Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa
File: 4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa (raw, json)
Hash identifier: H6ORA4sJVASBCWLHPaj+wHMagV5iK2wPl1a1Yu3mYTo=
Subject key identifier: DD:4E:0A:FE:A5:31:D4:EA:11:00:6F:93:BC:63:A2:B2:85:23:A7:55
Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial: 010D0C9F432858492ABC3EB1464CB9D3E0ED1890
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa
Signing time: Wed 12 Mar 2025 20:17:04 +0000
ROA not before: Wed 12 Mar 2025 20:17:04 +0000
ROA not after: Tue 10 Jun 2025 20:17:04 +0000
asID: 14618
IP address blocks: 204.57.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2a:bc:3e:b1:46:4c:b9:d3:e0:ed:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Validity
Not Before: Mar 12 20:17:04 2025 GMT
Not After : Jun 10 20:17:04 2025 GMT
Subject: CN=46749e31-4999-4e76-9843-2301704cd4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:ba:97:73:f2:9c:3f:be:57:f1:fb:95:f4:
37:6f:b6:36:b1:06:6d:89:fb:a0:ac:4e:54:d5:11:
f6:bb:76:e8:0d:77:85:c5:f2:39:8e:74:09:1f:6b:
2d:4c:49:15:c4:f0:fb:dc:e1:75:4f:e3:08:16:56:
3c:0a:98:8f:00:b2:77:92:b6:82:78:2a:14:fd:29:
d3:40:c7:db:c3:1b:02:32:41:94:1a:5f:a3:01:f6:
55:98:0f:a5:4e:a1:f1:f8:5c:af:01:de:9a:ac:1e:
70:14:c6:f5:eb:de:df:24:0d:a6:d4:5f:00:ef:23:
7f:db:d3:8b:f1:c5:57:bd:a7:ff:db:81:da:2c:88:
a1:29:99:69:36:97:38:8b:17:08:9c:c9:e1:c2:01:
b2:1b:19:35:89:0d:c7:31:80:b0:86:4f:f9:21:a7:
7e:b6:3b:11:9b:8f:42:9c:7b:42:5e:73:81:c6:be:
c9:5b:85:09:f7:dc:ad:07:94:15:08:21:58:18:f3:
24:64:c6:68:08:d4:31:4e:4d:7e:51:8d:1b:02:bf:
fd:3c:25:0c:fe:76:9d:a2:33:53:ae:91:01:db:89:
35:7a:d7:f5:9b:d7:eb:b9:9e:84:75:da:4a:d8:16:
0c:c8:76:a3:91:8c:6e:ea:9e:7d:b9:16:e1:1f:46:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4E:0A:FE:A5:31:D4:EA:11:00:6F:93:BC:63:A2:B2:85:23:A7:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
X509v3 Authority Key Identifier:
keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
sbgp-ipAddrBlock: critical
IPv4:
204.57.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:9a:18:df:84:67:82:dc:73:df:f6:9e:79:7f:5e:4b:23:b9:
f4:02:2a:50:ef:d6:e5:80:93:cc:dd:8f:ca:0a:78:d8:69:0f:
8b:23:a4:75:ac:55:66:c0:6d:e7:fd:25:9a:66:f2:ee:3e:1d:
dc:d8:c2:f5:d7:91:04:55:09:d1:c8:1f:4b:72:d9:44:12:8b:
24:ee:19:50:96:d2:c4:be:94:12:2f:5f:dd:45:70:11:84:00:
1d:0a:81:16:b8:97:39:98:51:75:d1:49:92:5c:6b:c9:12:b4:
55:a1:6b:c7:fe:4e:86:fc:7e:3a:84:b7:bf:6e:01:e3:54:cd:
76:9f:9b:66:17:e3:db:bd:37:ac:f3:b5:c0:d0:c5:62:af:b8:
12:f6:f9:32:5f:43:e2:09:7f:56:4e:64:e2:8c:d0:8d:04:87:
ab:1b:2f:1f:36:43:bf:c8:55:62:2e:4c:84:14:89:53:14:7b:
54:19:2b:f4:ba:a1:24:fc:dc:67:4c:47:5d:11:45:4c:32:3c:
ff:52:ff:28:7c:9d:94:2e:81:32:5d:33:42:5e:bd:d1:bd:74:
65:15:09:94:b7:94:f6:fa:65:6a:e7:8a:ee:b1:ae:32:c5:fe:
0d:3a:e5:48:54:5c:d1:58:35:81:4f:d2:db:61:48:d5:01:36:
ef:c0:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:05:04 2025 by rpki-client