 2025 by rpki-client