Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa
File: 3482c56b-a68f-3216-b18d-c6952ef07146.roa (raw, json)
Hash identifier: iClsQwiVU6SUinSxKH9WW1JblR+xURJRJwD+56CUQiE=
Subject key identifier: 81:6C:3A:C6:BA:C2:95:D1:AC:32:9F:D8:EA:DE:64:AB:2B:A5:B1:E8
Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial: 010D0C9F4328584886B080FE843EA19302966C80
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 2650
IP address blocks: 204.68.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:80:fe:84:3e:a1:93:02:96:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=86b22bd0-3b52-4ae4-8e17-6307ed27f6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:7d:99:6b:44:c9:a7:a6:f2:21:cb:3f:9c:
77:9b:1b:57:3d:95:fd:7c:5c:70:06:6b:9c:6a:4f:
1a:84:01:77:ef:7a:e4:13:f6:55:17:9c:67:3c:d7:
8b:8a:34:4e:88:18:6b:ed:a8:43:50:6d:04:6a:02:
c1:63:25:d9:be:89:df:25:47:d8:8f:5b:0d:fd:b7:
33:2a:27:6c:3b:70:82:7c:a8:26:ee:a4:6e:ad:91:
18:07:35:83:9d:8e:ee:60:d3:02:5f:21:7e:64:f6:
62:36:e4:02:ad:5d:18:59:86:fc:65:ba:15:88:31:
ba:d5:62:67:80:1a:52:2b:c9:4a:8d:bf:a5:84:f1:
60:84:70:e4:f2:ae:9e:dc:3e:6b:ea:c0:2b:02:ef:
eb:0d:0c:23:4e:4d:2e:55:39:d2:6d:fe:ae:92:23:
c8:3c:8d:af:15:1b:4e:6f:6a:2b:6f:38:14:75:c2:
b2:28:fc:99:f8:5e:28:78:dc:34:79:8f:04:e5:de:
72:31:bd:00:05:5a:80:e0:a3:7f:22:7b:74:ad:71:
25:00:5e:06:d0:cb:e7:ee:8a:02:9b:14:08:93:62:
96:14:51:a8:54:ca:28:ba:c8:4c:65:97:ab:dc:9c:
4e:6a:01:e3:35:d6:9c:2c:57:b7:83:ac:b1:53:5f:
60:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6C:3A:C6:BA:C2:95:D1:AC:32:9F:D8:EA:DE:64:AB:2B:A5:B1:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
X509v3 Authority Key Identifier:
keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.68.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:04:86:58:71:b1:99:54:b6:c7:ac:82:89:e1:25:26:30:3d:
7a:9c:7f:2a:60:88:fa:61:4b:a9:65:64:50:9f:59:28:bd:05:
76:aa:b6:4a:ba:17:1c:1c:cc:7c:df:29:5d:c1:1c:23:cb:a1:
de:b0:ec:f1:d9:f6:ce:e7:8e:3d:5f:d9:7d:8f:b0:6d:fa:37:
20:af:9c:02:e0:49:b6:5e:9b:c2:34:1f:20:c4:22:2f:41:4f:
ae:50:a3:f9:bd:21:16:a5:42:16:f9:68:88:f6:c6:ba:f5:b4:
69:0c:11:35:78:a8:70:5b:14:12:92:ce:4a:4b:63:ce:ca:28:
60:34:5e:4e:a3:e1:0c:ef:3d:ba:14:9d:93:a0:5d:f6:24:38:
25:a0:81:44:2e:ad:2c:35:5e:79:dd:96:fd:e2:b5:1f:38:81:
f5:4d:cf:15:71:e1:71:2a:d0:3e:f9:35:7e:b2:90:cc:76:d1:
83:12:d0:f7:3a:77:a8:a4:12:7d:67:9a:60:b1:11:35:d5:12:
e1:ca:9e:d9:f5:f5:f5:ff:7b:98:2e:a1:28:81:c7:24:fd:e0:
1b:2d:71:9b:76:4e:62:70:41:66:72:30:1f:04:94:3e:e5:df:
2e:80:35:eb:0a:a7:a3:c9:4e:4c:72:0d:83:74:1b:71:aa:1d:
15:10:3d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:54 2025 by rpki-client