Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/f071eff4-5215-3b61-be03-16494f6309cb.roa
File: f071eff4-5215-3b61-be03-16494f6309cb.roa (raw, json)
Hash identifier: y6rQTnJmmkUhBggpfKAWvUJ+ObdE1gRyHTRax61+CXw=
Subject key identifier: DE:37:3B:52:DE:12:8D:18:84:51:D6:FC:E4:FD:99:03:1A:54:92:C6
Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial: 010D0C9F432858492A662A6BCC3B4C4B1B5D1700
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/f071eff4-5215-3b61-be03-16494f6309cb.roa
Signing time: Wed 12 Mar 2025 17:23:38 +0000
ROA not before: Wed 12 Mar 2025 17:23:38 +0000
ROA not after: Tue 10 Jun 2025 17:23:38 +0000
asID: 16509
IP address blocks: 204.57.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2a:66:2a:6b:cc:3b:4c:4b:1b:5d:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Validity
Not Before: Mar 12 17:23:38 2025 GMT
Not After : Jun 10 17:23:38 2025 GMT
Subject: CN=7ecdc3a7-282e-431b-890a-37b665994023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:ba:ae:03:19:3c:1f:ef:a3:80:57:62:7c:
17:9c:15:32:53:01:19:2a:36:cb:99:72:3d:7f:65:
e3:16:c5:e3:17:28:e7:cd:f3:fe:10:16:77:27:4f:
ac:05:5c:22:da:7e:8e:f1:e5:22:5c:06:ae:4a:fa:
e7:14:80:e4:44:02:0a:b8:67:1d:4f:8e:21:b1:81:
96:2f:cc:36:54:b7:10:40:2a:23:84:8f:e3:3e:cc:
a3:8a:2c:3b:6e:bd:b9:78:c1:51:d0:3b:72:d8:82:
35:e0:98:01:19:91:ee:c3:66:66:a8:36:21:d3:2d:
db:c3:f9:f9:27:24:9f:76:c9:22:62:9b:6d:a2:83:
59:ae:74:e0:eb:6e:80:46:12:6a:71:27:4c:7e:c6:
10:33:9e:ae:4a:d7:82:5f:13:7a:7c:37:cf:87:56:
63:d7:4c:4e:9c:9c:a2:3b:1c:35:f6:63:34:80:0a:
10:ff:a8:e4:7d:8f:5f:22:2f:cd:3e:40:1c:37:4b:
fa:17:6e:29:dc:8c:8a:a7:31:76:79:f3:31:21:c5:
52:6d:e9:b2:ca:73:c5:1c:e5:24:67:cc:dd:eb:4e:
d7:ae:c0:02:3a:8b:e9:12:3b:2f:87:17:ef:61:2a:
aa:48:94:56:d7:76:70:dc:ad:d8:82:64:83:e1:cb:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:3B:52:DE:12:8D:18:84:51:D6:FC:E4:FD:99:03:1A:54:92:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/f071eff4-5215-3b61-be03-16494f6309cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
X509v3 Authority Key Identifier:
keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
sbgp-ipAddrBlock: critical
IPv4:
204.57.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:70:be:48:16:83:ee:a7:0f:cf:72:d8:0f:f9:41:d6:56:5b:
73:5c:f6:c1:b2:7f:e2:96:af:a4:40:ac:57:90:1e:26:44:10:
dd:23:84:a1:e4:84:1e:5b:b3:7f:26:0b:73:7f:ad:e8:75:b0:
95:88:22:95:a8:8e:81:fb:ee:70:b1:f6:f0:84:94:6f:f7:c4:
2c:52:9d:4c:fc:27:df:04:4d:1b:64:36:9e:8f:2e:4c:f4:15:
fe:72:60:7c:e8:71:c0:17:9d:11:44:82:b2:f4:6a:41:73:28:
ab:20:48:c8:8d:90:54:83:4e:e6:44:dd:53:16:4d:45:5d:f9:
9f:91:c5:16:a7:bf:f5:7f:ea:3f:e4:4b:ef:e6:8f:4c:7a:d2:
50:10:92:79:69:e2:d4:1c:7c:b8:a9:84:97:22:bd:2a:a9:87:
db:e8:4d:1a:17:e9:4d:f9:f7:26:d5:fd:3a:5f:e1:60:36:d1:
0c:1c:b0:e3:36:37:97:e1:64:14:42:e3:a1:c7:a6:b2:ff:d0:
e9:82:fb:ec:f9:fa:6b:bc:e6:ca:3e:a1:75:2c:8c:55:10:8a:
85:8e:fe:29:d4:dd:42:07:36:02:d4:c7:64:0f:e8:da:36:d0:
f5:2c:5a:64:b5:da:0c:26:6a:52:76:c3:57:3b:c1:c0:61:ee:
db:73:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:03 2025 by rpki-client