Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/5df88610-8c98-30ff-85c8-e3bf83ed5241.roa
File: 5df88610-8c98-30ff-85c8-e3bf83ed5241.roa (raw, json)
Hash identifier: k1v5sSbPTJQa+oBQBQ0dXkwvpoW/dMOnIiowjecP+fI=
Subject key identifier: 80:96:2E:FA:01:AB:F9:0C:51:0D:35:90:FA:E3:23:96:6B:F8:3D:06
Certificate issuer: /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Certificate serial: 010D0C9F43285848BFEBA583F1A87CA966F39780
Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/5df88610-8c98-30ff-85c8-e3bf83ed5241.roa
Signing time: Sun 02 Feb 2025 14:00:53 +0000
ROA not before: Sun 02 Feb 2025 14:00:53 +0000
ROA not after: Sat 03 May 2025 13:00:53 +0000
asID: 399341
IP address blocks: 205.207.186.0/24 maxlen: 24
2602:fa4d::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bf:eb:a5:83:f1:a8:7c:a9:66:f3:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441
Validity
Not Before: Feb 2 14:00:53 2025 GMT
Not After : May 3 13:00:53 2025 GMT
Subject: CN=7fef53c5-e3a5-4ae9-8b52-b406511e87c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:64:55:8b:4f:4c:72:70:2b:75:7e:7a:dd:
8a:2e:7b:0b:41:7f:2c:f7:76:c4:13:e4:21:01:f2:
b3:38:42:70:0e:5d:7b:06:cb:2c:02:73:ae:79:97:
d3:1a:5b:28:11:a5:c6:80:61:d8:fb:f9:cb:ac:b2:
55:a7:0e:31:a0:5a:a1:21:b0:40:6c:55:53:10:21:
2d:8d:f5:3a:18:b2:cd:1c:72:fa:5a:d8:86:58:50:
0a:a0:6a:e7:b0:ee:85:f5:0c:e2:99:63:2d:ae:7b:
ba:7c:bf:79:96:7d:65:a3:30:f3:8f:f9:6b:6e:52:
98:1c:4f:b1:38:a6:86:85:b3:e2:fb:ad:b9:63:75:
69:49:e0:eb:25:1e:b7:83:2d:1e:9d:23:f7:ae:b3:
c9:0a:ec:35:a0:0c:0e:b9:31:64:01:30:9f:06:b7:
d2:09:23:19:ec:34:f0:96:ee:1a:46:03:31:fe:dd:
3f:d8:bc:17:a1:32:9a:c0:0c:1e:b1:8f:69:ef:e9:
44:d7:40:f3:85:97:f5:60:b5:bb:23:5f:ab:bb:bb:
6c:24:7a:b6:56:f1:08:5f:4e:6a:da:c0:1f:57:5b:
43:5c:52:9d:e3:75:b3:f1:e9:a0:73:98:12:22:37:
86:00:ce:1c:81:5a:ec:2c:1e:09:4f:63:ae:f4:c8:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:2E:FA:01:AB:F9:0C:51:0D:35:90:FA:E3:23:96:6B:F8:3D:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/5df88610-8c98-30ff-85c8-e3bf83ed5241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl
X509v3 Authority Key Identifier:
keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer
sbgp-ipAddrBlock: critical
IPv4:
205.207.186.0/24
IPv6:
2602:fa4d::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:85:3c:b6:ff:65:ac:94:07:5c:d4:38:7b:3b:06:d5:0b:3c:
ff:f2:13:50:4d:06:bf:db:08:af:dc:dc:35:fb:e0:18:c9:ff:
5d:04:0e:f6:70:2d:df:b5:b3:2e:5e:1e:43:e1:c6:5a:1e:35:
bc:3a:9e:a1:26:f7:d7:ee:a9:42:c4:33:b1:2a:6b:01:3f:d5:
c4:9b:e4:e2:2f:77:75:6f:bd:aa:e2:ed:08:70:09:e2:ed:d2:
e0:6e:ec:30:ac:c9:47:05:d4:f3:4e:ba:e5:ad:e2:ca:92:aa:
c2:e3:c9:f8:bc:bc:36:c4:c5:83:b4:4f:f2:53:ff:2b:ee:80:
b9:0e:42:05:54:6c:f6:4e:23:b9:9c:e5:70:72:40:ec:38:91:
01:9b:73:04:55:1f:fe:56:fa:96:48:b9:42:13:8e:13:9f:57:
88:92:f3:d9:fe:75:5b:f0:1f:5d:68:e9:e3:ef:3d:a8:c7:fc:
0f:f7:e4:ef:58:42:e6:da:c0:10:fa:f3:aa:4b:9e:ba:9c:da:
de:42:59:5a:87:f8:4f:b2:fd:01:87:20:3d:87:43:25:4a:c6:
ed:87:ee:53:42:53:6e:60:ed:8d:61:1d:bc:88:80:9b:4e:ed:
0e:6b:86:40:8e:a9:e2:f5:58:19:6d:62:89:fb:9a:22:d8:4f:
e6:be:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:20:43 2025 by rpki-client