Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/25637759-4ecf-32b3-975e-106a6ab9f585.roa
File: 25637759-4ecf-32b3-975e-106a6ab9f585.roa (raw, json)
Hash identifier: S1xoH9vP2JvMA56FVPfOSJ+qkCg5nlOkQ6raGKxZIIE=
Subject key identifier: C6:7A:DF:BB:46:98:0F:C8:B4:18:F0:96:A9:27:C9:55:98:D0:32:7F
Certificate issuer: /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial: 010D0C9F432858487B85B5524671E000AB5ADC00
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/25637759-4ecf-32b3-975e-106a6ab9f585.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 2055
IP address blocks: 204.90.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b5:52:46:71:e0:00:ab:5a:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=4c48861c-48f5-40a4-af96-6b464739431a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:23:8e:f1:e3:37:25:93:b1:39:5a:4c:d2:
69:eb:f2:bb:fd:98:43:79:80:56:38:71:75:08:7a:
5f:c9:7b:3a:7b:96:66:40:cf:8b:bc:88:57:7e:31:
09:62:4a:84:9e:e0:57:78:0e:ab:43:ec:a3:7b:5b:
f4:05:70:24:df:c9:85:f3:6b:98:b9:b1:e0:c6:82:
9a:bf:70:71:c7:a0:cf:7e:c1:96:1b:ad:c6:80:dc:
a7:1d:16:36:61:49:ec:a8:ab:c1:1f:f7:68:13:71:
67:9d:b1:18:13:49:ae:9c:10:9a:05:8c:80:e7:69:
e2:1f:70:ea:0e:3f:75:67:b0:40:17:99:05:06:6a:
1b:1f:a2:fd:72:4b:22:d3:84:24:ba:2a:ee:b1:12:
2a:36:04:48:5f:0b:04:24:20:85:81:87:a2:1d:93:
80:43:50:5d:65:c5:97:f5:69:e7:71:3a:e2:06:b2:
d8:92:da:f8:81:6c:8a:31:55:b5:13:03:e3:09:9f:
16:4a:23:e8:f2:c0:2d:78:13:7d:5b:e9:33:19:1f:
70:ee:68:37:3c:0f:d9:6a:45:d0:ac:7f:27:f8:93:
c6:87:65:25:0a:bc:3f:6c:8a:e1:6b:47:4c:b3:bf:
6c:3d:4e:88:f0:c5:ce:a8:20:80:44:ca:fe:ae:6d:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7A:DF:BB:46:98:0F:C8:B4:18:F0:96:A9:27:C9:55:98:D0:32:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/25637759-4ecf-32b3-975e-106a6ab9f585.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
X509v3 Authority Key Identifier:
keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
sbgp-ipAddrBlock: critical
IPv4:
204.90.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:b7:70:46:3c:7a:ad:33:a4:61:49:7a:f2:a5:46:74:5c:8c:
1f:cd:7f:df:47:b8:8a:a3:1f:83:30:01:17:6c:59:90:a7:19:
ab:dd:89:fc:e1:53:b4:5e:ed:cc:eb:21:5c:db:74:d3:ac:67:
92:2b:38:44:a6:d1:c3:0a:b1:c5:56:c6:e4:d9:5a:47:28:5d:
d6:89:72:ac:fe:d1:d4:6f:ad:e6:17:27:99:de:be:b9:8e:f8:
f8:9e:72:e5:67:e6:90:c3:00:94:76:81:8b:52:c2:e5:14:2e:
d1:e6:d4:13:32:81:60:68:63:0b:ba:a9:a1:0f:4e:11:d7:42:
c4:35:58:cc:a7:fd:a3:a7:21:b1:53:e5:2e:00:21:29:5a:14:
c0:e3:7b:1c:05:4a:32:35:96:d5:b6:c7:10:d7:94:f0:bf:51:
91:8b:43:87:9f:23:de:a1:f1:60:03:b7:5f:21:1e:c4:58:3c:
52:f1:5e:e5:a2:22:71:40:52:dc:aa:40:54:dc:c9:c2:27:d0:
54:05:7e:6b:19:02:f1:75:19:32:14:1b:68:9c:c4:a7:a6:48:
b6:43:61:e1:5e:c6:3d:7e:fd:af:78:54:11:eb:55:87:bd:e1:
df:07:c8:43:2d:0f:a7:a5:69:bc:27:49:92:7f:09:86:a3:d9:
15:02:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:06 2025 by rpki-client