Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/881df3b0-d59c-3718-811f-893797c3ad58.roa
File: 881df3b0-d59c-3718-811f-893797c3ad58.roa (raw, json)
Hash identifier: H5X4gVi0KvLaQKImprnssR4bUc1ADMrF3u1vY2W955E=
Subject key identifier: E7:39:E1:D2:5E:8F:D9:28:52:A6:B1:6C:DF:9F:DF:39:77:BD:B7:F0
Certificate issuer: /CN=a79b85c1-9b95-4c95-b08d-220eb047aedf
Certificate serial: 010D0C9F4328584898D6044E14B2D5B4125E32C0
Authority key identifier: 94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/881df3b0-d59c-3718-811f-893797c3ad58.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 8075
IP address blocks: 216.220.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:04:4e:14:b2:d5:b4:12:5e:32:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79b85c1-9b95-4c95-b08d-220eb047aedf
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=40de236a-ccd6-4fa1-9d35-2dbb07950b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:10:1a:25:56:e3:73:29:2c:49:18:15:7f:f3:
ec:1a:22:be:b3:bb:1b:b7:0a:66:55:de:ba:5e:27:
6d:e9:31:21:10:2f:77:9f:92:39:b7:56:3b:b2:e5:
0d:a8:6f:60:92:b5:68:da:6b:ce:32:81:2e:a1:60:
41:0f:c9:0a:a4:29:6f:66:76:ff:b9:7f:85:ae:b0:
24:89:1c:1b:f9:63:57:2f:ba:58:b6:7c:39:0a:ff:
65:5c:ea:10:32:20:73:d5:81:73:33:9b:fc:22:54:
39:14:96:e8:cc:89:4f:8e:22:09:bf:e8:ab:ce:43:
8f:24:c3:bc:da:df:e8:33:a4:36:39:a7:2e:96:a1:
37:29:6a:a0:72:1a:3f:c3:cd:4e:50:d4:83:45:ed:
88:65:d2:14:c8:7b:f3:51:f7:06:cc:e3:98:08:69:
25:c2:f1:eb:9d:86:ea:ff:8a:70:f8:ae:f1:d2:23:
f0:8b:5c:4b:a1:11:ec:de:ff:75:14:2c:cc:c1:55:
53:e5:29:78:9a:94:4b:8b:37:ee:b0:15:f0:6a:3c:
d5:47:76:05:09:37:20:d7:25:85:d2:89:d5:96:09:
e6:5d:e9:1f:70:02:37:42:71:1c:13:c9:ea:ff:f8:
3b:ec:87:66:4b:02:bb:66:fa:25:92:5c:cc:fd:e2:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:39:E1:D2:5E:8F:D9:28:52:A6:B1:6C:DF:9F:DF:39:77:BD:B7:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/881df3b0-d59c-3718-811f-893797c3ad58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl
X509v3 Authority Key Identifier:
keyid:94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer
sbgp-ipAddrBlock: critical
IPv4:
216.220.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:52:62:65:d5:5d:b8:a1:10:09:4b:81:ec:53:51:54:35:ab:
e3:03:9c:4c:b0:b3:1c:53:0c:9d:8b:0b:7d:8e:04:c6:47:ee:
0f:74:f5:51:58:0f:ef:6f:0b:57:03:21:ac:80:e6:f6:b2:55:
73:1f:f1:7d:98:88:8b:f4:e3:7f:84:10:83:4d:a4:ab:17:fa:
ed:24:9c:ef:d5:81:1d:11:fd:fe:aa:b4:3e:a1:b6:15:01:28:
e8:56:c7:c6:82:a2:96:f3:b7:8d:f9:48:94:77:e8:84:52:55:
9a:e2:b1:c9:f4:4f:d0:6a:ee:64:c9:aa:3c:2f:8e:6c:c6:6f:
e8:d1:ee:e6:d2:a6:1c:d2:b0:e6:b2:11:fd:dc:ea:c4:bc:f1:
4a:39:31:c2:4e:e2:a9:6d:63:68:cf:4e:93:c9:ca:aa:cf:06:
98:86:22:cc:e7:3d:cd:68:a1:bc:62:d6:ca:e7:45:d7:68:11:
95:34:0d:16:b8:db:a1:3e:e2:21:e8:df:c5:66:e2:4a:4a:09:
8c:ad:a8:a2:12:e4:3e:ea:f9:d9:c8:a4:34:99:04:97:eb:d1:
2e:d1:3d:f6:1d:bc:d3:c1:39:dc:cd:13:c1:49:93:82:6d:55:
8f:59:02:28:50:d1:d5:70:72:5f:80:39:2a:b2:54:7d:f5:a5:
d4:1a:f9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:00 2025 by rpki-client