Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f6111116-42a1-3bde-90a4-05a2b42cd746.roa
File: f6111116-42a1-3bde-90a4-05a2b42cd746.roa (raw, json)
Hash identifier: K3AjKOMmfsjeKYUNEBP/eafbSV0+Onj4Ei3l1uH0+xA=
Subject key identifier: 16:AE:F6:AB:DE:B9:9A:10:8F:59:FF:C6:A8:18:2B:74:4E:13:D7:69
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F65BDE47F52B9E3E8BAA5C80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f6111116-42a1-3bde-90a4-05a2b42cd746.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 37146
IP address blocks: 205.177.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:de:47:f5:2b:9e:3e:8b:aa:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=88d28acd-dfb0-4b1c-9047-b7bd39e83d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:56:49:3f:ed:bf:e4:36:bb:39:39:52:8f:
a9:12:c8:02:43:ce:e6:a3:74:d1:48:a6:93:2a:90:
ca:d9:4f:01:3d:58:9f:6c:76:72:71:6d:5c:53:51:
e3:59:7c:9e:1c:62:a7:f6:6d:97:bc:ec:4e:19:66:
a0:99:7a:21:44:e5:4d:32:5b:6a:35:00:11:51:6f:
e8:5d:97:b4:04:4e:da:b6:07:b8:b1:bb:57:80:e6:
24:72:e9:c3:0f:07:ba:3f:2c:34:91:47:2f:56:d4:
79:8f:b0:9b:98:c9:3c:74:4e:1b:2a:77:de:15:db:
81:4f:45:fe:d1:b9:83:ab:83:9d:f7:34:26:a4:a6:
59:eb:6a:46:3e:50:24:49:1b:13:2d:88:8f:29:f2:
f0:a1:ad:8c:e8:a3:a0:20:1f:d7:63:cf:00:4d:13:
69:1a:ff:57:02:18:47:55:fa:46:57:6d:84:ad:54:
f9:49:fa:09:14:db:fd:08:00:6f:59:72:ef:ba:11:
1a:3e:5c:22:0f:ed:23:04:fe:89:19:f6:58:8a:f3:
74:2c:e7:b1:ad:53:2f:d7:9a:4e:25:63:f8:45:7b:
18:d1:ad:ac:b7:a1:46:1a:8b:70:0a:d4:b0:d6:e2:
39:91:9d:db:39:5d:0b:e1:71:de:6e:09:2a:4a:d7:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AE:F6:AB:DE:B9:9A:10:8F:59:FF:C6:A8:18:2B:74:4E:13:D7:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/f6111116-42a1-3bde-90a4-05a2b42cd746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.177.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:6c:2a:71:6d:14:25:f7:cc:09:d2:cd:05:99:74:61:09:0c:
13:96:47:fe:03:96:80:2a:71:a8:d4:20:90:7c:85:fa:c4:37:
7a:6f:35:1a:13:97:70:56:e9:30:a4:b9:39:01:f0:52:29:8c:
91:51:fb:37:49:bc:fa:fc:13:19:bf:1d:46:a8:e0:9f:a6:db:
80:74:2e:bd:f8:c8:a6:8c:2f:4c:26:a5:5f:e0:25:88:16:0e:
9f:b8:b8:76:91:b0:6f:4e:4e:1e:fa:50:40:44:a5:a3:44:54:
22:16:15:f2:5f:ae:63:31:bc:66:ec:cf:ed:41:c2:1b:ee:ea:
17:69:91:05:21:67:4a:f7:9b:4d:e6:be:c0:72:4a:85:76:ee:
90:ab:81:16:53:b2:39:6f:83:2a:1e:e2:91:e2:91:60:50:d3:
0a:d1:26:d9:9f:6c:48:9e:8a:16:44:17:b9:ea:f1:46:ed:3e:
6d:db:e4:12:da:10:67:1c:89:d5:7f:15:ed:db:34:37:90:13:
ec:28:61:30:e2:0e:ca:76:89:05:b2:af:7f:6d:db:6a:06:fd:
72:20:45:39:48:fc:75:2c:a9:65:fe:f3:24:0e:52:f9:fa:2d:
16:3a:a7:de:bb:66:50:4e:d7:cf:c4:ac:1b:c8:af:dc:55:ba:
b6:01:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:35:04 2025 by rpki-client