Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
File: 844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa (raw, json)
Hash identifier: O+3ogG4ELjXzKo63+i6thIhONg8vQJBHfDNYEcaJD7w=
Subject key identifier: 2A:C8:F1:DC:E0:03:E5:86:74:D9:34:E8:FE:42:86:3B:BD:1E:EB:04
Certificate issuer: /CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
Certificate serial: 010D0C9F4328584917DC2672C610F28C5520E6EC
Authority key identifier: B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 10453
IP address blocks: 205.149.128.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:26:72:c6:10:f2:8c:55:20:e6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c48d5fb-059b-4fd2-92a8-31f143f5f719
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=80db1f8b-18bd-4428-9e06-d121e6cdc88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:00:39:d5:cd:57:de:76:76:9f:62:e7:1e:
e1:7b:21:52:88:d2:34:48:bc:8c:89:a4:42:30:c3:
75:a1:1b:79:63:dc:01:a9:6e:e2:6b:a1:86:f7:b4:
c0:85:e4:b2:14:ad:1a:6b:21:62:e4:6f:d5:8f:69:
09:f6:aa:8c:0c:06:94:5b:6a:35:8d:c7:91:e1:40:
67:8c:08:59:53:d4:ad:e0:ef:66:13:c0:27:cb:d8:
42:02:dd:2f:a1:55:b2:0f:c9:04:b4:d4:03:37:d9:
57:56:9a:c2:cf:d3:93:bc:bf:06:d1:2c:d2:fc:fc:
2a:c3:89:ba:e2:2a:d4:00:b7:c9:fc:e6:c6:7c:b0:
48:8b:41:26:f9:8a:46:2b:48:98:31:fb:6a:3b:45:
25:40:4f:2d:55:a5:59:ca:9e:96:9f:d3:69:49:b2:
c0:c9:d4:8f:be:a9:39:f2:4d:46:c4:90:da:15:c3:
bb:77:c7:7a:20:f9:e6:cc:93:f0:db:07:d3:5a:2a:
8c:22:6b:2f:1e:5a:fa:fd:c4:65:94:6d:e6:74:25:
a2:d9:75:ee:dc:68:d7:29:d2:71:0c:22:17:69:cd:
e5:87:91:45:a6:5e:5d:fa:91:d3:1c:42:84:ca:5a:
b7:a1:31:4f:3c:ef:b2:22:86:9a:03:df:b0:36:4e:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C8:F1:DC:E0:03:E5:86:74:D9:34:E8:FE:42:86:3B:BD:1E:EB:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/844a79ab-3291-3596-a3fa-0b2b1fdc7e58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719/7c48d5fb-059b-4fd2-92a8-31f143f5f719.crl
X509v3 Authority Key Identifier:
keyid:B0:D6:7A:11:95:9D:2B:E4:A5:B2:D7:8D:03:06:76:6E:4C:83:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c48d5fb-059b-4fd2-92a8-31f143f5f719.cer
sbgp-ipAddrBlock: critical
IPv4:
205.149.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:3f:d1:4c:3c:ec:ba:6f:7f:20:4e:5f:88:70:0f:ed:93:06:
dc:0d:45:34:3f:c4:89:05:a4:3b:57:b9:7c:ba:83:51:91:d1:
ea:2f:e2:70:c4:1b:02:67:0b:39:a1:b0:3e:42:5b:29:52:e2:
89:d0:ac:5c:ff:f0:10:ba:b2:40:bd:b9:03:55:ee:8f:23:3b:
fe:a5:b5:99:99:c0:9e:ee:bb:34:4b:cf:f3:e9:3b:9d:10:f2:
71:5c:77:b0:65:62:3e:23:f7:25:c5:d0:29:56:5c:01:af:7f:
a1:d8:94:b0:fd:75:c4:e5:7c:22:71:83:9e:3f:72:13:09:f3:
a7:b4:1c:16:97:c0:85:1b:5c:66:47:26:86:21:42:82:ac:9d:
4d:1b:ed:9a:aa:86:da:32:2d:3b:87:62:5f:2f:38:36:de:ef:
22:e2:9a:f7:f5:1e:44:47:48:97:92:d9:d6:22:af:8c:4f:01:
ee:51:ed:d7:21:da:7a:88:d4:9d:92:10:3b:c4:bf:6e:35:e1:
5b:c6:7b:8a:f5:19:6e:93:6d:1a:ec:02:2d:f9:19:c8:d0:e6:
e0:c7:f1:27:9e:11:76:7c:5a:b5:fe:a2:25:3f:ba:9d:04:0b:
60:ee:b4:98:56:2c:d8:3f:fe:31:5b:75:7f:c2:1a:db:3f:70:
6e:0d:e8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:20 2025 by rpki-client