Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/e40632ac-4b18-359c-a110-1eb7ea5ed57c.roa
File: e40632ac-4b18-359c-a110-1eb7ea5ed57c.roa (raw, json)
Hash identifier: 1CggrstMaLYhbmMwmkRtAeDhElcBaj0hYxcGu7j36s8=
Subject key identifier: D1:DA:97:7D:13:12:F6:5A:CE:74:01:89:D2:A2:CB:5A:29:9B:6A:72
Certificate issuer: /CN=1b03e342-d588-4239-8704-6688d01760d9
Certificate serial: 010D0C9F43285848BFEBA3AAAC8DA29D5126F688
Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/e40632ac-4b18-359c-a110-1eb7ea5ed57c.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 397031
IP address blocks: 204.235.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a3:aa:ac:8d:a2:9d:51:26:f6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=848044ae-7ab6-4c45-a50b-183b2fa1b868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:91:86:5c:f4:8a:e0:1d:3f:2d:33:c6:bd:a3:
e6:b1:13:e3:94:3d:69:74:b5:30:65:7e:cc:88:91:
4a:3b:c1:c1:66:86:7f:c1:eb:62:c8:44:55:74:ee:
2c:dc:a5:a3:28:75:be:69:c2:3e:4a:d5:c2:d4:aa:
01:11:f7:42:91:2d:37:36:01:4d:7d:08:de:da:d9:
cc:02:ab:e4:70:ef:48:62:56:f8:35:18:e8:50:9c:
2d:f3:a7:71:7d:b3:bb:41:e6:a5:6b:a0:38:6a:ae:
81:ef:a4:f5:66:3e:71:58:61:10:85:ca:ca:b4:0a:
d9:26:b4:81:f0:f8:03:d9:e1:ee:6e:dc:84:3b:b2:
f1:48:20:93:82:ef:e5:48:fb:d2:13:8f:59:68:ef:
26:fa:47:f4:ae:d2:73:7f:44:ea:4d:96:cb:ee:19:
e0:8f:ab:a9:c7:d5:80:3e:b6:5e:97:64:dd:79:0d:
30:bf:b1:0a:69:c1:bd:e2:bb:26:9b:b7:67:de:47:
13:87:d4:02:ca:52:9b:c1:99:9b:b7:33:f7:76:d8:
1d:8d:ac:fb:49:7f:92:eb:10:59:d9:da:99:33:20:
6a:ec:e8:d9:73:59:67:51:de:04:ea:80:75:f1:8e:
10:1c:ed:ce:df:67:9c:42:2a:25:a6:f7:aa:44:e6:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:97:7D:13:12:F6:5A:CE:74:01:89:D2:A2:CB:5A:29:9B:6A:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/e40632ac-4b18-359c-a110-1eb7ea5ed57c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl
X509v3 Authority Key Identifier:
keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:5b:4a:1e:99:a2:f0:5c:0b:11:f9:ec:e6:5e:0b:88:25:1d:
d9:67:d1:79:ea:af:7f:0c:44:7f:c2:c3:0b:c7:6b:e5:ea:9f:
32:dc:38:71:c6:c6:d9:61:3c:cb:2e:1c:e7:05:9d:2f:1b:1f:
51:af:98:cc:3a:45:a2:2c:a2:e1:39:93:11:67:5b:db:0a:fd:
59:92:d0:a7:74:94:09:35:20:9b:a8:7e:dd:5b:da:d0:b6:5e:
f8:a2:ae:8a:2e:c3:6c:47:4e:14:88:6c:97:d3:a9:93:3f:b0:
53:aa:61:e4:dd:07:b8:7c:ac:67:9c:1d:d0:22:41:77:e2:f9:
95:0d:c3:c6:81:6e:42:8b:b4:39:e7:91:ab:67:cb:5b:44:ba:
ba:78:60:ac:26:5e:cb:eb:13:3a:6f:23:08:93:d4:86:12:1b:
6e:b2:f2:fc:c6:d8:d6:df:ed:94:81:f4:07:53:ec:f6:9b:be:
b2:d2:c7:b3:38:32:25:ec:dd:6c:1a:1e:a1:2e:b4:93:28:0a:
b3:e4:6c:85:c8:66:c8:e1:26:b4:f7:1f:c0:bb:3e:69:2b:de:
bc:97:42:25:3c:e2:e1:cb:bc:b0:54:4a:a4:b4:e0:65:13:1b:
50:b8:e3:01:55:44:f5:e0:6f:c1:29:e0:63:21:6f:ea:04:38:
e2:d7:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:00 2025 by rpki-client