Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/b35ed2ca-f26f-3736-82be-d19951f21b7a.roa
File: b35ed2ca-f26f-3736-82be-d19951f21b7a.roa (raw, json)
Hash identifier: swgZ0a7W5Ub4ZPSYMcKeWlLZ2X68thbqSr6CzO+9+VM=
Subject key identifier: 0D:47:FC:CA:7E:F9:A0:9A:21:A3:07:AC:69:9A:3A:41:87:B3:E5:E4
Certificate issuer: /CN=df298930-fdd9-473b-93ed-6736f8296931
Certificate serial: 010D0C9F432858487B85B56DEBD630615DAA5100
Authority key identifier: E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/b35ed2ca-f26f-3736-82be-d19951f21b7a.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 2055
IP address blocks: 204.90.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:b5:6d:eb:d6:30:61:5d:aa:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df298930-fdd9-473b-93ed-6736f8296931
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=ce9fad53-5197-47f8-8a73-7f0f9cc033d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:bb:11:e4:2c:84:2d:48:5e:ca:c1:09:bd:
14:90:ca:54:e7:2d:03:83:39:5a:28:8a:cf:e4:8b:
7f:52:fd:c1:73:e5:aa:43:69:87:6e:d2:83:f0:ff:
ef:e7:2d:ef:e5:64:2f:27:a6:c8:6c:3e:6b:15:2f:
9f:d9:90:5b:91:4b:71:92:2a:b7:62:b6:5d:23:7b:
95:0a:87:36:5f:e9:39:8d:fb:0c:12:5f:6c:80:32:
6f:f9:08:bd:98:d2:08:2e:ab:a0:64:42:5f:9e:1e:
5e:ca:3f:75:c2:bd:f4:17:02:46:03:1f:ba:10:f3:
c7:16:7b:ee:71:fa:ad:6b:91:b5:9a:d1:1b:6e:02:
21:2a:2b:f0:7b:b5:36:a9:21:ed:02:7a:a4:94:f6:
a1:10:a1:64:3e:98:c8:84:b9:82:61:1f:dc:40:f6:
1d:06:1f:57:73:09:3c:b0:14:46:59:43:cf:95:86:
d8:0d:2e:6c:49:cc:df:41:c3:d0:ba:0a:bb:e2:3b:
7d:e6:be:27:ec:82:0f:10:f1:e2:d0:18:b3:c6:bf:
d2:8f:6b:17:5a:6c:5d:8d:9d:e1:fd:6f:63:42:61:
c1:40:be:8f:93:0d:0a:1b:15:be:69:fa:f4:f5:57:
9d:0e:08:c8:2c:e0:57:34:a0:04:92:2d:0d:d3:44:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:FC:CA:7E:F9:A0:9A:21:A3:07:AC:69:9A:3A:41:87:B3:E5:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/b35ed2ca-f26f-3736-82be-d19951f21b7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931/df298930-fdd9-473b-93ed-6736f8296931.crl
X509v3 Authority Key Identifier:
keyid:E8:19:25:7A:88:CF:CD:31:EC:25:C8:20:0F:7A:92:FE:1A:E0:AF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/df298930-fdd9-473b-93ed-6736f8296931.cer
sbgp-ipAddrBlock: critical
IPv4:
204.90.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:bd:8a:6f:67:f7:95:b9:7c:fd:5e:4a:79:66:3d:91:43:5a:
62:26:31:92:45:d7:20:b5:f4:f9:ad:89:1a:86:54:01:09:46:
47:27:ef:2f:61:1f:4b:75:f4:7e:a9:87:8e:2f:6e:1b:0b:67:
6c:50:cd:ee:60:18:9d:a8:2a:0b:22:82:86:10:51:75:ca:79:
8d:e8:32:ce:35:5d:b0:cf:d4:37:03:7f:83:b3:56:d6:8f:a1:
f0:75:16:91:89:d0:e3:26:81:14:d1:d3:ba:a8:c3:1d:75:39:
8e:42:07:af:d6:06:40:c4:3f:08:ba:17:45:6f:59:60:3a:84:
69:9a:3d:5d:1a:54:60:14:ae:12:96:47:f5:42:97:b6:a9:35:
e5:c8:e4:a7:e5:70:5b:88:63:3e:10:f8:c6:14:88:31:1a:a5:
b2:59:e6:3f:f4:cb:4d:bd:27:00:94:a8:b7:8c:b0:91:28:8e:
49:0c:67:85:9d:e8:2b:57:50:bd:a3:d3:b6:55:88:55:82:7f:
38:6f:6b:18:de:59:8d:9f:f1:5d:dd:81:fb:75:83:65:0f:8e:
48:ee:53:bd:4b:72:55:15:63:63:45:14:bd:9e:ba:61:d9:a7:
37:8f:86:26:69:30:50:9e:57:f9:90:2f:f8:62:cb:ff:34:f3:
ae:51:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:46 2025 by rpki-client