Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa
File: 3dd79d95-e88c-33a9-b588-25baeab78a4c.roa (raw, json)
Hash identifier: w7i3ZzSwqWhgf14voGc9w62TAoIZXFfIGkF+bXwYN64=
Subject key identifier: 2E:C4:4D:D8:99:C1:F3:91:C5:1D:0F:81:20:44:E7:58:5C:E2:81:47
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848FD56B4B9C63EB6597957B980
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 198148
IP address blocks: 205.252.8.0/22 maxlen: 24
205.252.40.0/22 maxlen: 24
205.252.92.0/22 maxlen: 24
205.252.216.0/21 maxlen: 24
205.252.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b4:b9:c6:3e:b6:59:79:57:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=aff2571d-ee92-4084-a9b7-41f406d835c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:89:65:90:ce:77:05:a7:c6:01:54:66:39:
5f:77:95:bc:5c:ce:54:c3:90:a6:f0:ab:b3:5b:ad:
b7:a0:26:48:6d:cc:31:5e:a4:cb:8b:1c:5c:59:2f:
08:0d:f8:1c:b2:4f:17:cf:a9:cc:cf:6d:06:68:ac:
27:e0:12:e0:d8:54:c1:58:b7:44:42:e6:9b:5a:15:
b9:10:14:45:3a:65:a6:c6:16:92:9c:bf:b8:1a:14:
45:cb:e2:cd:b0:95:57:9e:0e:3a:62:51:5f:12:6f:
d8:71:31:e4:14:75:a6:a1:e1:51:81:49:43:d0:5a:
53:c9:cd:6f:f2:1a:7d:25:8d:88:73:79:57:18:b3:
7a:e3:c5:8f:c6:d5:62:61:c4:a0:88:00:ed:f2:57:
63:58:56:2d:1e:76:8c:21:45:a7:21:e2:ae:f9:e4:
08:cd:44:2c:20:cf:45:60:98:47:b7:90:15:d4:79:
21:7b:36:8b:29:9c:16:63:ee:12:45:d7:60:3b:8f:
e7:3f:c3:1f:d5:eb:42:60:bf:6e:00:54:ac:20:df:
99:2f:db:e6:5c:02:3e:03:0c:4f:13:b9:78:4a:55:
3a:96:78:46:ea:35:81:aa:e4:0e:a8:0d:45:a7:73:
a0:aa:56:65:95:b5:40:bd:a1:d8:1b:d1:10:21:ed:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C4:4D:D8:99:C1:F3:91:C5:1D:0F:81:20:44:E7:58:5C:E2:81:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.252.8.0/22
205.252.40.0/22
205.252.92.0/22
205.252.216.0/21
205.252.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:66:8a:b6:9c:8d:db:69:40:72:07:31:94:58:9c:b4:49:1d:
7a:82:45:6d:91:43:69:ff:01:49:bb:c2:d0:7a:e6:d9:08:49:
da:ed:8b:06:6c:69:42:68:0a:9d:7e:a8:53:a6:27:ac:9f:51:
39:77:72:40:87:af:d2:30:9a:12:4c:4f:ae:21:b0:0d:60:00:
47:72:a3:37:82:ab:5d:d7:1e:8d:91:9c:f1:fb:7e:f3:b3:1c:
a6:4f:30:ac:58:25:27:20:a0:be:aa:b9:e2:32:5a:84:05:10:
b0:2b:47:14:97:6f:5e:44:99:26:4b:10:49:97:2e:2a:c9:af:
a6:04:25:28:06:13:a0:03:c7:18:ae:8b:6b:dd:4c:60:31:4a:
a3:15:66:a4:f9:ba:cd:f6:76:b4:80:27:a3:3a:3a:51:20:3f:
f0:8f:5b:7b:87:a8:20:76:54:8e:e8:70:74:58:e1:9b:2a:34:
ca:d5:b2:15:98:c6:bc:22:9b:9b:28:95:98:ac:4f:e3:b4:53:
77:ef:d0:e6:ba:a2:bf:04:b3:78:e9:0a:83:01:fc:9d:be:80:
ec:d6:25:c0:7f:27:8b:20:9f:fe:61:d0:13:97:25:8b:0f:cf:
b7:3f:ee:f3:5f:c3:b4:8d:41:96:f6:b8:95:a7:1c:0e:32:cc:
50:b7:51:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:15:44 2025 by rpki-client