Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa
File: d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa (raw, json)
Hash identifier: F5AIasSTW3thkPRVrc3b4ok1u+wwhCYD1M/GZjn95j0=
Subject key identifier: 5B:04:EC:43:D3:D3:E8:F0:9B:5E:7E:FA:0A:92:D6:3D:82:68:25:34
Certificate issuer: /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial: 010D0C9F43285848DD3BA54C1C079A3D3F4B3880
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa
Signing time: Thu 13 Feb 2025 02:00:40 +0000
ROA not before: Thu 13 Feb 2025 02:00:40 +0000
ROA not after: Wed 14 May 2025 01:00:40 +0000
asID: 32277
IP address blocks: 204.50.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:dd:3b:a5:4c:1c:07:9a:3d:3f:4b:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Validity
Not Before: Feb 13 02:00:40 2025 GMT
Not After : May 14 01:00:40 2025 GMT
Subject: CN=9e31d1b1-0004-47d3-9961-c33ba8d31afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:61:72:9a:73:42:b4:8a:26:09:45:54:69:
1c:ab:7d:7b:9a:45:e9:77:39:42:21:75:33:48:f3:
66:9f:74:67:7c:5f:be:29:9a:4a:0a:ef:07:1f:ee:
c4:7f:34:b5:ee:07:f1:d8:f9:40:c0:06:cc:2b:6e:
11:90:ee:d1:20:00:38:00:55:c2:32:c0:be:de:04:
77:c6:0f:e7:ad:b0:c6:0c:a9:04:63:ff:78:c5:d4:
f1:ee:06:3e:8f:8f:68:3a:19:7f:a9:ae:aa:e8:ff:
7f:dd:e8:32:6e:73:32:5d:be:23:5d:57:2b:36:78:
5a:63:ac:4a:d1:07:0b:87:c0:21:48:cc:9c:79:44:
7c:81:da:cd:ee:bb:92:e1:19:5f:b4:7e:4f:a0:9a:
ac:77:35:93:05:c7:d0:8f:af:81:0d:b7:e7:11:81:
39:87:f4:60:28:9e:32:d1:6f:d6:7a:f9:c0:e1:2f:
dd:7b:d7:fd:64:35:f5:9a:41:98:53:33:8a:58:d4:
64:70:08:b5:3c:a0:10:6c:25:a6:c9:9b:f9:8d:25:
06:88:12:49:03:78:47:ab:a2:1f:6a:83:26:7a:80:
2b:d4:58:c8:43:97:3e:44:7a:01:67:da:7b:59:6c:
f9:15:be:01:77:a3:12:df:a0:60:39:d0:b5:93:50:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:04:EC:43:D3:D3:E8:F0:9B:5E:7E:FA:0A:92:D6:3D:82:68:25:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
X509v3 Authority Key Identifier:
keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.50.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:aa:04:74:f2:d8:36:c0:c5:5c:29:bc:09:41:42:94:5b:f3:
a4:77:75:35:34:7b:c6:f9:a9:93:28:d0:eb:df:c9:8f:12:4f:
44:ab:6a:09:4e:25:de:2d:6c:2e:41:2c:dd:d4:56:01:1e:a7:
43:2b:f5:09:52:7d:6a:2d:f8:47:b5:03:71:52:50:a3:0b:ec:
20:2f:9c:10:75:cb:e6:ae:f4:6f:af:61:72:32:f7:8a:44:d4:
36:d5:10:cc:48:07:e6:83:1c:5d:b1:60:43:e1:8c:f1:0c:80:
f0:50:5f:af:86:ed:7f:0d:6a:66:69:a1:08:a2:cd:3b:9b:5e:
3f:62:0a:86:de:7f:f9:4f:2b:0f:f1:3c:6c:78:49:3e:d8:4a:
df:6f:0a:3b:d7:31:dd:28:d2:06:e3:0a:0d:41:c4:75:65:79:
b2:56:10:db:a2:94:20:ab:1a:ea:f9:53:d0:b4:02:d0:06:2f:
84:d5:be:86:1e:02:a1:10:bd:82:e9:52:7d:a7:ff:f8:4f:70:
2d:c8:94:02:82:f7:62:f9:67:c4:f9:17:fb:88:28:f8:ee:20:
b8:e9:2f:a1:92:fd:c3:44:8c:f8:df:63:1f:0c:d8:76:99:c4:
91:29:50:94:dc:23:7b:1a:87:b8:f9:d4:f3:51:6d:e0:3c:ce:
51:ac:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:43:37 2025 by rpki-client