Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa
File: d77f1a9d-1504-37be-979a-7b6e3ced878c.roa (raw, json)
Hash identifier: 342k/zK+wL3v5ETy8y2ysSVzXQWoG7zjRqPDQOnGO2s=
Subject key identifier: 94:13:73:C3:27:D8:00:6D:2A:4A:78:7B:85:26:8A:29:3A:30:00:60
Certificate issuer: /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c
Certificate serial: 010D0C9F43285848C41B8122BEC402B85E284C80
Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa
Signing time: Tue 04 Feb 2025 02:00:40 +0000
ROA not before: Tue 04 Feb 2025 02:00:40 +0000
ROA not after: Mon 05 May 2025 01:00:40 +0000
asID: 18612
IP address blocks: 204.14.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c4:1b:81:22:be:c4:02:b8:5e:28:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c
Validity
Not Before: Feb 4 02:00:40 2025 GMT
Not After : May 5 01:00:40 2025 GMT
Subject: CN=a68b3a38-a8b6-4f24-8d9b-deaec7e2721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:76:a6:95:e0:71:4d:72:70:14:4a:87:15:
dd:9a:83:6e:21:35:2a:ea:7d:41:56:bb:2f:58:7c:
c1:4c:25:5f:8f:b2:5c:a4:d9:59:e4:b9:9d:a8:89:
11:6c:02:01:74:87:88:27:ad:7e:6b:2a:7a:e8:67:
f0:2e:b9:c1:0e:6e:8a:d1:90:5c:fe:b1:54:57:74:
44:90:6b:23:72:7d:65:5c:ce:eb:04:b7:b0:ac:8f:
d7:8d:3f:78:bd:0b:cb:c3:14:4c:2a:0c:39:98:b2:
e8:ea:42:f0:30:8b:41:f5:ba:e5:ff:b8:df:c4:01:
88:10:3a:51:c5:2a:ff:a4:bb:d5:a7:b4:0f:c7:29:
24:90:99:6d:e2:44:0d:92:70:c5:d8:83:b1:93:14:
ce:0c:f7:c8:5a:37:a3:fb:13:54:3a:06:e6:14:9c:
e6:69:e9:1f:8d:47:01:5f:00:00:a3:14:5b:45:c9:
82:28:b1:d6:cf:d9:6c:98:3b:69:1a:24:95:c1:da:
fc:8b:02:4f:0f:22:2a:8e:ff:1f:a2:61:aa:ca:27:
65:ce:7a:29:81:70:cf:21:8a:6b:a1:fe:e0:d9:e4:
4c:77:c1:76:97:60:17:f7:31:8d:58:8b:16:08:0c:
9d:ff:81:6a:bc:c8:8d:12:38:5c:94:50:71:e9:5a:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:73:C3:27:D8:00:6D:2A:4A:78:7B:85:26:8A:29:3A:30:00:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl
X509v3 Authority Key Identifier:
keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer
sbgp-ipAddrBlock: critical
IPv4:
204.14.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:35:4a:9b:24:b8:8e:e0:b4:77:9b:d8:34:29:06:66:9d:39:
89:34:82:73:24:97:43:44:62:50:ee:e3:e2:ba:a5:14:0e:e9:
65:52:d9:95:8d:ea:ac:74:23:c8:39:5c:94:02:03:97:d6:1e:
88:00:db:f3:38:04:74:16:8b:e0:e9:20:17:b0:c1:b5:15:6e:
8d:a6:3c:15:d6:ad:5e:cd:11:5b:06:96:b9:60:1a:53:6e:25:
58:f9:7d:e5:51:9c:05:cd:2e:de:37:e6:a4:d3:35:64:dc:e9:
43:33:56:a6:13:29:d6:42:c8:ca:b3:5b:a8:61:f0:a0:a0:7a:
d8:b6:1a:17:3b:3b:ee:2b:1f:df:a5:96:5f:a8:8d:fb:88:ce:
d3:5f:41:2c:39:59:dc:7f:59:56:e7:38:90:81:07:be:79:22:
e9:e8:13:2b:a1:76:03:88:b5:b0:44:e3:74:7a:8c:39:b3:f5:
03:f5:3c:67:79:f3:a2:10:97:00:3a:b6:65:d6:bd:94:06:c4:
b1:5e:31:c8:9f:3f:9f:52:40:bf:d5:8c:d5:d5:26:fd:d8:a8:
e2:c5:10:b5:81:4d:a9:1e:4a:b3:f0:6d:59:06:a3:a1:4a:c5:
c7:c2:4e:38:1e:27:3e:51:0a:c2:08:aa:e1:71:7e:8b:ac:eb:
f9:db:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:02 2025 by rpki-client