Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/291fb324-c91a-35c1-ad9e-d756de6cf0d9.roa
File: 291fb324-c91a-35c1-ad9e-d756de6cf0d9.roa (raw, json)
Hash identifier: 9Bl0aIA3SNF4JR9RS4PQWiXgvtE5tZ65rlV2LJjIoPc=
Subject key identifier: 6F:17:0A:8D:CA:69:60:1A:4E:1A:72:1D:23:C6:CE:E9:77:EE:19:8B
Certificate issuer: /CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
Certificate serial: 010D0C9F43285848BFEBA35D2EE622EE2BB9AB80
Authority key identifier: 2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/291fb324-c91a-35c1-ad9e-d756de6cf0d9.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 29848
IP address blocks: 204.108.162.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a3:5d:2e:e6:22:ee:2b:b9:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=76af5230-baef-439a-b8cf-1886b88c9fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1b:2b:44:36:6d:7a:b5:52:46:ee:b6:97:f9:
7b:21:cd:a3:b8:94:dc:4f:75:09:0e:3a:49:8f:bd:
d9:ad:03:8f:90:27:71:19:82:19:24:96:0f:67:e0:
cc:11:e2:e0:52:75:bf:96:96:3e:19:b9:c9:70:15:
ab:06:58:f9:d0:17:41:f7:be:a4:c7:c0:ff:84:3c:
22:16:79:37:ee:95:55:e8:84:65:d8:c5:38:cf:b4:
d9:03:d5:d1:45:11:4d:aa:8a:8b:61:d6:b9:fa:d1:
ec:88:db:e6:7f:62:83:b6:a6:7e:1a:fe:6c:60:09:
b3:f4:58:17:43:39:da:f5:9f:31:0d:e5:3c:52:fd:
7d:5f:81:8d:d7:90:96:69:03:32:15:01:8a:d2:99:
ef:79:06:00:fc:26:bc:70:75:96:28:e9:9c:10:95:
4d:26:89:0f:a8:20:54:1c:9a:b9:f5:5a:ff:96:bc:
87:b7:d1:89:4f:c5:67:33:07:23:37:31:43:e4:dd:
23:e3:be:f8:41:22:06:c9:c2:95:29:80:24:07:ff:
40:26:d2:fd:d9:b9:c5:26:b8:96:17:0c:09:6f:8c:
3b:66:b3:31:9f:ae:25:75:40:39:ea:76:68:8e:7d:
53:0c:71:a4:5b:85:ad:c6:00:b0:b8:aa:80:b2:0a:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:17:0A:8D:CA:69:60:1A:4E:1A:72:1D:23:C6:CE:E9:77:EE:19:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/291fb324-c91a-35c1-ad9e-d756de6cf0d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl
X509v3 Authority Key Identifier:
keyid:2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.108.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:6d:f9:e8:3b:c4:4a:98:38:72:48:89:35:1d:a3:04:61:4b:
be:ee:e0:a4:e2:7d:36:06:cc:a9:3b:35:ac:78:cf:fa:47:61:
48:4b:bb:a7:b8:43:05:2f:c6:ec:4d:3d:99:17:7e:a5:12:47:
fe:20:66:4c:d9:5c:92:a0:8e:83:cb:bd:79:db:a7:4a:df:63:
5d:56:99:98:d3:aa:11:4c:9f:87:38:26:33:a5:94:26:1f:53:
eb:7b:49:51:86:e5:47:ec:95:8f:8f:9f:ee:47:93:96:03:d3:
1f:1b:e1:54:f2:9f:90:f2:a5:d0:bc:0d:80:70:c7:19:e6:f3:
f1:80:a0:e6:fd:4c:98:56:f4:ba:b7:a4:87:e1:63:da:2f:c0:
95:70:68:b6:fb:17:42:7c:bb:da:a1:a8:3b:ff:23:71:9b:cb:
84:f9:ac:42:89:a6:04:85:1a:f5:8e:f6:aa:0d:8c:7b:cb:bf:
eb:6d:0d:1f:97:cb:6e:fa:11:ce:71:b4:76:89:35:56:cc:6f:
64:95:39:c8:e9:d5:a3:24:18:91:9b:da:4c:82:d3:a2:59:fa:
7c:c4:9a:72:f7:33:ed:41:35:92:e0:1c:e0:72:9b:c2:c5:44:
d6:97:b7:d2:d2:5c:bb:2f:da:f1:3f:1c:8d:2f:dd:ad:4c:b7:
7e:91:d4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:38 2025 by rpki-client