Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa
File: aaf1c443-fe8e-397a-9abb-97486c685ca2.roa (raw, json)
Hash identifier: 4zCdQqGj6ASyjs2ug3p7V4jswPNXwDYxc5zW8ar/ypw=
Subject key identifier: 05:0D:FF:7A:E5:AB:49:18:51:97:E8:05:E0:D0:A7:D6:CE:83:54:F2
Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial: 010D0C9F432858494F2585BEB54BB2BD9E18B080
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa
Signing time: Tue 25 Mar 2025 21:18:17 +0000
ROA not before: Tue 25 Mar 2025 21:18:17 +0000
ROA not after: Mon 23 Jun 2025 21:18:17 +0000
asID: 21947
IP address blocks: 204.11.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:25:85:be:b5:4b:b2:bd:9e:18:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Validity
Not Before: Mar 25 21:18:17 2025 GMT
Not After : Jun 23 21:18:17 2025 GMT
Subject: CN=c34b1fdd-e1bf-46f4-8e32-0ed7dbc8809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5e:6e:13:b2:d1:4a:92:15:5b:bc:f6:f2:72:
fe:14:ab:2f:ce:44:36:ce:60:6c:8d:bc:04:15:65:
8a:0d:17:d9:17:31:94:5e:89:1b:19:17:23:ea:ef:
6d:d1:a3:ca:8e:9c:3f:cd:be:19:a8:13:be:48:24:
61:72:13:46:6a:5f:81:1a:0e:4c:ba:ae:59:20:b4:
ba:3a:37:4c:59:dc:e2:b7:d0:fc:4f:0b:45:66:9d:
ce:24:f1:70:a7:09:b0:e9:e7:82:9a:34:af:24:5a:
44:0e:2f:60:90:56:ae:e2:9b:62:d3:e3:d6:a0:8d:
ee:2a:87:d4:4c:b9:60:3e:71:35:99:20:5d:db:c6:
30:73:a8:71:87:84:90:f2:76:8b:9a:9e:d9:73:b5:
5e:d4:ba:ae:fc:07:48:b9:62:ed:04:e9:c1:ee:74:
fd:bd:69:18:13:22:c3:66:71:87:97:5b:d4:03:59:
e7:5d:20:73:b6:9f:76:81:6b:c2:fd:2d:9c:00:78:
87:30:a4:1a:6d:3c:11:4b:85:eb:60:d5:c7:7f:c0:
b8:b4:6c:10:fd:48:4c:3a:83:a5:61:06:f3:52:50:
62:c7:5e:a8:9b:39:c5:4a:13:c4:a5:e8:ab:5a:95:
2f:94:44:17:8b:ed:b2:e0:db:f0:67:70:99:30:25:
99:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:FF:7A:E5:AB:49:18:51:97:E8:05:E0:D0:A7:D6:CE:83:54:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
X509v3 Authority Key Identifier:
keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
sbgp-ipAddrBlock: critical
IPv4:
204.11.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:46:76:bd:e9:1e:62:58:39:8d:69:c0:47:db:9e:0d:1a:64:
2b:b3:44:12:e6:72:ea:d2:b9:a0:e5:e6:a8:de:3e:ec:d2:c7:
92:b5:e0:6e:a5:40:17:5e:94:5d:a8:57:93:76:b8:fc:95:a6:
c9:ce:ae:c9:5b:7a:67:6a:6e:95:56:ea:93:aa:79:9d:f5:3c:
70:37:11:8c:45:ad:96:83:e7:f6:1a:7b:59:f5:34:a6:28:1b:
09:d0:a4:12:07:8f:37:a4:6b:a9:09:88:88:86:b4:e9:c4:1d:
ac:04:b1:c9:fb:20:a0:7c:b5:5e:29:c9:f5:30:ab:b0:b9:e7:
18:70:e6:e9:63:34:b2:43:39:21:66:2d:e8:27:eb:b3:eb:62:
c3:89:24:53:33:6a:0f:89:b3:e7:6c:e6:6a:da:8e:f1:71:5e:
db:6d:94:e8:e4:39:a6:51:cf:5b:6f:a3:9b:f9:c8:21:0a:38:
55:d4:69:82:2d:23:a9:e0:74:9b:a1:38:36:70:c4:a4:ac:4c:
a3:94:1e:93:4e:3b:e4:a3:e3:82:b1:79:f5:a6:1e:5d:0e:ce:
65:6c:fa:83:54:f4:8a:18:ef:5b:45:9e:aa:60:64:e1:f4:6a:
54:a0:09:9e:2f:0c:bb:da:9c:a5:8c:7b:6e:82:62:e7:bd:d4:
9c:13:8a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:10 2025 by rpki-client