Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ca1c06e7-f5e7-3ee2-bc77-8974aab0e7ad.roa
File: ca1c06e7-f5e7-3ee2-bc77-8974aab0e7ad.roa (raw, json)
Hash identifier: GyoS8GjAQku+knl5+gWOPGyjYgBgSGnqOAK/GGsS9As=
Subject key identifier: F8:88:94:B4:D7:9A:6A:7E:88:D4:1E:92:19:79:68:3E:46:E6:0C:BF
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E8A69B3271277EDC3BD00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ca1c06e7-f5e7-3ee2-bc77-8974aab0e7ad.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 204.85.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:8a:69:b3:27:12:77:ed:c3:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=ce69471b-e974-406d-ba0a-44803af04e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:de:c7:c6:11:f9:e0:1c:0e:f9:6f:83:f2:
e7:1a:aa:3b:d0:85:b5:c1:16:9d:ff:d2:da:83:f7:
b2:42:b4:77:9a:d6:d3:76:9f:aa:9d:86:8a:06:fc:
0d:48:f1:3e:a1:9c:55:b9:56:45:3b:26:1a:a1:7b:
27:65:db:e3:0a:b0:24:37:5d:01:70:ce:8e:0e:08:
0a:ef:37:6e:2c:37:88:be:65:49:ec:82:ff:70:34:
e3:9a:5d:70:ed:3b:5a:4f:68:d6:05:29:db:c0:25:
67:4b:a8:46:7a:b3:ac:c5:55:89:ee:d5:e3:f8:ee:
8a:98:13:b1:95:5f:50:6c:d6:f5:a8:d3:b6:06:b3:
44:fe:0d:eb:bf:93:9a:07:94:bd:a3:44:7e:ba:13:
38:04:ab:93:85:e6:a9:64:f5:73:b6:6c:e3:20:00:
b2:dd:62:b9:e1:58:71:62:8a:04:84:9e:8b:20:a8:
bc:2f:2b:ad:e5:d6:30:90:f0:ba:66:21:8d:f8:8e:
59:2b:42:33:63:b5:66:b7:f5:20:21:80:6f:e7:b3:
3e:04:c0:c1:e5:48:83:7c:ed:af:6d:fa:58:07:69:
52:cc:e6:a6:e8:37:9a:f3:84:1e:0d:6a:e6:a6:e4:
25:4c:0d:a2:13:fd:03:3a:50:9a:26:2a:49:a8:29:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:94:B4:D7:9A:6A:7E:88:D4:1E:92:19:79:68:3E:46:E6:0C:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ca1c06e7-f5e7-3ee2-bc77-8974aab0e7ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:87:de:ef:a0:a0:64:92:f1:aa:e3:95:ac:be:c7:25:2b:e8:
cc:a0:df:c0:30:0e:4c:d0:89:09:e3:41:9c:7d:48:e4:d5:dd:
0e:4f:41:ed:6e:68:b8:e2:eb:6b:9b:b9:f7:4f:ab:42:6a:bd:
6c:ad:3e:41:99:47:21:b9:f8:80:d2:b6:d9:e4:ae:0a:00:76:
0f:79:02:72:da:82:57:24:47:30:0d:d4:1c:a4:2d:1b:7a:07:
9b:77:37:4a:9a:be:66:a9:90:22:9b:af:b8:d5:07:82:d6:8f:
e7:1d:1d:4e:e1:77:43:a0:ba:38:e4:58:ab:66:7e:e1:b9:8f:
bb:6c:ab:07:5b:20:77:86:7c:0c:20:72:d9:4b:65:21:28:09:
89:79:80:5e:7a:f0:0b:5a:9e:5b:7b:65:12:ea:a7:dd:07:e4:
98:f6:7d:a7:75:60:32:e6:38:b8:d9:3d:72:e1:7d:ed:b7:26:
f1:6c:f2:04:71:b6:80:ad:57:4f:3a:d4:f3:80:56:90:a3:3f:
f6:98:d8:8a:5e:34:bc:29:71:3a:08:3e:98:c9:41:7f:24:e3:
e6:67:86:0e:25:8b:20:7c:00:0f:96:27:4b:ff:5d:c0:76:cf:
95:4a:3d:0c:9e:f8:84:78:c7:99:0e:a7:af:16:09:65:24:fd:
92:a0:b5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:16 2025 by rpki-client