Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
File: a211ca82-981c-32d0-8241-ba4946736b50.roa (raw, json)
Hash identifier: ctGA0NQNAnlmx5RdeWbM8km9IxsCb40e0Mgz9QBe6gs=
Subject key identifier: 5A:4C:62:72:02:79:78:0F:DE:0E:E8:90:70:8B:76:EF:0D:FB:B4:7C
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F65BDE9AE143F58CE0728F80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 53345
IP address blocks: 205.252.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:de:9a:e1:43:f5:8c:e0:72:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=d910be72-a83a-4ba2-954a-03a726ec05a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:cc:d3:54:45:5a:e8:f3:23:4e:40:e6:1d:
43:48:c7:ed:e0:44:28:c6:e2:37:52:bd:0e:8f:ef:
1d:0c:56:5c:eb:91:73:65:fe:cc:ec:95:ca:7e:4e:
85:0b:bb:7d:bc:24:51:e2:21:e4:39:d0:b5:27:69:
fa:f6:c2:f9:eb:29:a0:01:12:94:d9:34:c6:1d:18:
31:64:0d:b5:d4:f2:3b:ca:3b:7d:89:af:41:08:67:
df:ab:b9:75:59:6b:7e:ef:b1:30:9b:0d:eb:6b:ce:
05:bb:03:bd:a3:b2:30:2a:46:f3:a3:30:06:c6:fb:
92:3e:5b:48:44:15:46:5e:75:3c:40:1e:52:aa:5c:
4e:7f:1e:c4:2f:ee:12:21:eb:59:31:4e:2c:38:36:
4e:9b:19:ee:ed:fc:ce:3b:f7:0b:72:5d:ea:74:ef:
1e:67:c3:86:c7:bf:ff:b0:24:ef:b1:40:23:66:a1:
a2:9c:e9:f1:6c:a7:cc:fd:71:95:c1:ef:27:2e:62:
bc:02:e2:81:84:cc:11:ed:05:ee:e0:04:5d:c7:88:
f3:4f:26:6b:18:99:46:20:a4:7c:90:4c:5f:0b:28:
e2:09:fd:16:b0:b6:37:51:cb:83:39:0a:07:2a:f0:
bb:98:93:19:19:47:0a:5e:25:a7:80:94:9b:47:8f:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4C:62:72:02:79:78:0F:DE:0E:E8:90:70:8B:76:EF:0D:FB:B4:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.252.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:1b:7b:b9:e9:72:02:80:c6:5d:96:a0:b7:cb:fe:50:d1:cf:
cc:bf:1d:0e:95:3a:0b:26:36:ed:f7:34:ac:c0:a4:52:bc:e3:
57:29:8f:a6:31:7e:cc:fd:12:49:1d:14:ef:07:25:b5:ad:58:
5f:cd:7f:6a:2e:c3:dc:11:f0:e9:c6:12:8b:5b:a6:b4:6d:fb:
26:44:61:26:6d:e0:6a:45:ed:8a:2b:17:f0:86:64:53:af:1e:
4c:52:8d:20:08:b1:60:a9:62:9b:ce:c3:c9:65:e1:74:4e:5d:
1a:f6:5b:fa:82:f7:2c:52:0c:10:a9:68:7a:2e:ba:0c:ec:6a:
b6:1c:70:33:12:12:97:b7:1b:17:e9:d1:63:b3:e1:0c:e0:6f:
63:66:b1:1b:b0:7f:95:4c:bd:41:ff:ef:d8:f2:1d:69:59:88:
ad:7a:92:a7:7b:f4:18:be:74:37:16:dc:58:ec:47:5d:0f:1f:
ce:9f:36:00:b7:50:5c:17:c5:25:d3:23:2c:19:30:83:5d:83:
d8:1c:52:50:4b:a4:fe:57:3a:2f:6c:8e:79:f9:62:45:39:c9:
8a:0e:2f:18:b0:ce:c6:6a:d0:9c:93:62:c2:9c:2b:45:10:1b:
b4:f1:23:7b:96:2c:9d:85:6f:47:93:fc:d5:39:f4:62:d9:04:
14:ed:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:33:46 2025 by rpki-client