Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5c1fea1f-8f5c-33d0-bc4a-3ead923a6b52.roa
File: 5c1fea1f-8f5c-33d0-bc4a-3ead923a6b52.roa (raw, json)
Hash identifier: SVfvkd1Rq8Q+2k2i94kiZYbwEu2Mk/xKssf9n+s05AI=
Subject key identifier: 7E:D4:DF:CD:1E:05:3D:9F:E0:A3:60:68:E9:E1:08:28:65:88:A8:46
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285848DF0D0FF1980F22706E2E0AC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5c1fea1f-8f5c-33d0-bc4a-3ead923a6b52.roa
Signing time: Thu 13 Feb 2025 17:38:28 +0000
ROA not before: Thu 13 Feb 2025 17:38:28 +0000
ROA not after: Wed 14 May 2025 16:38:28 +0000
asID: 834
IP address blocks: 217.20.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:df:0d:0f:f1:98:0f:22:70:6e:2e:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Feb 13 17:38:28 2025 GMT
Not After : May 14 16:38:28 2025 GMT
Subject: CN=d603395f-9b5b-48b7-8894-62a91e635c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:fd:7a:4e:2f:a2:32:c6:7c:60:a8:fe:f0:
51:6b:a5:d1:9a:d6:02:cd:2f:9c:c7:3d:13:cc:bc:
dc:88:0c:08:18:f0:1e:41:20:ee:2c:66:d1:99:ec:
b9:d0:bc:07:20:33:63:47:d7:b9:92:6c:56:ed:4f:
0a:d4:00:61:a6:42:8f:e4:5a:0f:92:a3:84:2c:9a:
5e:9a:2e:92:28:ad:91:ad:fb:f1:21:a3:9b:46:c7:
59:37:28:18:31:59:9a:c3:fd:ae:1c:04:71:a8:61:
6b:dd:68:e3:e8:b8:54:2f:7a:0c:fd:a6:dd:99:b3:
34:5e:50:b5:e9:53:55:6e:98:31:9a:19:46:f3:77:
26:22:d3:db:d4:7b:55:a8:5c:6a:33:9a:3f:a6:6a:
aa:c7:80:9d:56:95:a2:b5:de:3b:63:c6:a2:6b:56:
a8:ad:18:85:39:34:95:5c:e5:30:96:39:2c:c0:1b:
23:80:ad:c0:92:1a:30:e8:b3:1f:71:60:b9:2a:ed:
e7:f2:9b:98:3d:01:07:b6:b0:fa:63:37:11:13:7e:
72:0e:cb:dc:2b:a7:bc:34:ba:f8:72:9b:30:5d:77:
d4:7f:8b:db:e9:23:28:0f:6f:61:a5:02:60:65:b4:
3f:5e:4d:8a:90:cc:9d:57:d4:76:5a:b8:22:04:f9:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D4:DF:CD:1E:05:3D:9F:E0:A3:60:68:E9:E1:08:28:65:88:A8:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5c1fea1f-8f5c-33d0-bc4a-3ead923a6b52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
217.20.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:38:84:e9:f5:08:42:c9:4f:21:92:99:1f:b9:b4:d9:0f:8a:
7b:3d:c5:8d:a8:15:39:25:62:d5:b0:ce:43:c8:45:0f:5b:69:
e2:5a:5f:95:da:0f:cf:81:4d:bc:e4:65:71:7e:b0:fb:32:06:
d9:80:5d:c6:f6:b6:96:68:af:94:81:cb:d1:71:dc:a3:cf:79:
7d:1b:d3:63:80:6b:99:ae:90:1f:d1:ef:05:38:89:70:60:91:
a2:09:99:9f:c2:1e:d2:ee:47:64:ab:57:a1:4e:40:aa:0c:d4:
97:68:e0:c1:77:a9:69:52:e6:cb:b6:52:30:7b:21:a3:33:36:
5d:58:fc:c3:47:ed:c3:09:a5:c7:dd:ac:40:00:0d:93:25:34:
3d:65:a0:bf:4f:65:b4:33:6a:3e:b2:0a:f0:cf:b3:7d:7f:9a:
4e:d7:be:f2:90:02:c3:fe:01:3d:17:c6:59:82:27:39:f6:22:
58:ef:39:20:00:4d:77:b0:e5:b7:84:8f:2f:54:f9:f0:49:c8:
79:fb:55:f3:d9:fb:2a:82:ac:75:60:5b:3f:a8:72:59:7d:26:
fb:eb:2b:fe:42:f6:25:d1:d8:32:5e:52:f0:c2:53:aa:2f:43:
eb:14:51:8f:00:1e:02:bb:32:c4:4f:06:12:8c:d3:46:3b:2e:
a8:16:02:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:32 2025 by rpki-client