Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/d7567321-e4c6-3ef1-bc68-b7342c65de83.roa
File: d7567321-e4c6-3ef1-bc68-b7342c65de83.roa (raw, json)
Hash identifier: +cPo3ySBSz0SyQxVkEfYsPEYFGysXX5v1I2D9Kd0vPo=
Subject key identifier: 59:CF:D4:B1:51:02:92:EC:27:E6:5D:DD:99:6B:60:FB:BC:38:29:BB
Certificate issuer: /CN=ef573c37-3920-4b85-b5ca-50707eefe4b3
Certificate serial: 010D0C9F43285848A400C1A927FE7001DE8FB660
Authority key identifier: AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/d7567321-e4c6-3ef1-bc68-b7342c65de83.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 30039
IP address blocks: 204.9.32.0/24 maxlen: 24
204.9.33.0/24 maxlen: 24
204.9.34.0/24 maxlen: 24
204.9.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c1:a9:27:fe:70:01:de:8f:b6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef573c37-3920-4b85-b5ca-50707eefe4b3
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=ef8f9947-9bbd-4f9d-80cd-e9c57aa439cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:2f:e8:18:2c:e1:6b:c6:b7:e0:6a:6d:c1:
49:75:53:da:ad:1c:2a:7b:e9:f5:51:a5:9f:dd:f7:
cd:04:b0:64:86:88:85:5c:29:d7:b2:28:06:c5:98:
5d:43:74:4b:82:15:8b:0f:5e:32:75:37:4f:8b:cf:
11:ef:ce:14:c5:d2:09:7c:f2:f8:5f:98:e9:fc:3f:
c9:9a:41:03:c8:79:f4:88:78:67:b3:58:1e:76:82:
cc:28:63:18:98:01:95:0b:1f:e4:14:9e:90:4f:5a:
6b:83:ea:78:0d:d5:ac:41:08:20:96:05:73:42:76:
cf:b3:c7:1f:3e:f2:bd:a6:c3:0d:91:13:1e:26:a9:
a2:f6:be:04:d8:2e:6f:b5:f9:72:a2:8c:2d:b3:db:
d3:c6:de:ef:46:5d:18:1b:78:74:35:a2:20:5b:9f:
51:23:9f:d1:69:85:5d:50:31:b4:d5:b7:a6:03:28:
a0:8b:bc:d5:0d:ba:54:bb:09:62:ae:f9:78:92:e2:
d8:a3:10:2a:73:14:35:64:73:9a:7d:5b:82:15:53:
2e:4b:42:1b:bc:d4:b9:97:d9:51:2b:3c:33:c3:dd:
ff:0f:21:c4:dc:32:7d:1a:1a:be:98:b8:e2:25:f6:
0b:ae:bd:54:99:e0:6f:a3:fa:e9:9e:b8:f9:4c:73:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:D4:B1:51:02:92:EC:27:E6:5D:DD:99:6B:60:FB:BC:38:29:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/d7567321-e4c6-3ef1-bc68-b7342c65de83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl
X509v3 Authority Key Identifier:
keyid:AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.9.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:89:33:b6:2e:8f:0b:46:6a:8e:5a:5a:0c:00:e9:a0:09:b4:
c4:ef:7b:0c:08:f1:f2:4b:e1:26:17:5a:c0:ba:e2:e3:ee:5e:
95:7c:84:4d:97:96:b6:ea:6e:d4:59:a4:06:db:40:44:ec:5e:
ba:72:46:c1:cf:ab:9a:af:d8:86:61:17:04:ab:7e:16:0f:1e:
70:b1:18:c8:bc:45:39:e3:55:a9:9e:5b:3d:be:73:f8:ac:e2:
92:04:95:9d:b3:20:0a:63:32:9c:de:31:b0:e3:f9:cb:7a:00:
62:67:92:ea:f2:2a:0e:79:87:2e:77:61:82:1b:d9:e4:7e:2d:
30:8b:ee:da:25:68:d0:af:4c:e6:6e:95:40:e2:25:a3:e8:71:
7b:c4:36:62:5e:e7:7c:e4:10:4a:80:13:b4:0b:bd:84:79:e4:
8b:72:61:d2:25:97:86:ad:5d:98:f9:8a:2a:0b:8b:6c:16:07:
ed:3c:4d:9c:bb:df:c6:95:fb:c1:61:4f:b8:f5:a2:82:e4:ef:
c4:c4:50:c0:fa:ce:ca:7e:69:66:bb:46:89:a5:84:95:24:ed:
f4:90:27:3c:f1:69:9e:16:b5:81:77:7e:fd:ed:7d:1f:8f:f2:
c1:e3:6c:2d:7a:6e:7e:02:4e:01:55:9b:80:f9:0f:30:0b:46:
f4:f4:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:52 2025 by rpki-client