Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/03ac7d17-32a5-3921-9a8e-5e36bdb8aaae.roa
File: 03ac7d17-32a5-3921-9a8e-5e36bdb8aaae.roa (raw, json)
Hash identifier: 8H0+CXQ1wxd+5Rk4DW8i80jlGPZkkN4FCsK/GFY+ySY=
Subject key identifier: F8:38:87:4E:9D:3D:6D:E5:4E:72:23:DD:26:8B:8B:A7:8F:CC:54:F8
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F432858486D454881555DA904BA7E7400
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/03ac7d17-32a5-3921-9a8e-5e36bdb8aaae.roa
Signing time: Fri 03 Jan 2025 23:29:36 +0000
ROA not before: Fri 03 Jan 2025 23:29:36 +0000
ROA not after: Thu 03 Apr 2025 22:29:36 +0000
asID: 834
IP address blocks: 217.20.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:45:48:81:55:5d:a9:04:ba:7e:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jan 3 23:29:36 2025 GMT
Not After : Apr 3 22:29:36 2025 GMT
Subject: CN=ba36a65d-6dfd-4ae8-8626-2c8f6c436126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:b0:5e:9e:58:30:76:36:11:95:16:09:5c:
fe:41:2a:30:83:9b:9b:7b:ec:11:8b:bb:f8:ea:75:
67:01:1b:11:cd:ef:1e:53:f7:05:cc:dd:ed:a3:77:
c4:bd:af:88:15:1a:02:44:d6:7d:e2:81:58:62:a6:
08:45:ff:d7:7d:4e:a3:29:d8:12:b3:53:b3:ca:8b:
8f:75:c0:af:d9:ce:dd:9e:75:46:b6:b8:b3:21:cc:
55:c5:0e:c7:44:3e:74:2e:66:40:24:ac:76:74:6c:
27:f8:8d:f3:49:26:2e:56:be:ab:64:26:c5:b1:99:
d8:1e:98:7b:56:8e:d0:aa:8d:c3:7d:fb:24:cc:d4:
a7:3c:ca:98:82:96:21:22:91:2d:ab:72:6f:c2:90:
a4:65:d2:23:6a:d7:b7:63:9f:8a:ba:fa:23:cd:08:
86:6c:5a:67:17:29:8b:ea:45:2f:34:f0:89:10:14:
9a:31:20:41:63:0b:37:fd:8e:37:78:69:e3:34:4c:
31:8b:19:ff:c4:f6:63:1a:88:32:89:17:1a:d4:22:
ff:b8:c4:c1:4f:34:7f:85:ed:7c:75:7d:8f:f3:21:
8c:97:23:d9:eb:76:6e:aa:1a:09:08:04:1a:d0:ca:
b8:3f:f7:68:5b:c7:b6:2a:89:a2:43:10:09:33:c1:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:38:87:4E:9D:3D:6D:E5:4E:72:23:DD:26:8B:8B:A7:8F:CC:54:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/03ac7d17-32a5-3921-9a8e-5e36bdb8aaae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
217.20.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:21:4e:f5:e5:dd:58:90:30:cd:b6:ff:dc:e5:41:6c:a8:5e:
fd:3e:d6:96:f2:e5:11:2d:a8:2d:64:04:92:ea:ae:ef:78:3f:
f9:6f:94:ca:02:94:41:50:9b:f2:b1:98:67:fb:dd:3c:23:13:
a4:6e:c3:26:72:88:25:32:77:18:4c:9d:d9:44:82:5b:7a:60:
b0:1e:d4:23:37:5f:9d:ef:04:ae:ff:1e:dc:6f:4c:64:ea:43:
61:24:bf:5c:dd:e7:3f:ec:3b:f9:59:11:20:b9:f9:1d:a6:d8:
62:b5:46:6d:ea:a6:bc:c4:36:ab:98:dd:6b:52:db:76:02:d2:
62:b7:d2:e9:68:81:36:96:df:2d:be:50:51:ac:62:77:2d:e5:
94:be:67:b6:10:44:f3:2c:a6:8d:92:bd:f1:a1:f3:47:85:7a:
44:f8:41:fc:94:95:45:ae:72:63:06:f7:1d:84:92:79:46:53:
8b:71:76:83:89:ed:1d:43:e0:e6:ce:1a:8f:11:ef:98:c4:bf:
4d:a9:ae:bb:96:6d:de:2f:64:28:14:03:93:2b:b4:a9:3b:25:
da:4d:f4:30:e0:bf:3a:40:e7:07:ae:29:ed:1e:94:0d:e7:9a:
ed:f8:ce:c4:4b:da:17:ab:41:c8:dc:c5:4d:6e:2e:4b:4f:ba:
a8:a4:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:58:48 2025 by rpki-client