Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/a038081f-a662-3b16-8bc6-9757f5f3d291.roa
File: a038081f-a662-3b16-8bc6-9757f5f3d291.roa (raw, json)
Hash identifier: 6MxKeqOc+jRgr65aloXFsAmLy2wjegYrBPfZvd/4B2c=
Subject key identifier: 41:8C:54:62:D8:55:71:0A:AA:1B:90:E3:34:34:0E:4F:BD:0F:F4:28
Certificate issuer: /CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
Certificate serial: 010D0C9F43285848E2D1181F2E2E09CDFEEF7940
Authority key identifier: 82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/a038081f-a662-3b16-8bc6-9757f5f3d291.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 396982
IP address blocks: 205.142.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:18:1f:2e:2e:09:cd:fe:ef:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=505a2e67-2305-41b2-9b93-13d6918aa3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:32:65:09:74:d5:6e:3e:d8:eb:02:83:0c:
f6:51:e4:f6:6b:e3:70:9c:36:58:09:f4:26:f2:60:
1e:06:87:93:39:d6:d7:d1:c6:8c:08:1e:68:ba:43:
68:8e:ef:8b:e3:12:a0:97:fa:ff:7e:98:d7:c8:ce:
95:22:01:9c:5c:f1:a4:f4:82:dd:99:c0:d0:bb:63:
f1:4e:a2:b9:cc:fe:5a:1d:13:d3:16:51:91:6e:0c:
4c:1d:4f:bf:c4:40:5f:fe:ce:53:e0:63:9d:32:36:
0b:d3:8c:b0:f4:86:cb:61:38:93:a8:3d:e8:71:64:
a5:0c:dd:a9:ee:5b:33:67:41:cd:69:32:79:7b:a8:
dc:d3:ce:65:82:6f:fc:72:f5:01:9f:93:e5:57:84:
aa:c3:7e:bc:9c:8d:64:a5:d9:51:16:3b:d5:ac:04:
fc:6a:a4:df:cf:72:52:27:6d:98:a1:67:97:61:7c:
18:23:bf:46:6b:d6:0d:00:1c:72:b1:4d:88:ee:04:
08:4a:09:9c:80:dc:18:e4:e9:0f:0a:cf:f0:54:b3:
8d:69:7b:f1:37:5d:88:9a:36:b6:68:11:dc:9d:b5:
d9:04:d8:18:b4:06:ff:97:ad:9f:31:9a:65:bb:b5:
eb:49:56:0b:c6:03:97:6a:4b:d3:72:27:97:3d:16:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8C:54:62:D8:55:71:0A:AA:1B:90:E3:34:34:0E:4F:BD:0F:F4:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/a038081f-a662-3b16-8bc6-9757f5f3d291.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl
X509v3 Authority Key Identifier:
keyid:82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
sbgp-ipAddrBlock: critical
IPv4:
205.142.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:44:40:cd:26:3f:dc:f9:9c:0a:26:f7:98:8c:15:20:32:8f:
a0:b3:88:e1:7d:8f:ee:24:4e:dc:f0:fa:4e:3c:8d:46:42:35:
65:50:1d:e3:0b:59:2f:27:a0:4d:04:ca:69:5d:d1:1f:19:a6:
6c:36:e1:98:a5:cc:45:bc:a8:72:17:c6:ed:ee:c0:c6:b2:6d:
5a:61:e6:85:86:a5:3e:7e:ef:8a:69:fb:5a:da:8a:83:8e:fd:
7d:3c:12:72:3c:54:c1:87:0f:ce:87:fb:5f:06:f0:30:9b:d7:
98:9e:c0:17:1b:bf:21:f2:97:07:c7:2e:49:c1:f7:8a:00:eb:
08:33:0b:4d:81:2d:dd:97:e6:16:64:5e:4a:62:69:97:36:7c:
e6:3c:cc:a8:19:69:cb:5a:0a:d9:1c:f5:67:78:b9:06:48:61:
a9:7a:15:96:06:c9:f2:2a:a6:92:44:99:e7:4c:12:85:90:f4:
b1:57:19:33:9a:b7:4e:c3:45:24:2b:1a:cb:00:34:e5:76:2e:
ab:6b:45:3d:8c:96:95:a3:72:f7:13:ae:df:bc:31:71:26:dc:
01:a6:30:b2:a7:38:3a:9b:8d:95:2e:e0:81:c2:dd:c7:f9:09:
6d:43:c4:43:0b:d1:4b:85:e8:9e:2d:10:11:d3:7b:3e:b5:19:
4a:f6:b7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:20 2025 by rpki-client