Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa
File: 89690801-3877-35af-874c-1b06e4cd1f4a.roa (raw, json)
Hash identifier: wwQYsEnK1YCO5gOLHAxlveqCg1nujSp4JC9hjA6ofMw=
Subject key identifier: 3D:56:16:9D:AD:D2:73:2C:AE:83:83:A3:C4:FE:78:FC:1E:1A:E5:80
Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial: 010D0C9F4328584921840B62651AED1FD7290DB0
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 62467
IP address blocks: 204.197.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:0b:62:65:1a:ed:1f:d7:29:0d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=9434b7cc-ad29-4105-81fd-1c237b66332b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:02:f1:f5:0c:1d:c6:1d:a4:ba:5b:70:5d:
ef:e5:41:4f:96:b7:3c:bc:93:03:b1:6d:91:d3:39:
97:3f:d2:f2:b8:76:61:52:60:e9:a8:66:0a:bc:1d:
a6:af:58:86:12:2a:9c:08:f6:7e:04:8c:92:80:36:
ca:ac:41:77:bf:ee:d0:ae:96:d3:b1:1e:52:0e:70:
6d:a2:bf:ef:c0:49:b6:59:a4:5b:ef:8f:f4:05:ab:
0a:cf:9e:aa:02:8e:fb:29:36:a5:1d:12:7c:28:90:
dd:51:14:d1:57:36:f5:cd:53:fd:7a:a2:af:f4:b4:
a2:4d:d0:26:ba:c7:42:04:95:d1:e7:69:aa:c2:5f:
fb:fd:47:78:db:46:c0:cb:1a:e1:eb:8c:96:08:e1:
b1:8d:13:f3:0c:a1:6b:27:02:0c:2e:c0:38:f4:e3:
73:ce:31:20:c6:df:bc:de:a7:09:ab:15:dc:7a:c2:
d3:be:02:cf:a1:c1:10:b0:ae:7f:69:49:c0:0d:9c:
88:65:b7:86:6c:76:80:e9:67:df:e8:f1:8b:c9:61:
6c:c2:d2:e4:ab:32:dc:22:a1:7c:bd:88:a1:63:c3:
0e:72:3a:0e:aa:54:37:5a:c1:30:6d:20:ef:9c:bc:
f7:6b:14:6f:34:8d:97:73:68:05:f4:bf:8a:61:ea:
15:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:16:9D:AD:D2:73:2C:AE:83:83:A3:C4:FE:78:FC:1E:1A:E5:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
X509v3 Authority Key Identifier:
keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.197.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:37:0d:28:1f:c0:d4:97:6c:b5:9c:95:f1:29:0b:6e:fb:76:
75:24:b1:f8:4f:3a:9a:f6:dc:3e:6d:e9:a2:77:1d:11:ca:ef:
b3:24:f2:62:7c:ab:15:48:c3:69:0a:3b:dc:64:1c:77:7d:e8:
94:f0:a7:95:cc:d7:9e:c9:bb:f7:28:42:ba:7c:88:6e:f1:55:
b1:f1:dd:06:2e:1d:2f:36:d9:43:a1:0a:2c:45:4d:5a:41:b2:
2e:53:8c:7f:78:cd:7f:f3:4f:4c:e9:38:44:b0:51:47:1e:22:
69:93:79:74:50:c1:06:0d:66:88:89:bb:f3:ab:5d:42:29:d2:
de:16:4f:1c:5a:3d:fd:fa:48:a7:83:b0:c8:0f:7f:57:ed:9d:
d6:d8:8b:61:76:a7:85:f0:44:c3:6c:73:84:c6:d8:27:c8:1a:
31:40:20:af:4f:63:33:5e:64:6d:f1:4e:aa:a7:18:de:39:a3:
da:e2:82:a2:fd:9a:2a:dc:04:7c:a7:9c:e2:84:2b:99:49:b9:
38:92:c7:5d:1d:0a:9d:46:07:9c:81:1d:39:7a:33:41:87:07:
6d:29:bc:dd:b6:43:db:3c:9a:96:6b:2b:49:6a:a2:73:9f:49:
b1:d0:af:a2:24:30:27:01:84:d6:a5:79:24:2e:a7:14:d6:7c:
03:41:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:59 2025 by rpki-client