Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/5834bc55-35d7-3fe9-977a-8f2a30096757.roa
File: 5834bc55-35d7-3fe9-977a-8f2a30096757.roa (raw, json)
Hash identifier: 3cfy6YFEMTbaNBWsTsubwA7ui6gEpLDxMc2Fonh2+pw=
Subject key identifier: 53:A6:D6:98:81:E1:82:65:2D:B9:D0:F1:E9:31:87:85:16:8A:2B:DF
Certificate issuer: /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial: 010D0C9F432858489340A975327FAA8765E432C0
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/5834bc55-35d7-3fe9-977a-8f2a30096757.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 35950
IP address blocks: 204.156.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a9:75:32:7f:aa:87:65:e4:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=ffc04d98-391d-46f3-a1fe-3be903028268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:a6:02:c9:01:17:e5:3a:49:03:ae:3d:37:
f0:b5:51:80:3e:f8:bd:8e:94:06:11:4b:cb:0a:90:
01:20:96:84:fa:a8:24:e4:3e:47:cc:54:42:73:e9:
9e:ff:89:a0:e1:4a:94:06:74:92:56:c0:95:4e:dd:
08:e1:01:a7:2f:95:30:32:2e:1c:8a:df:c4:d3:b2:
a6:f3:b0:14:d5:e9:3a:1f:e3:99:cf:3b:b8:96:45:
b4:30:9d:ea:73:dd:79:f7:e3:a0:d3:3e:0d:37:54:
80:20:33:59:ef:68:45:53:11:3c:9f:89:c3:5f:31:
32:7d:af:4d:49:08:f6:56:12:03:73:44:22:8f:0f:
09:8a:69:3c:7e:b0:83:ee:2a:68:52:b8:7a:90:57:
39:44:1b:b6:90:66:ad:17:9c:bd:9a:5e:0b:1d:d6:
28:99:e4:7e:9d:e1:ad:79:6b:d4:ea:d4:98:eb:e4:
97:99:ca:67:32:f1:12:1a:6d:a9:9c:45:56:81:3b:
bb:e6:27:02:4a:f9:64:b8:ad:d6:a5:0c:53:40:d9:
08:e7:8f:99:b8:99:bb:8d:84:e6:69:3c:fe:85:2b:
df:5e:17:08:d1:67:c3:27:f0:f7:01:e3:12:e8:bf:
07:55:5f:99:82:68:14:4f:d1:ad:e9:ae:f7:5c:3f:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A6:D6:98:81:E1:82:65:2D:B9:D0:F1:E9:31:87:85:16:8A:2B:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/5834bc55-35d7-3fe9-977a-8f2a30096757.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
X509v3 Authority Key Identifier:
keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
sbgp-ipAddrBlock: critical
IPv4:
204.156.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:1b:af:50:5b:fc:bb:49:8c:df:21:64:dc:6d:ac:85:22:4e:
ba:18:de:68:32:e2:d4:03:6d:91:27:ed:f5:9a:ed:09:78:50:
b2:42:7f:f1:00:ca:58:a2:58:12:d4:fa:6a:53:f0:e6:0b:a3:
7d:a7:d2:4e:17:a3:ad:98:ce:1b:ab:70:d3:87:80:64:98:77:
3d:5c:9c:09:ca:cb:f9:95:ad:ed:1c:07:6d:8f:64:de:eb:01:
74:16:ba:74:71:26:2d:dd:b5:9f:63:ae:91:c6:6f:02:40:30:
4a:61:af:7c:f5:98:5f:e1:7a:a9:1c:7b:2d:1e:ff:65:bb:87:
39:ea:ae:38:59:e8:d6:5a:98:76:82:4b:f7:71:7f:1b:18:e5:
29:b5:2f:5b:81:c3:93:de:02:68:5b:48:50:9d:be:bc:00:d8:
ed:8e:2b:e2:64:12:64:83:49:97:82:a9:0f:e6:64:39:fd:79:
9d:eb:1d:a7:4b:70:33:01:da:f9:74:0b:e6:4e:99:55:5e:56:
2c:24:02:e3:a0:72:ac:56:9a:d9:1c:15:ee:7e:bb:d1:8b:32:
49:1d:d7:90:18:08:0f:84:a1:92:c0:21:65:af:34:78:40:0b:
75:ea:4f:b5:0c:0b:ef:c7:bf:31:42:a1:3e:64:53:c9:12:84:
1c:ac:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:39 2025 by rpki-client