Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/2982a1ea-4e16-34ae-8afc-1c1b857ab301.roa
File: 2982a1ea-4e16-34ae-8afc-1c1b857ab301.roa (raw, json)
Hash identifier: Vi46yd1HWxDzuV4OqxPlOGrNI4czXYwxbnrJUhw/8ZQ=
Subject key identifier: 4C:D7:14:03:44:6A:46:6F:15:73:C4:D9:8C:2C:0D:77:07:CF:D6:FB
Certificate issuer: /CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55
Certificate serial: 010D0C9F4328584919417E023FFFB2674CA2E7E0
Authority key identifier: 3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/2982a1ea-4e16-34ae-8afc-1c1b857ab301.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 204.17.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:7e:02:3f:ff:b2:67:4c:a2:e7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8139ba-06a7-4b31-baf7-d40af70fdc55
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=a0103cd7-0cd4-4b82-86f8-35b946b228e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:f2:60:c7:2a:56:1f:fe:9e:65:20:55:3e:
9e:7d:d1:a8:85:ec:94:4d:6f:9d:93:ad:23:9b:78:
7b:3c:9c:ec:0b:58:be:b4:22:9e:07:95:d8:e4:87:
9f:ee:b7:79:af:dd:67:55:98:2a:a9:72:0b:90:3a:
cd:b9:58:2c:ca:4f:e9:87:9b:7b:49:7c:18:0d:6c:
e9:cb:82:f1:f8:45:48:e9:82:5f:fe:4b:fb:22:7c:
62:96:a6:dd:a4:e3:53:af:9e:34:fc:70:c9:a7:7c:
a7:40:1d:0e:9b:80:92:20:9f:2a:d2:dd:86:32:ea:
e8:1e:64:a9:72:27:66:0e:47:31:aa:ac:10:1a:ee:
c3:23:3f:4b:07:3c:60:47:12:05:52:c5:49:2c:ae:
db:bb:ab:86:a0:93:1b:f3:69:c4:9d:bf:34:b6:eb:
1b:2c:30:c7:4d:e2:12:7a:f1:e1:5b:0f:04:6a:4f:
7e:fe:ef:6a:eb:35:e5:d4:ad:a2:c1:a7:a2:04:18:
d4:e5:ba:ca:2f:4a:75:47:4a:e8:71:44:11:df:a8:
f3:fd:90:1d:d6:c4:bf:48:60:da:53:62:7b:b1:d9:
bc:1f:5a:b9:bd:69:27:10:36:e8:19:18:5b:f4:4a:
5f:2a:4f:87:7c:4d:61:62:78:06:d9:65:7c:41:ce:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D7:14:03:44:6A:46:6F:15:73:C4:D9:8C:2C:0D:77:07:CF:D6:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/2982a1ea-4e16-34ae-8afc-1c1b857ab301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55/3f8139ba-06a7-4b31-baf7-d40af70fdc55.crl
X509v3 Authority Key Identifier:
keyid:3D:99:95:E3:FF:A1:7A:34:6F:61:22:3C:50:F3:10:33:DA:1E:11:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8139ba-06a7-4b31-baf7-d40af70fdc55.cer
sbgp-ipAddrBlock: critical
IPv4:
204.17.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e2:fe:01:8a:fa:d1:72:ca:45:c0:ed:06:ef:ac:e0:d7:38:
5a:46:d1:f8:d4:fa:42:6d:fe:2b:19:6e:22:fa:4b:ac:55:aa:
29:6c:aa:68:39:40:3b:80:e2:fc:83:89:93:88:b0:5d:d5:64:
51:d1:eb:e2:a5:94:f2:3f:d3:a0:aa:a8:9d:46:8c:10:1f:01:
31:25:9f:ce:db:2d:9a:fc:1b:f0:b0:c3:e4:1d:fa:06:f1:e7:
ac:0a:70:92:52:73:35:de:38:95:68:17:e4:34:f3:9f:87:ae:
30:a3:e5:9a:a4:56:e1:42:fe:bc:fb:b1:ce:f4:9c:73:12:51:
94:04:8e:98:93:45:62:02:78:28:71:22:1c:9f:bb:b3:a6:5e:
dd:ed:af:cc:fd:a9:70:90:f2:4f:1f:ff:f2:36:2b:f3:1c:6d:
64:ee:e8:f7:6b:f1:c9:8b:b3:5a:02:5a:46:18:e6:88:74:0d:
b8:19:a5:a8:a7:98:25:eb:bb:1c:a3:09:2e:c9:1f:1e:58:ce:
eb:e8:2b:a1:3f:5b:bc:b2:fe:5d:af:38:95:f6:e4:39:cf:4e:
45:8d:bb:54:cc:5c:6b:cf:23:c5:35:2b:6b:83:b1:8b:84:c1:
25:19:a6:f4:ce:e5:a2:d0:c7:4f:b8:95:e9:4b:40:fe:5a:cd:
97:e5:43:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:16 2025 by rpki-client