Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0cd71704-0017-3db9-a7eb-b865eaca38e4.roa
File: 0cd71704-0017-3db9-a7eb-b865eaca38e4.roa (raw, json)
Hash identifier: 29rpUk7t2W/P1Zg9jxz30/a3WFFVx1Q8Qst7kQnWphI=
Subject key identifier: 84:B0:10:19:49:0D:D7:4F:E9:75:D5:6F:CD:B9:B3:F0:C5:82:5C:7D
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F4328584902EC08B9790A166F4568A1A0
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0cd71704-0017-3db9-a7eb-b865eaca38e4.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 11260
IP address blocks: 100.42.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:08:b9:79:0a:16:6f:45:68:a1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=4c8a6455-b03b-4cfe-a255-868ff4a41d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:0b:11:bc:2d:ae:ef:0d:23:68:0e:22:68:
ba:af:41:5f:6e:ff:a5:18:ef:46:c2:12:60:aa:48:
bc:20:f2:34:cb:60:4b:6d:cc:1b:04:75:fb:e8:22:
bb:cf:9d:21:2f:4a:33:11:18:78:bf:d8:ad:24:3f:
a9:5f:6a:d1:62:6a:db:62:5e:ce:69:c8:06:22:48:
18:30:a6:41:1a:47:56:0d:7b:cb:5c:ad:b5:38:05:
a5:1c:5c:d8:e6:af:c0:4e:b3:ed:fa:21:05:59:05:
f1:c3:2d:de:75:f0:08:24:c2:bc:2a:5f:2d:f8:a6:
9d:df:a2:ea:21:e6:b7:b5:28:b9:2b:5f:1d:70:b6:
4c:0b:7a:23:b9:88:ab:d6:36:3e:de:2e:b7:26:d9:
db:36:97:d9:f9:db:08:9f:6e:5d:7b:f3:0e:6c:5c:
67:5a:bb:80:61:0b:60:15:91:a7:81:81:8d:2d:8a:
e0:08:81:6a:dc:a4:09:f7:31:dc:8f:9d:fd:88:78:
ff:ce:8f:81:5f:8a:5b:76:bc:0c:0a:ae:d0:31:1f:
3f:da:f0:df:46:cf:c9:54:eb:62:da:43:61:b0:26:
6c:e5:99:a6:ed:94:f2:bb:cb:9d:72:ac:cf:81:11:
37:4f:cb:2d:c6:2a:2c:82:88:86:4e:f7:f4:32:ae:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B0:10:19:49:0D:D7:4F:E9:75:D5:6F:CD:B9:B3:F0:C5:82:5C:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0cd71704-0017-3db9-a7eb-b865eaca38e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
100.42.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:49:95:0c:74:eb:f0:37:a9:a7:dd:35:ac:03:0d:6b:0c:c1:
25:b4:54:93:7b:c6:46:42:ab:8e:f2:c2:41:09:bc:3e:8e:08:
24:a8:8a:a2:63:62:d2:98:44:f1:53:7a:c1:e3:24:ac:27:05:
64:bf:f4:0d:9b:8d:48:df:c3:32:cd:bd:3a:a6:14:38:4d:ea:
13:81:be:86:32:52:b1:cd:b1:6d:df:48:e6:5f:32:b0:3e:cb:
89:e5:28:eb:ee:24:86:ae:95:ad:f1:51:86:07:bd:86:63:dc:
57:93:9c:a1:6f:4e:0f:c8:a3:c1:9c:3d:01:99:26:ad:71:bc:
25:52:bc:28:31:f2:0c:4f:23:04:51:44:7e:62:6c:2b:43:fb:
c5:d1:34:4d:49:14:04:7e:ec:da:fa:17:d5:4e:17:eb:ba:54:
09:6b:0f:f1:a0:2f:eb:a9:e8:f4:7b:5e:45:48:f4:43:17:c1:
f5:25:1e:f7:8d:86:47:38:5a:eb:f8:38:ae:db:36:d5:0d:29:
fe:fb:28:35:a5:e4:77:98:e4:10:7c:8c:6a:01:a1:25:3d:7f:
ed:c7:0b:09:37:96:38:3d:82:76:e6:94:60:4a:fb:be:85:b4:
54:73:14:87:b7:6e:88:63:a7:ea:15:1a:1c:e3:b7:2d:3f:33:
eb:c5:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:46 2025 by rpki-client