Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa
File: e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa (raw, json)
Hash identifier: Q3ZopFks2/aeS3drvj8VS1nyUXvALV6vrQmo2jbwXM0=
Subject key identifier: 54:F6:9B:76:FC:B0:88:8A:46:DC:C8:37:40:16:E1:AC:6D:96:7A:9F
Certificate issuer: /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial: 010D0C9F43285848C8C706C089792B8F57B4B700
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa
Signing time: Wed 05 Feb 2025 18:09:34 +0000
ROA not before: Wed 05 Feb 2025 18:09:34 +0000
ROA not after: Tue 06 May 2025 17:09:34 +0000
asID: 21928
IP address blocks: 204.235.252.0/24 maxlen: 24
204.235.253.0/24 maxlen: 24
204.235.254.0/24 maxlen: 24
204.235.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:c7:06:c0:89:79:2b:8f:57:b4:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Validity
Not Before: Feb 5 18:09:34 2025 GMT
Not After : May 6 17:09:34 2025 GMT
Subject: CN=4dbf1b6b-ffd9-47a4-b52b-0390ee1f78ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:65:9f:10:f3:92:55:ed:3d:15:e8:97:d2:
0c:2a:c3:a5:6b:cb:74:b5:52:8a:f7:99:96:29:08:
75:44:64:fd:f6:e6:19:93:7c:33:99:25:c0:de:60:
e3:b0:56:0c:3d:05:d8:87:be:ba:02:ad:68:f3:5b:
c4:04:ac:ec:39:54:ec:32:bc:42:62:d9:50:8a:af:
55:23:53:80:02:29:5a:1b:ed:0f:e6:53:47:1d:ba:
10:b1:ec:08:4d:b4:6e:6b:f8:41:1d:63:3a:9b:54:
71:87:2c:dc:06:ef:5b:da:a1:bc:ee:64:84:be:66:
f0:7f:a4:c5:3a:98:a0:ea:82:f5:16:b2:70:cb:6b:
2c:14:13:ca:8d:1a:c3:66:fc:6c:2f:8e:36:d8:77:
51:db:ad:a6:c2:74:73:bb:fb:fc:c9:43:d6:8b:8d:
65:78:e4:3c:b8:66:88:f0:5f:dc:35:42:a6:0d:a1:
55:ec:f7:9d:e5:7c:5c:a9:ae:12:3a:dc:0b:1c:67:
1d:2a:43:20:6c:41:61:4e:db:e0:53:81:9c:85:62:
bf:da:66:fc:a9:65:69:ab:db:33:93:25:cf:2f:f6:
07:9e:4d:a5:c0:29:53:0a:d1:16:c5:5a:7f:58:e1:
87:ec:4a:b1:1c:d9:88:05:ed:e3:ce:d7:51:9a:36:
5f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:9B:76:FC:B0:88:8A:46:DC:C8:37:40:16:E1:AC:6D:96:7A:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e2e563df-2d29-32d7-ac6b-402dbc1f4261.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl
X509v3 Authority Key Identifier:
keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:b8:76:0f:2e:3a:ae:db:0f:93:84:5c:57:a7:7e:22:e1:bc:
c7:60:84:67:b4:31:af:15:c7:35:39:a0:9a:fe:e7:38:12:e1:
d0:0c:35:d4:68:f9:d2:a3:ad:22:55:88:f5:52:f3:6a:e1:58:
c5:f4:da:83:fd:75:03:90:f8:43:42:a7:14:c9:45:aa:11:fe:
3c:f5:e7:d8:db:cc:2c:80:3a:8f:15:84:cf:c8:09:5c:16:44:
11:b6:12:48:9f:c1:ba:b8:b3:7b:c7:ec:22:52:7f:6b:91:97:
a1:90:0c:78:ea:df:38:54:bc:80:1d:a8:17:1d:0c:8f:53:7c:
ae:03:bf:97:65:1e:40:12:74:81:a6:c8:d3:d0:1f:27:b4:e5:
0c:c1:08:b9:d0:42:61:e7:fa:8f:e0:46:ef:d1:76:de:06:0f:
79:c0:75:1f:04:f3:83:b1:4b:d1:2b:98:63:53:d1:dc:52:d5:
3d:09:cd:56:b6:ee:c4:ad:01:4d:ac:c3:5d:c9:92:17:6c:ee:
da:df:c7:39:ba:b3:d5:b7:7d:2b:bc:08:6c:dc:45:8b:54:f8:
7c:1d:82:3e:d2:52:5f:9b:a0:04:cf:23:24:5c:8b:5a:56:92:
3c:d5:62:70:95:2a:0d:e1:fb:b4:20:3e:5b:e8:d1:5f:98:b0:
1a:61:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:46 2025 by rpki-client