Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/73e13c3d-2f0e-3639-9d11-6c07b6459602.roa
File: 73e13c3d-2f0e-3639-9d11-6c07b6459602.roa (raw, json)
Hash identifier: 0/0DLNbsofm2Rvqb0D0LdMxA07l6UBjBJaqG4OedFqc=
Subject key identifier: 7E:E8:89:53:93:66:CE:49:85:96:0F:CA:1E:08:49:F9:C0:DC:2B:B1
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E8A4D7852E3CB21DFE200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/73e13c3d-2f0e-3639-9d11-6c07b6459602.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 36850
IP address blocks: 204.85.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:8a:4d:78:52:e3:cb:21:df:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=b414e040-db54-4261-9eb4-4755c1eb5b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:64:65:59:24:4a:d2:cc:c8:2a:b3:fe:4f:5c:
57:f9:d7:b1:1b:0c:71:7a:c8:47:24:39:ef:5e:50:
af:24:6e:72:0a:87:3f:e0:74:3b:e2:1a:90:ef:e5:
a7:d9:3f:90:0a:eb:ac:34:50:44:37:39:fc:fa:ca:
bd:2a:72:25:76:46:d5:6d:16:27:a8:c1:89:ed:45:
59:27:ca:82:4f:0f:01:3b:1c:12:a0:09:8a:0f:7e:
6d:97:ca:5e:dd:29:94:9e:d2:bc:b1:ec:2b:a5:ea:
53:f5:34:8e:29:eb:9c:17:a5:2b:e6:2a:df:bb:d7:
53:2b:4e:40:80:6b:aa:ae:7e:f9:b0:49:2e:28:b8:
dc:ce:fd:e9:1c:52:be:00:9e:82:d3:ad:db:82:6c:
58:e9:b2:9b:da:7f:a9:35:b2:00:54:30:62:d4:0e:
c9:9c:3e:13:b8:8a:88:93:2b:e6:57:56:fc:6d:7a:
68:f9:7f:f0:9f:e1:55:88:c6:c3:ad:40:33:f7:e2:
5d:94:39:60:3a:69:2f:d1:13:90:c8:7d:fe:45:21:
d2:f1:b3:53:66:50:a8:82:fb:b0:db:26:eb:84:01:
c9:c1:cd:fd:17:76:00:89:07:ec:39:e8:27:30:20:
22:0f:ee:7b:a2:65:09:db:52:ea:39:d9:75:6a:8d:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:89:53:93:66:CE:49:85:96:0F:CA:1E:08:49:F9:C0:DC:2B:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/73e13c3d-2f0e-3639-9d11-6c07b6459602.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:51:0d:79:3e:88:e5:75:2e:8c:f5:96:88:68:d2:2f:cd:a2:
7a:15:61:bd:f7:d7:65:63:c3:c9:02:da:a5:b3:b7:18:21:f9:
51:2a:80:4c:b4:f0:d1:ea:70:7e:9c:e2:cb:ed:3f:e7:cf:37:
c8:a6:86:e7:03:7f:18:e5:7c:8e:2b:78:62:35:e2:ea:41:70:
97:40:40:3d:5b:e4:a5:7b:75:b7:b0:20:87:29:e9:1e:1a:ce:
36:58:7f:b9:e9:a9:81:c8:09:3f:cb:bc:ed:bf:9b:b0:6c:9f:
c3:7b:1b:18:05:dc:54:07:d4:88:0d:3d:02:45:db:91:1f:14:
dd:ea:35:c6:c9:38:2d:47:ef:b7:2e:a4:f7:71:41:2a:4d:80:
1f:1e:b1:9b:04:e5:9e:31:66:ca:b0:3b:f5:93:73:69:cf:b4:
47:89:42:37:36:b3:00:82:a4:6c:52:af:c2:b7:16:5d:f9:d0:
25:53:a2:20:5f:28:24:50:04:83:c6:d7:f9:9f:c2:36:7a:6f:
4b:98:d9:68:bb:f1:32:76:95:ea:1c:e1:16:be:23:48:18:7b:
ba:37:c2:bb:d8:18:be:fb:cd:70:31:1a:ed:8b:a6:09:ba:2f:
00:94:aa:e5:82:8e:71:5b:83:21:f0:59:08:da:5a:83:33:03:
e5:29:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:47 2025 by rpki-client