Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c4dacd68-ac73-3bd7-8755-36a3801ca04f.roa
File: c4dacd68-ac73-3bd7-8755-36a3801ca04f.roa (raw, json)
Hash identifier: Y/vSUfNLM9b2TKphxe57K7j8Qgw6zhPCLoGUmca796E=
Subject key identifier: E2:45:83:BA:68:E2:23:2E:94:B7:54:F2:22:8F:97:30:2E:B6:A6:41
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E89C9318ABA7C76548FC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c4dacd68-ac73-3bd7-8755-36a3801ca04f.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 204.84.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:89:c9:31:8a:ba:7c:76:54:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=bdd5fabb-6907-4106-9e8c-8b5662ca268b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:ba:12:78:79:01:c8:79:1f:76:dc:0e:76:
f0:44:51:4c:50:1a:b9:20:4c:b4:e6:c5:13:58:fa:
31:ce:ce:53:5f:7f:8b:70:e6:7c:46:93:13:11:63:
9b:14:84:e9:06:9e:f7:6b:71:97:0f:35:b4:b0:af:
46:b8:3b:95:5a:de:c1:76:2f:ba:4d:ab:01:0b:87:
ec:5a:57:95:8e:57:1f:9e:7b:e0:23:6e:76:21:3a:
43:a7:f1:df:12:c1:e8:16:fe:6d:fc:ba:cf:04:48:
d6:9a:d4:cf:4c:66:f1:71:29:46:35:03:2b:ff:ee:
3c:3f:e7:45:32:97:b9:0b:49:56:f0:c1:7d:46:7f:
32:74:4b:b0:a4:79:a6:f5:9d:e8:6c:6d:8f:85:34:
3d:fb:d4:55:91:ea:53:84:c0:14:91:22:aa:bc:10:
88:50:b8:3f:1f:b9:97:c1:b8:0c:ce:18:4c:85:cf:
e6:6d:43:55:45:0c:3d:ca:a7:c4:ba:11:ed:ca:2b:
13:fe:29:2e:e1:03:a6:65:6b:3b:ed:32:38:af:96:
59:46:3b:b1:99:cf:52:2f:d8:8c:88:8b:b7:5f:bc:
69:1c:24:23:1c:70:91:b4:78:7c:c4:c3:8a:56:6b:
17:e9:28:e3:6e:56:1a:6c:2f:ea:71:12:39:7e:30:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:45:83:BA:68:E2:23:2E:94:B7:54:F2:22:8F:97:30:2E:B6:A6:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c4dacd68-ac73-3bd7-8755-36a3801ca04f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:8c:6d:a6:79:ae:a8:69:db:b6:28:a3:d4:81:b9:db:fb:4e:
da:80:22:51:73:9b:70:6d:94:d8:e6:ce:a1:80:19:ba:0c:09:
b4:d5:d1:32:67:5c:2d:14:dd:cf:e0:fa:a1:ce:7e:73:8c:bc:
32:81:23:f1:94:62:e4:8a:a3:b9:b6:c5:fd:92:72:ef:bc:12:
0c:d7:7a:e5:70:74:51:db:83:33:9e:60:23:2a:4f:d0:12:57:
fd:fb:8c:9f:7f:f6:96:de:b3:c5:82:f2:1b:69:77:49:29:74:
b2:8f:2c:2f:f4:94:b5:6c:65:82:7f:2f:82:6b:1e:f6:e1:08:
48:e4:d4:eb:d7:e0:ef:90:08:54:d9:1b:36:a3:65:d7:0e:37:
d8:f3:f8:ab:8f:c2:13:9d:e8:78:2b:5f:3c:3d:bf:25:0b:d3:
58:70:c9:c5:b2:82:9f:5a:f3:5d:a2:fe:7d:cb:23:f6:44:a8:
3f:88:27:af:dc:e6:bb:f6:20:3b:6a:62:82:46:5f:98:75:52:
55:35:02:5a:0b:1f:30:ad:f4:b0:30:e6:ea:98:97:df:71:2d:
d3:8e:56:29:14:26:48:ca:41:5b:80:55:0e:4f:97:5b:e0:15:
8c:19:ff:94:cd:2c:bb:70:03:94:2b:a6:a4:89:36:21:29:4e:
48:39:c0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:06 2025 by rpki-client