Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa
File: 1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa (raw, json)
Hash identifier: xx4aq/SwQZJ47ZT98ncVZ8SPXN7TQlCZgA+w5H2yegk=
Subject key identifier: 73:8E:E8:8D:01:9D:46:C8:06:BC:99:66:66:F6:8E:92:61:8E:6E:66
Certificate issuer: /CN=024863fe-f941-4bf2-81d9-ad03d50aa194
Certificate serial: 010D0C9F43285848B090B2C10628ADE44DD88F00
Authority key identifier: 26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 13576
IP address blocks: 204.147.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:b2:c1:06:28:ad:e4:4d:d8:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=024863fe-f941-4bf2-81d9-ad03d50aa194
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=c67546d8-3389-4c77-be8d-16e91d6ec2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7a:ad:35:08:48:07:71:fe:1c:0b:64:2a:1e:
33:b2:01:75:65:59:b4:18:7b:55:7d:7b:9f:7c:de:
bf:8c:f6:7e:95:fb:6b:89:d6:6b:f1:42:95:f1:d3:
76:d3:fc:4f:89:2e:fd:62:63:e5:b9:63:43:c9:f7:
6a:ac:9c:a1:ee:ed:de:bc:93:54:e3:5d:d8:d2:45:
e7:0e:f8:34:46:e0:8c:34:b0:34:b3:89:fe:3b:6e:
43:85:6b:4f:2c:db:36:2e:60:bb:40:7e:be:3d:6f:
f3:74:f4:9d:98:b9:cf:05:55:b8:5d:2b:23:e2:a0:
5b:97:4f:38:19:47:e3:50:f9:f4:3c:06:63:5f:02:
a3:e4:4f:c7:83:36:20:19:4c:5f:fe:b0:24:a9:4c:
02:93:8c:94:fe:73:c0:94:8d:9e:9f:4f:30:41:0f:
f9:eb:f5:9c:6a:f4:d9:d5:f5:73:3c:c1:a9:d9:c3:
e7:f0:fa:58:72:83:ec:98:20:8b:ca:31:dc:71:20:
a2:9b:32:07:13:d5:a7:17:5e:5e:0b:5d:eb:86:16:
15:d9:22:07:5c:81:f9:36:9f:42:4d:52:76:0e:86:
9a:9b:1c:ca:07:4b:e2:69:1e:37:fc:4d:20:b1:b9:
e6:d4:81:a3:9f:db:60:ed:26:cf:e1:fd:10:5f:b8:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:E8:8D:01:9D:46:C8:06:BC:99:66:66:F6:8E:92:61:8E:6E:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/1ab0dc75-d777-3f56-a8c4-b88401eabf3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.crl
X509v3 Authority Key Identifier:
keyid:26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer
sbgp-ipAddrBlock: critical
IPv4:
204.147.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:13:bc:ed:dd:ce:a6:93:d2:9b:2f:96:bd:68:f1:92:40:57:
15:35:e3:ec:64:d8:f7:c6:d9:50:bd:23:6d:37:e4:a7:db:bf:
74:ee:a7:72:7d:a7:f6:f7:30:34:4d:fe:8e:2c:29:b1:8b:42:
11:ee:63:72:50:bd:2f:0b:13:36:e7:3f:22:2d:cc:5c:10:f6:
2a:9a:5e:b2:38:44:2e:43:5c:e0:14:a6:27:6f:1e:1c:a5:1e:
84:34:62:d2:52:83:6c:c9:2c:9b:c5:07:e3:20:25:f1:9b:ce:
76:89:88:36:29:33:bf:5e:f5:ef:f9:4c:db:88:ea:d4:a3:89:
e7:6c:a7:96:81:c7:f4:52:fa:dc:17:05:b3:cb:bc:d6:4b:27:
bd:8c:cb:29:6b:c5:1a:5b:77:40:6a:1d:e3:19:2b:3d:52:c4:
d1:80:2f:b6:80:3d:7f:09:f3:ec:5a:28:88:9b:be:04:07:b3:
87:38:dc:5a:06:28:da:3a:e8:ec:b9:5e:23:41:48:a0:c4:62:
dd:5e:7f:2f:1d:69:df:a5:2e:9a:f2:21:30:58:57:ed:a5:ce:
90:4e:18:5b:73:52:20:cf:72:c2:3e:60:50:e1:9b:ef:b0:08:
b5:88:5d:9a:e1:e5:21:3d:a7:f2:db:ae:cb:27:22:bf:19:58:
46:c8:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:41 2025 by rpki-client