Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa
File: a810c427-52bf-3069-889e-49d7c3d307dd.roa (raw, json)
Hash identifier: KpKZzAiHWPs6bZC75QEM36QZo+Ft6f4+PSjbZcjQay0=
Subject key identifier: 5A:59:2C:63:8D:E0:9B:B3:01:54:85:A9:97:A3:D3:E7:21:C4:E6:82
Certificate issuer: /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial: 010D0C9F43285848AF2B72E7FEA6D94267DECA00
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 8075
IP address blocks: 204.209.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:72:e7:fe:a6:d9:42:67:de:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=29690493-8f4c-434b-8669-8773a6c94dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a3:dd:9a:60:67:e5:80:0c:31:8f:da:76:4b:
01:8f:61:c3:a6:84:ad:5c:d6:a1:1a:81:6c:a6:b5:
1a:01:00:a9:eb:66:cb:68:00:4d:02:57:e5:9a:05:
fd:84:b5:3f:17:cd:24:f3:42:f5:53:0b:5b:b9:06:
23:2c:a2:09:20:80:c1:3b:b5:d0:e2:bc:0b:a1:f2:
e4:7e:d3:62:e4:5a:ba:54:5e:f8:dd:44:15:4f:82:
b1:80:ea:54:fb:66:45:00:c2:41:e1:86:9e:86:fa:
50:5d:60:f3:61:c8:ab:6f:f6:9e:ea:58:93:b8:ca:
92:09:2b:aa:d0:6f:29:ba:28:82:54:5c:6e:5d:61:
b3:72:ae:63:1c:9d:48:95:0e:46:1b:55:d8:64:04:
c0:a8:94:0e:4c:37:0e:ee:f9:d6:2d:30:5d:fd:5a:
cc:a3:0f:1f:e5:b4:98:75:47:fa:7c:65:53:fd:44:
a4:6c:98:1e:74:76:d3:14:4c:88:73:75:dd:dc:b5:
c0:4c:2f:e0:aa:8f:f1:7a:2b:07:a6:9b:5c:82:c0:
c4:eb:4f:fc:41:f2:89:6d:dd:bb:ba:47:36:ba:78:
ac:e8:78:cc:78:2f:42:29:64:b5:59:81:65:a3:a6:
14:87:f5:f1:13:d9:44:46:7b:d3:4d:e0:00:b9:6e:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:2C:63:8D:E0:9B:B3:01:54:85:A9:97:A3:D3:E7:21:C4:E6:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
X509v3 Authority Key Identifier:
keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:35:1b:a5:63:9b:41:d8:c8:09:cf:1d:1d:5d:ae:5e:4f:5b:
45:70:8c:9e:55:aa:3d:02:10:a8:6b:97:46:00:04:84:93:11:
fc:00:54:33:2e:70:61:76:36:00:f5:3b:85:81:da:c0:b8:5d:
da:56:7b:9b:6b:bb:a6:bd:3a:fe:b1:02:ea:a8:c8:c8:db:9b:
2c:d0:60:c8:a4:f1:b0:66:a2:17:46:18:5e:41:06:57:a8:09:
b4:cc:37:42:5c:ad:87:c5:ef:be:b0:91:c4:bc:6c:23:4b:a7:
49:80:27:65:1c:70:67:b4:35:1c:39:2b:4d:8a:55:5a:03:ec:
d6:14:2c:33:da:e0:c1:e6:66:34:19:86:aa:b1:8a:af:a6:e4:
4f:1c:32:b6:dd:3a:cf:a7:e9:54:0b:1e:1f:69:74:c8:ec:62:
de:df:e7:9a:7b:49:b1:4a:fc:ef:c3:7d:38:5a:a1:c6:eb:ca:
62:ba:ed:ce:31:72:a0:7f:47:18:5b:35:42:91:2d:7a:80:d4:
cf:58:02:c2:ed:38:94:23:aa:63:e9:be:1f:58:1f:15:96:9e:
eb:fa:53:8a:01:a7:1e:43:a3:7a:2a:57:c9:23:9b:d6:ad:69:
44:11:e5:0e:89:92:ed:41:f6:2e:d7:fd:45:d4:a3:7b:0c:20:
b5:5a:d0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:43:48 2025 by rpki-client