Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa
File: fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa (raw, json)
Hash identifier: z2JTxlH1kTMnQpICAdBUlKg9NWN5bhdhuDpqPpYDVVk=
Subject key identifier: 11:02:9C:E6:27:48:04:60:C2:55:08:EF:86:06:56:84:3E:8C:F8:20
Certificate issuer: /CN=f4ef9ae2-f027-4028-a705-db1e3463a382
Certificate serial: 010D0C9F432858494CC9433CA57F11554CBBADE0
Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 40339
IP address blocks: 202.83.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:43:3c:a5:7f:11:55:4c:bb:ad:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=87ebae0b-1e57-43e9-b593-470772008fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4b:24:85:47:76:43:27:dd:19:06:25:1c:e7:
2e:d9:af:d4:45:43:67:61:14:d9:f8:db:65:18:6d:
94:b3:50:da:ae:39:47:ca:83:57:24:90:dc:c0:31:
33:e2:a5:40:06:71:88:75:c8:77:d1:2e:f0:12:16:
5c:4d:6a:ae:4b:78:1d:10:2f:64:67:0d:df:98:bc:
fc:fa:72:2a:02:7e:e9:6a:9c:dd:e2:7c:f5:76:3c:
fb:98:2b:21:b5:e0:05:09:ef:b1:3c:9f:76:0f:9f:
ca:44:38:1f:16:db:7a:35:c9:e4:5e:58:58:9e:a7:
c1:09:22:26:43:84:e3:a3:4c:9f:5d:8c:6a:79:71:
8e:d2:84:3a:94:1f:f4:81:fc:08:25:48:5f:a2:a7:
7c:6b:27:c8:d9:5d:08:c7:a6:83:f1:3a:39:35:03:
5b:dd:88:1d:9f:55:8e:ef:6b:78:a8:e5:8d:b4:19:
eb:9f:2e:b3:7c:97:26:6a:85:14:01:c2:31:6e:30:
ec:35:72:87:b0:6e:ee:3c:8f:2b:07:ac:f3:9f:c6:
e2:20:b8:ca:07:67:f8:b2:04:55:91:45:ff:ea:9b:
b4:8a:4d:dc:43:71:97:54:5d:3f:d6:43:af:62:2c:
f9:26:c0:6a:8c:14:89:0b:00:7b:cd:fd:cb:40:80:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:9C:E6:27:48:04:60:C2:55:08:EF:86:06:56:84:3E:8C:F8:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl
X509v3 Authority Key Identifier:
keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
sbgp-ipAddrBlock: critical
IPv4:
202.83.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:72:aa:a6:75:a7:8e:1f:1d:b7:8c:33:fa:d6:19:24:1f:e6:
14:a6:13:29:45:45:e3:78:96:cd:1d:58:83:66:15:1f:d0:f3:
78:6e:20:46:ad:c7:fb:88:a6:f8:01:c0:c2:4b:12:da:dc:d6:
5b:65:14:9e:d3:b3:20:e7:00:f7:29:49:c3:52:07:68:0a:6b:
b6:da:8f:9b:7b:08:12:8b:34:06:30:b2:97:33:44:ef:b9:15:
c9:28:78:a1:f5:53:d0:16:47:39:26:77:41:97:75:42:4c:69:
55:77:d4:76:f6:d7:13:4a:f2:15:81:17:69:c4:d6:cd:4f:df:
5d:25:ce:aa:8b:91:b4:37:f5:7f:52:93:e0:31:cb:a5:f3:6d:
77:0c:d4:32:a4:4e:33:ea:4e:57:37:6a:c8:01:8b:25:d3:9e:
7f:1d:ad:b6:e9:ff:a6:85:7f:96:0c:c3:64:d3:56:a0:f9:2e:
99:f2:d8:1d:33:fb:c5:b7:bd:1d:a3:f1:e3:96:5b:16:aa:f5:
08:c3:47:09:0f:06:3c:4e:e9:64:3b:04:7e:df:5d:22:10:05:
ac:67:d1:65:8c:82:6e:50:93:c1:50:e2:48:b8:48:74:a0:a3:
59:41:15:e6:b8:ea:af:cc:57:b5:9b:50:47:aa:14:f1:2e:49:
5c:41:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:23 2025 by rpki-client