Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3208ea89-4e48-3f7c-a27b-acb8323e0b3e.roa
File: 3208ea89-4e48-3f7c-a27b-acb8323e0b3e.roa (raw, json)
Hash identifier: GXabwXlxaU/az6mI/ZwoVo0XYEBsXdHU8wJp0UGx/pI=
Subject key identifier: 01:F9:3A:D7:E4:2B:AF:E1:D3:D9:AA:38:C1:96:D4:65:D1:23:79:DB
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D149B84554610D918FAC80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3208ea89-4e48-3f7c-a27b-acb8323e0b3e.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 12271
IP address blocks: 204.210.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:49:b8:45:54:61:0d:91:8f:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=93de5828-40f0-4635-b533-9db77997bf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:16:98:ba:47:fb:14:2f:1d:07:74:ac:b4:
60:35:e6:d0:01:0c:c4:ae:f5:2f:cb:ed:91:c7:04:
6c:91:4f:ce:49:3e:41:24:e7:78:3b:e5:f5:2d:6a:
f9:29:79:cd:52:cc:4f:53:a4:90:d3:50:ee:04:47:
24:89:b1:24:8e:16:a1:95:0b:04:50:9d:e0:30:fa:
50:6d:3f:7a:3d:77:74:90:a5:5b:f2:6c:9f:31:38:
8a:98:b4:84:db:b8:d5:fd:96:0a:a0:e1:d8:dd:56:
48:32:5c:75:a8:5e:82:eb:83:63:31:ae:05:04:8b:
49:02:85:3a:d3:e2:76:05:c1:17:86:8e:1b:c4:46:
e2:f9:16:ff:3d:06:3c:a5:84:5e:ca:2e:05:62:be:
39:4b:f8:73:a7:eb:32:72:a0:dc:95:96:fb:74:de:
c1:a2:3b:53:aa:81:9d:e6:76:7c:39:52:30:d4:3a:
9f:68:20:3d:49:6c:d5:48:aa:98:eb:09:a8:4a:e6:
e4:2e:09:af:00:bd:be:fd:3c:ca:c8:d0:24:5c:74:
a7:32:3f:92:0d:3e:9a:f0:2b:c4:07:e2:77:57:b9:
61:c4:04:ae:88:0f:3a:8e:d0:39:24:1f:8f:85:4b:
0e:e8:a5:07:e5:6e:f4:e8:1f:10:13:60:cc:c7:1e:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:3A:D7:E4:2B:AF:E1:D3:D9:AA:38:C1:96:D4:65:D1:23:79:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3208ea89-4e48-3f7c-a27b-acb8323e0b3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.210.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:ae:c5:a3:12:8c:e7:85:c8:b3:f2:52:40:c2:49:73:6f:cf:
0d:dd:07:5e:76:5d:f4:39:6b:75:42:dd:45:fa:8b:90:5f:75:
6d:bc:b1:c4:d2:98:eb:f0:fd:8e:ff:45:21:8c:31:2f:c2:81:
7f:45:b5:a1:e0:06:71:4d:41:1c:30:56:b0:77:3a:c4:d2:05:
36:64:4e:b5:fc:56:46:49:18:77:a8:f5:b9:9e:85:ad:d3:1b:
26:f9:82:1f:23:d3:04:87:31:ce:39:d1:ca:45:cf:93:20:b9:
76:7b:89:08:bf:05:29:e1:42:97:6b:0f:30:1a:aa:a9:9a:8c:
54:90:a8:e1:59:c3:a2:2d:8f:ec:04:fa:47:9b:b4:23:0c:e7:
25:40:17:cf:72:10:1d:34:b1:8a:2a:c7:f5:3c:ab:6c:f0:d2:
37:c6:4f:cc:b9:0b:d1:1a:b7:31:a8:ed:14:1c:fd:7b:39:cf:
ee:50:9b:0b:55:9f:d4:a3:de:4d:22:68:29:af:ce:e2:2c:f0:
d6:be:3f:fe:51:eb:cb:84:ea:11:d7:73:17:3d:c8:3a:77:ec:
f6:d9:20:e0:7a:d3:bf:d5:aa:01:b7:49:6d:c3:08:b7:d3:4e:
bf:f0:a2:79:71:1d:90:df:af:dd:69:9d:94:a7:3b:de:57:ac:
2d:b3:79:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:09 2025 by rpki-client