Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/860e28cf-fb11-3efd-8cea-335ea7024d99.roa
File: 860e28cf-fb11-3efd-8cea-335ea7024d99.roa (raw, json)
Hash identifier: JFfufotX2TqKZBz7vk6BYRCVBvzfDEfKNNYJciZqlLg=
Subject key identifier: 2C:95:D5:99:9D:A8:CE:82:58:84:41:A6:21:58:8A:2F:0D:5B:F2:D1
Certificate issuer: /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial: 010D0C9F43285848F22C5F27074FFE7D2C439B70
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/860e28cf-fb11-3efd-8cea-335ea7024d99.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 1299
IP address blocks: 204.156.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2c:5f:27:07:4f:fe:7d:2c:43:9b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=381cfec9-c631-4fdc-b7ba-47697b14cd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:e6:f1:24:c6:d6:ea:21:53:f7:a9:ea:bb:
f5:ba:26:55:53:87:17:bf:b3:05:20:22:92:b7:29:
6a:fd:8a:ea:f7:17:f4:34:f7:1b:af:fb:c9:7f:61:
0f:9b:e4:40:3d:47:0c:bc:0b:e9:ac:33:87:05:37:
be:84:4a:26:8f:85:65:a7:e7:f0:8d:8b:66:9b:8f:
d3:72:63:18:35:19:dd:72:76:d2:8f:0b:67:71:11:
99:cf:f3:26:60:2f:62:fc:a0:13:fd:42:5e:e0:a3:
4f:87:99:8d:d1:69:3d:08:c9:5f:85:87:6c:d0:a7:
25:54:13:98:3c:6c:50:e4:c8:17:31:73:ab:5e:63:
a1:52:92:a8:bf:95:9a:98:2d:ca:58:d5:2d:20:b3:
ac:c1:90:7f:c7:2c:81:6e:a1:bb:0b:9a:d2:6b:6e:
7b:7c:29:a5:97:2a:01:80:ae:19:fa:56:3a:c4:21:
08:32:f5:2f:ef:ac:b2:8b:c0:28:c6:7c:99:92:2e:
65:28:9d:32:18:81:32:a2:af:3b:d8:38:33:5d:cc:
b6:3d:28:b3:48:82:f3:6c:3b:57:d4:ba:61:24:5e:
44:00:e6:ed:df:6c:6a:b0:d2:81:22:0d:66:83:8a:
86:23:4f:48:13:08:e9:64:21:0c:38:de:54:d5:32:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:D5:99:9D:A8:CE:82:58:84:41:A6:21:58:8A:2F:0D:5B:F2:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/860e28cf-fb11-3efd-8cea-335ea7024d99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
X509v3 Authority Key Identifier:
keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
sbgp-ipAddrBlock: critical
IPv4:
204.156.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:1b:00:8c:a2:23:db:a2:f8:03:93:fa:a2:6f:49:8e:cd:d4:
dc:30:67:ce:e4:01:fb:b8:d0:1c:50:cd:f5:2a:37:3f:8d:9f:
0f:29:a6:d9:7a:39:db:5d:0a:a3:11:4d:f9:59:fe:d4:bc:49:
cb:69:c8:60:3d:a9:41:8f:29:88:67:d5:7d:07:29:5e:40:2b:
d8:e1:fb:25:37:15:fd:1a:b2:e2:62:fa:8c:36:0a:99:c1:b8:
78:57:9a:a7:cc:7e:a4:56:49:cb:f5:fc:a7:80:a9:72:c9:79:
a7:e5:a4:bc:6c:a2:aa:8d:29:19:8a:8e:26:a2:c2:a5:f0:40:
e6:3d:e2:aa:e7:fc:31:d9:91:2f:e0:cf:a9:34:b2:f4:57:31:
9e:cb:44:c9:b4:ed:06:1c:85:23:02:f9:b0:e4:0f:9a:17:6b:
9b:3f:01:e4:c7:29:c0:35:3d:d4:a8:44:c3:83:10:0d:05:5f:
8e:8b:e5:b9:ed:c4:83:ad:f1:7e:a4:ef:19:13:15:ce:47:ad:
41:1e:b0:33:20:14:1d:d1:2e:28:c8:aa:4d:8c:c1:8a:d2:14:
be:1f:58:ca:95:69:d5:f1:9b:7b:55:d9:42:04:0f:d0:b5:2a:
fd:ef:97:2b:bb:75:52:36:d4:e7:9f:0c:aa:cb:4b:cb:f2:a1:
21:2d:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:17:44 2025 by rpki-client