Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/78ba2423-6fac-30a8-b303-20fa4f48068a.roa
File: 78ba2423-6fac-30a8-b303-20fa4f48068a.roa (raw, json)
Hash identifier: ORcx6BWEE4x7IzRO4zt9dgV2Hozivesmln+Yps9/IPU=
Subject key identifier: D7:DD:6D:9B:FB:5A:A3:C3:D8:F9:B4:22:1A:C5:CC:58:24:2E:4F:7F
Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial: 010D0C9F4328584937D93AEA5DF6FE1F49BFE980
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/78ba2423-6fac-30a8-b303-20fa4f48068a.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 30045
IP address blocks: 205.189.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3a:ea:5d:f6:fe:1f:49:bf:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=34ad2d73-85f7-4977-ba78-462b33cc47c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:92:04:38:b0:6f:18:e9:50:5f:9a:bf:d5:
c1:4b:b0:21:0e:7f:eb:ec:61:d6:3a:a6:37:5c:a8:
5d:11:2c:ed:bb:c9:17:80:79:40:9b:54:36:54:9a:
fb:0a:5f:c2:07:14:d6:f7:1d:2c:dd:40:9b:07:32:
69:e9:93:6a:b9:7a:56:7c:0e:64:db:d6:bc:e2:15:
6b:ce:c6:4a:89:6d:86:a3:e6:31:9d:b4:b7:fa:8d:
14:d1:60:36:92:5e:ae:0b:59:55:fc:e7:9d:44:46:
73:0d:36:f8:ac:4e:00:06:e7:fc:03:79:e3:03:f0:
10:59:60:4f:ea:82:60:e9:28:b8:83:32:46:23:96:
a9:f4:1e:7f:37:d2:7a:72:16:3b:d9:68:ac:a1:4d:
44:55:c9:c1:21:18:b2:4f:72:61:f2:b7:b2:93:5a:
c4:58:45:28:34:cf:52:ed:0e:69:1f:c5:33:10:7c:
87:a6:c3:5b:32:42:37:80:8c:cd:7f:11:41:7d:28:
e8:81:04:2f:f4:e2:60:05:1b:82:e0:e0:72:b7:7d:
c2:50:fd:9d:60:57:30:07:99:9e:23:36:8f:d1:29:
3c:26:6f:44:3c:64:82:a0:b6:d5:6e:3e:21:9f:17:
05:3a:b8:6b:ff:b8:b6:4b:13:2c:48:29:c2:9f:72:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:6D:9B:FB:5A:A3:C3:D8:F9:B4:22:1A:C5:CC:58:24:2E:4F:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/78ba2423-6fac-30a8-b303-20fa4f48068a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
X509v3 Authority Key Identifier:
keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
sbgp-ipAddrBlock: critical
IPv4:
205.189.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:3f:52:cc:09:ca:54:ac:bd:9c:fe:d2:ba:50:cd:ca:17:03:
ef:70:14:b8:8e:87:d8:4b:6d:a5:75:b4:fe:e5:81:04:32:fc:
16:98:3a:f6:fe:72:44:fd:ec:cd:21:e5:09:2d:4a:63:6b:6a:
61:04:c1:19:67:6b:39:34:7d:39:f1:ab:f2:4c:24:ac:7d:02:
61:b0:80:16:38:5e:74:c6:e6:32:c9:c7:d2:0c:62:5d:39:d5:
bf:53:80:42:4d:40:84:a8:e0:4f:56:e6:13:66:5d:bc:5c:4c:
90:46:5f:04:23:b9:08:1d:3d:8f:24:dd:93:8f:c4:09:21:bb:
ee:8c:73:b7:5c:a1:12:83:f2:f0:06:99:34:06:e6:39:23:2f:
dc:20:9b:fb:16:05:63:23:fb:1a:5d:f0:75:29:c9:4e:5f:cb:
22:9e:0a:ad:93:75:06:64:bc:8e:5f:86:c2:d0:c5:f8:31:8f:
80:c1:1d:a9:47:c4:e4:1a:85:b2:a5:c1:58:78:0a:f7:82:29:
21:d4:e3:9b:03:be:1a:91:18:ff:b2:d7:85:b6:bb:99:f7:98:
ac:bc:7f:dc:d8:4f:91:2e:06:c9:d6:fc:27:95:57:1c:34:05:
e3:fb:b9:3c:a3:81:ba:03:f3:0a:1e:4b:7b:b0:ea:f0:42:f7:
67:28:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:11 2025 by rpki-client