Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b8dbb74b-7c47-3d84-a083-b0c6cccfa6b8.roa
File: b8dbb74b-7c47-3d84-a083-b0c6cccfa6b8.roa (raw, json)
Hash identifier: wAZPCL/Q+NvLYkrmWAakb73db6sbYA+Mo1qMhgThSWA=
Subject key identifier: 8E:CB:89:12:41:B4:72:39:D0:38:2E:F8:2D:BD:10:EA:DA:16:8B:FF
Certificate issuer: /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial: 010D0C9F4328584851A5820B1A34ED22CEDB5880
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b8dbb74b-7c47-3d84-a083-b0c6cccfa6b8.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 20057
IP address blocks: 204.235.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:82:0b:1a:34:ed:22:ce:db:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=49d89b52-50e8-4988-9154-8c50f57076f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:17:5a:0f:ce:3f:d2:d6:11:bb:18:c3:ed:
22:7e:97:91:dd:a4:c0:3e:f4:72:57:9a:07:ed:be:
35:83:09:bc:cb:c3:9d:a0:c5:1b:d9:ec:eb:b1:fe:
dc:48:d8:27:a9:02:41:67:e2:35:46:54:a4:77:6a:
a0:10:e6:9f:22:2a:3a:0d:c1:a8:f7:ae:17:59:c9:
3b:1a:02:a2:a9:7c:4f:ac:5f:d9:b3:04:c8:f3:23:
c1:f8:69:7e:a0:20:67:08:11:8d:b7:b3:93:cd:9f:
d3:00:f9:86:34:bd:b0:09:71:50:cd:97:b6:c6:32:
fd:c7:eb:99:88:5c:11:24:d4:0c:c9:73:e5:45:b8:
5a:bc:a9:c7:3b:39:46:0f:3d:d0:0e:2e:af:ed:09:
7a:88:f7:83:af:73:21:fb:1c:aa:92:74:06:a3:6a:
f1:cd:5a:f0:92:ae:08:ff:e3:a6:e5:2f:bc:6f:04:
bf:db:30:10:12:51:3e:2a:2b:61:fd:33:12:4d:0d:
a2:82:26:a4:0f:e3:71:b2:7d:47:83:cb:a8:83:ba:
aa:c5:de:d1:8b:05:80:93:b6:cc:88:b8:62:39:db:
75:7e:ed:81:17:e9:6d:e2:0e:1d:92:7f:ba:67:39:
cb:f3:79:95:8c:57:df:5d:9e:38:5c:09:2d:3d:c8:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CB:89:12:41:B4:72:39:D0:38:2E:F8:2D:BD:10:EA:DA:16:8B:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b8dbb74b-7c47-3d84-a083-b0c6cccfa6b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
X509v3 Authority Key Identifier:
keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:cd:a7:8e:c3:db:4d:ac:99:94:76:6c:76:5c:d1:e2:83:0d:
1e:f5:71:bf:0d:66:fc:9d:50:aa:bd:2b:bd:f0:68:0e:2a:18:
ce:3b:d2:4d:d4:18:b9:2e:de:7a:64:67:e7:fd:f4:cb:21:c4:
c9:ad:67:33:a7:33:e7:91:ca:04:cb:c2:64:47:10:7e:8d:1b:
46:1a:c8:cd:64:1a:29:c7:eb:e2:39:51:35:16:f0:44:da:6e:
ca:0f:05:37:1d:61:c8:cd:a4:00:cc:e8:81:26:64:1c:aa:34:
31:6a:cc:06:2d:6e:6b:57:a3:38:98:34:1c:69:89:aa:d2:96:
aa:b3:95:61:f8:73:4e:8b:9a:10:09:c9:9f:61:e4:b0:0c:57:
15:c8:2d:90:e3:78:77:3b:7b:9a:17:72:c7:16:9d:63:4d:d6:
98:61:27:01:ea:e7:98:b7:7b:42:62:1e:3f:1e:b9:74:b0:dd:
99:89:d2:3e:6d:36:09:8d:c1:92:12:6e:cd:51:1a:18:0b:1f:
b6:98:7a:da:e1:be:45:c9:3e:4c:12:c6:22:59:ce:f8:d5:fd:
b0:3a:f2:77:bd:8a:c8:ca:28:5c:be:44:ce:e1:50:e6:11:e3:
b2:c6:2d:12:45:b5:58:f2:19:40:d3:4b:ee:7d:ad:6a:82:46:
42:58:da:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:49 2025 by rpki-client