Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5839a766-9f1f-308e-bf25-c48110bcaefc.roa
File: 5839a766-9f1f-308e-bf25-c48110bcaefc.roa (raw, json)
Hash identifier: H2ncYIbXTxqE3Zef+5jDbSECQYoGDuY5HDufKSljyZA=
Subject key identifier: 82:D6:FD:73:8D:77:C7:C7:4C:6F:33:FC:76:80:7C:85:8A:E7:01:87
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F432858489A3B4AA7585C88F09B135A00
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5839a766-9f1f-308e-bf25-c48110bcaefc.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 400591
IP address blocks: 204.8.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4a:a7:58:5c:88:f0:9b:13:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=e2640bd6-074f-446f-b4a1-fd7f2c854ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:5b:c2:53:09:48:0d:eb:ab:80:35:f4:26:
0f:f5:72:71:90:94:22:ab:81:7a:f3:9c:5b:ec:e1:
dc:1e:97:17:8f:9a:76:ec:db:f0:08:5b:e6:41:e1:
5a:1b:e9:d6:93:66:8a:d5:ec:c2:5b:bf:33:93:96:
58:bc:24:b9:c6:f5:32:e0:ef:43:78:e2:51:10:10:
b5:28:5a:62:91:e9:d2:cd:6f:eb:50:b3:24:09:03:
11:dd:69:8b:c3:1a:70:b5:67:ce:54:23:9a:84:f7:
47:59:f1:91:bb:eb:95:06:96:78:78:19:5c:90:19:
3b:6f:b1:a3:a0:cb:db:2d:4b:16:74:ad:62:7e:35:
89:07:4b:fc:96:19:91:53:20:e4:d8:65:e6:d8:a3:
31:31:db:85:e0:1d:0d:4e:30:40:9f:a3:a0:bc:78:
0e:c0:6b:6b:fb:d9:7a:d3:28:82:e0:50:9f:ad:d8:
bf:62:de:e4:49:bc:b7:79:86:9e:7e:ea:56:b6:64:
6e:98:c5:be:cd:3f:d8:eb:32:d1:f9:03:8e:a9:c6:
94:88:b3:dd:5a:ca:3d:33:51:aa:81:9f:ed:ac:ca:
1c:eb:dc:ca:ea:cd:34:ce:99:37:c7:b2:39:fd:6b:
b4:39:ed:ec:49:e6:cd:c4:5c:52:68:2c:01:9b:4b:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:FD:73:8D:77:C7:C7:4C:6F:33:FC:76:80:7C:85:8A:E7:01:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5839a766-9f1f-308e-bf25-c48110bcaefc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:a5:dd:b8:a2:e2:f8:fe:2e:de:7e:a2:26:5e:8b:b0:91:04:
88:c6:e1:2c:a5:84:ba:63:5b:45:64:cb:cf:e8:47:f0:f2:53:
6f:c0:16:e6:9b:94:6a:18:ca:f1:69:a5:ff:1a:23:5a:78:2c:
ad:e8:1c:37:c6:ce:7d:9b:ab:a0:af:5d:40:97:31:7d:8b:42:
d7:86:a2:32:4d:6b:d2:1c:25:be:b2:a4:3f:33:d2:bc:c1:cc:
a2:86:39:00:98:1b:21:f0:a5:5b:66:7f:6c:2d:78:b5:8f:55:
7e:33:00:78:0e:97:2d:5d:e4:3f:76:4f:6e:bc:a5:62:06:cb:
ac:47:96:5d:71:57:19:bf:7b:ab:53:6c:35:5e:45:79:d6:4b:
1b:0b:70:b2:8c:93:60:02:40:64:11:44:cb:08:0a:97:ba:47:
fa:fb:8a:48:e8:5d:e0:a5:d0:a3:c8:17:b9:32:40:7e:93:4e:
d1:39:82:ee:79:73:4f:33:08:e9:51:32:b3:1f:62:f3:97:ba:
5e:99:18:b3:87:bb:79:99:48:3b:1b:5c:24:81:cd:6c:ce:c7:
6d:9a:33:31:7c:3d:bc:7a:6c:4d:4c:ca:8a:b1:0e:44:3b:93:
33:01:1f:04:37:24:14:f4:31:18:d5:65:5c:4e:f5:a4:04:f8:
d9:d3:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:35 2025 by rpki-client