Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/aca8b32c-982d-3e44-a7e3-7dd5676dd6bc.roa
File: aca8b32c-982d-3e44-a7e3-7dd5676dd6bc.roa (raw, json)
Hash identifier: Nl0PfKQ0wRvSZ/IDJXbqMPQtOcNnEYATcVQEOrpk5Us=
Subject key identifier: E9:51:B2:87:6D:02:AD:85:6C:5B:E2:E1:93:02:D3:2B:5A:DF:7B:93
Certificate issuer: /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial: 010D0C9F432858494D7056331783D00B353DE280
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/aca8b32c-982d-3e44-a7e3-7dd5676dd6bc.roa
Signing time: Tue 25 Mar 2025 06:37:25 +0000
ROA not before: Tue 25 Mar 2025 06:37:25 +0000
ROA not after: Mon 23 Jun 2025 06:37:25 +0000
asID: 0
IP address blocks: 204.14.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4d:70:56:33:17:83:d0:0b:35:3d:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
Validity
Not Before: Mar 25 06:37:25 2025 GMT
Not After : Jun 23 06:37:25 2025 GMT
Subject: CN=8ef22aa0-412b-4026-b261-2ebb921eb129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:c8:aa:8a:5a:1c:1a:52:0f:d0:71:6a:68:
75:f9:2e:b7:1a:2c:ad:57:64:c3:28:15:6c:eb:9e:
a4:fa:7e:0d:07:18:fd:61:df:3b:91:d1:85:05:30:
d4:da:8a:35:a5:3a:77:e9:e5:21:ac:e7:6f:86:04:
64:aa:86:c5:53:eb:6c:d8:f4:a6:b7:db:34:ac:be:
60:a3:c1:ee:42:c8:f7:30:b2:4f:1c:d7:d4:39:cc:
58:62:2d:ac:23:1b:6d:61:5c:d4:43:a8:53:8f:ac:
55:61:1c:12:65:1a:32:f1:ff:b0:4c:8b:15:b5:fc:
1e:1e:bb:3b:2d:20:0d:2f:45:8b:9e:9e:be:a5:31:
8d:dd:91:54:d6:c3:69:4e:55:b3:46:0e:cd:5c:68:
59:52:e9:48:07:33:d2:14:b3:55:ad:57:9a:c5:f9:
a5:bd:bc:ca:2e:12:5a:05:57:bc:44:ef:d3:a1:ab:
7a:ed:ad:ad:35:8d:43:ad:3a:62:fd:9b:18:23:a5:
62:a0:3d:69:28:1d:11:80:0d:e9:57:dd:94:8d:56:
e7:5d:6e:2e:52:3d:f0:eb:16:02:b5:42:b4:fd:5a:
d5:ff:27:5f:6a:2b:bc:9a:26:34:0e:4e:79:76:8d:
ba:7e:5b:3d:d0:56:19:1a:38:ef:c4:a7:e5:bf:29:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:B2:87:6D:02:AD:85:6C:5B:E2:E1:93:02:D3:2B:5A:DF:7B:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/aca8b32c-982d-3e44-a7e3-7dd5676dd6bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
X509v3 Authority Key Identifier:
keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
sbgp-ipAddrBlock: critical
IPv4:
204.14.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:d6:08:c2:2b:01:dd:49:ff:47:40:34:09:2b:a5:b5:7b:71:
fd:d7:ce:48:a6:07:50:cc:fe:f0:b7:44:db:39:be:00:36:2a:
84:d8:28:55:97:81:2e:c8:a5:bf:79:22:dd:c3:d7:4b:34:68:
56:c0:25:9f:d0:2b:dd:48:1f:89:6c:8e:df:6b:a1:f1:fc:1b:
98:41:66:ec:ff:24:3c:68:f0:cd:86:52:1b:3d:78:99:36:5f:
91:7b:7f:6c:89:cf:90:b7:4b:f3:1f:6c:15:7d:5f:fa:c6:51:
33:71:63:39:f7:02:6c:ec:f8:94:7e:4b:c9:2d:2f:9a:c3:14:
e2:89:cc:fb:f4:09:bb:de:9b:91:f0:70:ff:e2:0f:ad:a2:83:
88:fd:98:bd:5b:e7:f7:8d:58:6e:0a:1c:b1:74:9a:f9:6e:92:
33:8a:f4:47:8f:f8:9e:8d:65:e4:3c:55:f6:87:73:38:96:86:
fa:b0:ec:ca:ec:e1:98:6f:4e:1b:ac:a8:49:c0:d2:34:bc:27:
4e:cb:5c:ad:8f:9c:86:b0:b5:9c:d8:f5:18:7f:87:b6:a7:c1:
a9:c9:e8:11:a3:27:bd:4e:22:e8:6e:dd:76:2b:c2:73:a2:52:
6a:23:c5:ea:f5:85:64:20:96:5e:32:ac:29:44:7f:c1:f0:82:
c2:60:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:26 2025 by rpki-client