Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa
File: cf4be9dc-75c5-3f44-b4d0-65e111847482.roa (raw, json)
Hash identifier: 5YPxB2mzjjUGKw8DhPhFvBXArvfgWwj+QT4149yDth0=
Subject key identifier: 07:94:87:EE:5C:F5:6B:01:93:1B:48:5A:E2:C6:5A:7F:8E:03:09:93
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F4328584944694B5F40B0C0673C267AC0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 4922
IP address blocks: 204.111.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:4b:5f:40:b0:c0:67:3c:26:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=4aad279e-4022-44bc-9b1a-56011ee19322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:71:7a:d2:16:35:1a:be:b3:34:55:70:fd:
a1:79:80:6e:97:31:48:e9:a4:65:20:66:31:00:04:
f7:ad:52:d5:aa:5f:50:d3:da:3c:a5:5b:b9:e7:ce:
86:16:11:79:9f:10:ce:ad:14:12:21:72:70:aa:ba:
66:9e:27:72:dd:ac:57:cd:84:bf:ab:ff:13:5d:90:
ce:b0:72:ec:10:b4:b6:bb:1a:16:f6:43:d6:8c:25:
a8:74:18:17:00:83:de:4b:a2:3c:39:68:d7:d6:0a:
b1:8e:3d:2c:84:10:b0:3a:41:ca:dd:21:9b:93:d5:
25:42:fa:5a:91:dc:79:48:51:25:34:c4:7d:61:dc:
97:d4:bc:2e:1d:e6:7c:58:6d:18:97:c5:d4:ab:80:
e4:f1:2b:ad:1a:34:92:c6:46:69:ee:64:3f:b7:81:
82:93:98:fd:41:9b:3a:36:e1:42:65:e5:bb:cd:b8:
49:01:7d:65:ed:7e:8c:d2:8f:e6:ac:12:46:de:43:
0d:49:56:04:16:11:8e:af:f9:8c:0b:7d:f9:ee:d1:
3a:36:fb:49:32:1a:1e:31:f8:d6:29:d8:bb:26:ee:
00:39:19:61:e8:fc:08:58:5a:48:e0:16:3e:9e:06:
e8:0b:9d:a1:59:36:88:7c:7d:08:85:3c:19:b9:b0:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:94:87:EE:5C:F5:6B:01:93:1B:48:5A:E2:C6:5A:7F:8E:03:09:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
204.111.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:51:0e:4e:d0:25:15:b8:d2:aa:4c:f9:a6:9d:c0:7f:70:19:
2d:02:df:46:eb:f0:7f:ee:95:d3:3c:00:f6:37:f1:3a:37:ef:
66:02:75:57:f7:b9:a7:61:12:b2:5c:c7:35:05:ce:97:9b:51:
89:8f:e0:dc:6a:a0:cb:1a:fd:21:d9:e4:16:dd:4e:dc:cc:a5:
ae:9d:60:1f:2b:e5:fa:09:4b:04:ff:11:b3:59:64:0c:93:b9:
8f:8b:aa:93:b0:76:2c:74:da:17:51:5e:91:25:ca:9d:81:43:
29:05:30:0e:80:fb:3c:70:65:9b:c0:b4:3e:cb:47:43:b5:a5:
ea:87:d8:7c:4b:03:f9:3a:01:b5:ed:b1:b9:f4:c6:7d:d0:46:
f2:38:38:9b:da:f2:cb:9e:e0:b5:4c:c0:7d:cc:a1:b3:2c:e9:
63:ab:41:0d:c3:d8:06:31:d4:21:d4:fc:27:ea:93:bc:be:a0:
a5:00:cf:4e:3e:c7:ac:aa:46:16:2e:54:15:21:be:8b:11:7d:
9d:d5:42:8e:ac:cf:e1:e4:63:7e:53:0a:e1:7d:8a:2d:49:dc:
06:d3:67:66:fa:36:e9:a9:0b:7b:83:ec:43:c8:52:dd:36:4c:
51:7d:d3:cb:2f:2a:33:5d:17:b4:f1:5b:84:e7:82:e4:3f:ff:
75:1b:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:57 2025 by rpki-client