Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e49083d9-b843-36e5-8fc2-2e60009b5691.roa
File: e49083d9-b843-36e5-8fc2-2e60009b5691.roa (raw, json)
Hash identifier: bnIAbHAiKOUp9TFgE9TZ5/E4YaNYkpebtRwRxc0PmhQ=
Subject key identifier: 26:44:E5:74:F6:9D:1F:84:D4:EE:AC:62:87:8A:7F:5A:63:26:1C:A6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E89B4A21F16657E415480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e49083d9-b843-36e5-8fc2-2e60009b5691.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 6559
IP address blocks: 204.84.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:89:b4:a2:1f:16:65:7e:41:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=de2c548d-b2c9-41bd-9fbf-baa7a7e3611e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e9:1e:8d:ad:b9:f3:a8:c7:7f:c3:fe:20:a9:
c8:29:9d:6a:b0:95:6f:e0:62:f4:ac:8a:80:ab:63:
41:44:a2:e2:ab:cd:3a:0d:7d:9d:17:e4:2d:34:45:
64:7d:ab:cc:f7:21:44:b6:d4:6c:e5:38:62:0f:35:
76:02:00:9e:e6:45:eb:38:88:d3:6a:c7:3d:7d:6f:
16:f5:ca:6a:f1:ac:73:7d:aa:dd:f4:86:51:a3:73:
c2:be:b1:52:46:d1:35:5d:78:d1:9b:7c:9a:17:b2:
2b:0f:3f:b7:36:99:27:04:74:2f:42:0b:7f:e8:e3:
69:25:eb:b5:ee:f1:fc:22:98:80:b9:45:b5:26:54:
54:c3:23:eb:a8:3b:e4:f3:55:0c:d3:4f:54:b0:ec:
33:d9:6a:3e:c0:09:80:0f:50:e0:17:fe:94:a3:b2:
03:e7:da:27:bd:92:c6:c0:68:26:09:26:d2:87:5e:
2c:9d:dc:bc:a7:0c:73:57:d5:f3:83:d1:41:3c:88:
75:52:a3:d3:8f:e4:3b:ef:e3:0c:cc:c7:cb:0d:d4:
1d:bb:91:19:2e:ca:26:03:69:23:c7:b2:79:72:00:
5c:cc:8b:60:df:c6:97:fa:99:6e:fd:b6:df:0c:35:
5a:cd:e6:5b:03:de:d5:44:3d:22:6f:46:b2:73:86:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:44:E5:74:F6:9D:1F:84:D4:EE:AC:62:87:8A:7F:5A:63:26:1C:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e49083d9-b843-36e5-8fc2-2e60009b5691.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:b4:d9:4a:58:cc:02:13:29:dd:e0:cd:62:b4:ff:95:aa:c6:
9b:2a:37:31:a9:00:c1:a8:32:bd:dc:c4:7a:0b:60:e3:4a:0a:
19:5b:12:61:88:c6:2e:ec:ab:75:27:c2:6d:92:71:a1:d4:96:
c8:5a:6b:2b:9a:01:c9:81:dc:de:3b:21:b5:fc:99:c8:c6:26:
46:6d:a3:6e:39:4b:c9:8e:94:93:fd:51:cf:3c:96:67:1b:74:
02:48:ca:eb:1e:c3:03:53:ad:d4:a0:02:56:d2:2b:93:5a:43:
b2:af:95:28:c6:77:c3:9a:cc:e1:59:cb:55:9c:7f:f5:8d:33:
6a:39:45:6b:a8:07:fe:b1:68:39:7b:be:1b:c3:73:e1:ac:8b:
e5:92:d4:c1:5e:b9:a8:d4:67:e3:b5:ce:fa:71:e8:36:d5:44:
42:3c:ab:86:0a:5b:35:41:1e:91:dd:c2:c8:e7:dc:7c:77:ef:
c4:fd:14:63:bf:53:0c:73:92:ec:0a:71:81:62:6c:e1:eb:96:
65:d7:80:2d:f8:10:54:ac:e4:03:c5:b5:8a:af:5c:e6:e1:f6:
05:77:c6:5a:82:33:fb:a7:d9:8e:77:41:93:be:50:43:cc:4d:
71:39:83:74:37:1d:d1:1d:f9:b9:22:2d:d2:e1:3b:43:d1:40:
d9:d4:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:23 2025 by rpki-client