Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/d08320cc-9f99-3af4-a9a4-a33f46770e8a.roa
File: d08320cc-9f99-3af4-a9a4-a33f46770e8a.roa (raw, json)
Hash identifier: 5U3V8PssK6rxCtjFWgeddvTGthliqf3owZIpfNfJrXs=
Subject key identifier: 2C:4A:5C:38:DD:25:97:4E:8C:9F:10:2E:56:6A:7A:E0:B2:DC:11:EF
Certificate issuer: /CN=1307cbfa-a030-43a2-b7be-5e4c646687de
Certificate serial: 010D0C9F43285848FD569A5C98E29DB586C49580
Authority key identifier: F4:F9:71:54:94:96:C9:86:17:D9:50:0F:50:84:72:94:3B:29:58:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/d08320cc-9f99-3af4-a9a4-a33f46770e8a.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 205.235.120.0/24 maxlen: 24
205.235.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:9a:5c:98:e2:9d:b5:86:c4:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1307cbfa-a030-43a2-b7be-5e4c646687de
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=9da8ed5a-fd4a-45ab-94df-172a8ac22e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dc:ee:a2:c7:ee:86:2c:61:52:e1:43:4d:09:
b0:18:08:39:e1:10:66:4a:98:2e:40:12:32:22:73:
74:2a:f9:61:be:da:d2:e2:7d:a5:4f:0b:94:da:fd:
c8:f6:5b:b3:ea:c3:33:21:dc:21:11:7f:2f:15:b3:
14:18:6e:6c:ee:7a:df:b6:25:16:e3:22:66:cb:83:
b5:1d:a4:50:86:0e:d9:d0:e6:4f:e6:f4:05:d8:cb:
dd:b0:15:c7:1f:25:a9:96:f5:87:27:9d:35:1d:88:
d1:1a:a8:12:65:52:66:17:00:37:c1:ae:61:ac:aa:
52:aa:b6:fd:41:b8:61:22:90:ce:d2:cc:ab:f9:e0:
fc:33:e7:97:29:ba:49:f5:a5:06:d8:e4:b1:f9:66:
d9:ba:45:0d:10:1f:f7:65:85:8d:12:2e:c1:e0:8c:
b9:bd:f1:04:e5:55:83:fb:5b:0b:b1:0d:26:ed:00:
55:cd:2b:84:6e:20:1c:7d:18:4f:2e:9f:cc:b7:a4:
05:71:73:af:14:12:4f:fc:7c:73:9b:1a:a7:67:18:
a4:e2:85:e3:2c:f8:cb:4a:94:4a:7a:08:e9:15:38:
c7:7d:bd:6e:c7:ac:dd:d7:d9:df:df:dd:48:eb:ce:
7f:99:b6:52:f7:01:9e:47:4f:e3:7c:09:67:95:6a:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:5C:38:DD:25:97:4E:8C:9F:10:2E:56:6A:7A:E0:B2:DC:11:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/d08320cc-9f99-3af4-a9a4-a33f46770e8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de/1307cbfa-a030-43a2-b7be-5e4c646687de.crl
X509v3 Authority Key Identifier:
keyid:F4:F9:71:54:94:96:C9:86:17:D9:50:0F:50:84:72:94:3B:29:58:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1307cbfa-a030-43a2-b7be-5e4c646687de.cer
sbgp-ipAddrBlock: critical
IPv4:
205.235.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:27:7b:67:83:f5:b1:dc:12:0a:f2:ba:b2:7b:be:0d:ac:28:
03:09:bd:b9:cd:3a:f4:1e:8e:db:94:80:57:2c:d7:2d:40:e7:
4f:0a:79:66:3b:6f:92:aa:25:34:d4:e9:c9:ae:d8:70:97:d3:
91:b9:27:f5:41:31:00:74:fd:9c:ed:6a:95:c0:53:75:d8:34:
be:53:c1:47:e4:37:8c:72:84:e0:64:cd:13:c7:e2:a5:91:86:
7e:f5:01:c3:b2:21:fb:b2:ed:9c:51:c9:fc:fa:01:18:6b:e8:
9f:fc:1b:9c:65:9f:13:ba:84:3e:01:e2:43:a2:3f:a3:4f:a2:
8a:2a:04:bd:0b:d5:34:89:02:cf:b5:a2:0f:51:f3:95:7e:b1:
8f:2b:d2:61:38:69:00:b5:49:e8:7d:81:79:54:59:33:e9:ee:
4e:db:cc:85:63:ea:74:54:87:2b:ea:72:64:d8:54:77:50:92:
9e:ca:8e:ee:4d:15:95:62:5a:f9:64:08:58:22:5e:b4:10:4b:
e3:6d:cd:ef:aa:fc:7b:0a:21:1e:4f:24:34:05:fa:70:05:5d:
f3:a0:74:af:15:03:a0:04:18:44:f3:86:48:d6:dd:b1:a5:ed:
29:4b:ce:2f:af:8f:18:35:1c:d3:a7:82:60:08:59:cf:37:a0:
ad:8b:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:57 2025 by rpki-client