Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0cd3fd8a-63a1-38c6-b83c-facc549b8955.roa
File: 0cd3fd8a-63a1-38c6-b83c-facc549b8955.roa (raw, json)
Hash identifier: d0j5lEF+wVdZIRZhuNYwt04EjTxsBhaDzbV4uox9jZE=
Subject key identifier: 7A:8A:D6:71:27:42:E9:D1:E4:A4:C7:40:8F:B9:11:25:7D:CA:01:31
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848A996204C685F7FCD0F1E4B80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0cd3fd8a-63a1-38c6-b83c-facc549b8955.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 25668
IP address blocks: 205.250.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:20:4c:68:5f:7f:cd:0f:1e:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=8e12c9c3-1c6e-4da1-b93e-ca06fd761a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:5b:c2:a0:7b:76:7b:f7:a6:e3:58:5a:de:
ea:ef:81:a4:13:dc:53:f0:89:74:95:f1:b9:f0:4d:
43:4b:3a:cb:7d:0b:94:86:d1:a7:c6:bc:72:9a:aa:
d8:a2:be:9e:82:eb:f4:a4:1f:4d:5d:55:5c:9b:f2:
bd:d9:5a:7e:66:f6:a1:50:71:fe:82:81:c1:d0:11:
89:38:c8:c1:3b:b3:c1:78:69:5c:bf:03:6c:87:e8:
70:c2:25:6f:39:a0:ce:3f:ce:6e:4a:20:13:c2:06:
4a:93:42:74:30:cb:2e:63:83:f6:37:ff:b4:ef:9d:
12:a7:fb:a3:ad:c6:b9:db:76:8e:43:f4:e0:a0:46:
85:2d:7c:80:de:7c:35:db:b6:0f:b8:8d:5d:ad:af:
c1:c6:8f:a3:3f:b5:9c:c1:6b:6b:d6:76:d4:31:05:
48:4c:9b:07:55:78:59:82:3d:84:79:1d:ae:ec:49:
41:9d:fb:b6:63:db:17:b0:4e:f1:86:9a:65:4e:1b:
1f:4a:ae:3f:4b:b0:c2:33:df:c0:c7:fc:ae:51:1f:
00:bd:06:a7:49:1f:c3:26:dd:48:82:ea:a5:90:99:
63:12:48:9a:0c:a2:5d:22:92:12:4e:6e:d3:27:00:
44:6e:db:87:c7:1d:b8:3d:78:a3:7e:e5:21:b8:c9:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:D6:71:27:42:E9:D1:E4:A4:C7:40:8F:B9:11:25:7D:CA:01:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0cd3fd8a-63a1-38c6-b83c-facc549b8955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
205.250.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ed:61:70:33:51:43:6a:17:e8:a4:28:af:81:0d:08:00:95:43:
e9:52:fc:2b:bb:d7:65:09:3e:92:21:86:29:1f:25:a4:52:1b:
e5:ce:a1:ca:2c:5c:e3:74:dc:b1:4b:52:20:c6:ec:ef:c7:7f:
4f:f7:86:f7:35:2b:68:fe:8d:1d:a0:e2:6c:8c:25:a2:33:ff:
df:25:a2:04:4b:64:1e:61:b5:97:c6:18:39:8e:18:93:39:ae:
09:e6:d1:cd:2d:21:6f:dd:d5:20:4d:26:0c:2f:4b:bc:47:92:
b9:84:6a:03:0d:ce:13:04:71:c0:2f:9b:33:3d:2d:08:ff:f3:
9e:f5:5a:09:35:00:c9:20:62:6b:03:c9:74:b7:2a:3c:d8:06:
73:18:89:33:b2:31:d4:11:fe:95:14:1f:1a:6e:d7:c4:95:e6:
29:0b:dd:5a:46:2b:18:2e:c7:be:be:61:a6:2d:54:fc:3a:07:
16:f0:a6:54:bc:16:ee:38:d0:ad:79:95:f6:c9:78:24:31:14:
5e:fd:7d:d1:c5:13:fe:73:59:50:22:3a:c6:db:63:91:40:89:
65:eb:38:d3:eb:f7:fd:78:95:49:ab:ae:75:33:de:6a:11:66:
b7:90:65:c3:40:51:37:8e:c1:cf:1d:aa:fc:a4:e9:34:2a:55:
35:b4:ba:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:10 2025 by rpki-client