Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa
File: 1c21a477-f490-34ce-8019-0e5a15944ec6.roa (raw, json)
Hash identifier: jpjH5qSP0HJ+zVAWEfEJaj2Hiyi1AJ9ZCDNThrhEOy4=
Subject key identifier: 64:83:B2:88:51:F7:D1:32:45:55:F6:F0:74:27:CA:ED:66:73:6E:92
Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14
Certificate serial: 010D0C9F4328584913AC371EB44FBD9CE1639180
Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 396982
IP address blocks: 204.10.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:37:1e:b4:4f:bd:9c:e1:63:91:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=7747ff13-b75c-4e86-83ea-30e7acc7d86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:72:95:13:63:24:bb:74:76:5c:2b:80:13:
35:d6:59:c1:d5:99:5e:ca:d9:19:6c:ad:30:7d:f3:
d1:44:dc:04:b2:50:b7:15:1c:7f:7b:a4:1e:0b:56:
15:83:f2:ce:9a:35:ae:f8:bb:a8:13:a1:dd:87:01:
06:2b:38:fd:9c:e6:b0:e3:9a:6a:4c:c8:30:7b:c0:
8d:f8:78:58:b4:80:0b:e3:aa:ad:77:81:64:2f:59:
9d:d4:dd:e5:bf:1e:68:6c:85:fa:e5:9f:65:67:95:
dd:7e:f4:e2:67:c0:5c:7a:68:16:f8:27:ed:85:35:
f8:b1:d1:40:c9:8f:3b:ea:5f:f8:db:50:0f:99:93:
57:0a:00:b1:c9:a8:5e:83:a3:6c:a7:6c:95:40:23:
27:6b:b3:b2:13:62:c4:af:fc:d3:3a:d9:6b:c7:83:
09:01:39:96:97:21:6f:f8:cc:41:2d:a3:0b:97:76:
4a:cf:5f:d2:9f:90:b1:65:29:21:36:39:e7:32:31:
ff:dc:72:ee:b4:56:45:45:f4:b3:97:5d:a1:dd:08:
32:9a:f2:00:c1:9a:0c:67:fb:ac:fe:28:a0:ba:65:
13:54:23:ce:29:a7:14:f8:9a:d5:d7:ca:ef:ec:da:
9d:0c:39:d5:f1:3f:80:60:35:09:81:6b:bc:d5:61:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:83:B2:88:51:F7:D1:32:45:55:F6:F0:74:27:CA:ED:66:73:6E:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl
X509v3 Authority Key Identifier:
keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer
sbgp-ipAddrBlock: critical
IPv4:
204.10.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:81:60:0c:68:c1:be:86:50:74:a5:a2:4e:b4:ba:3a:4e:0d:
db:69:a6:4a:24:b2:87:5a:31:97:27:33:c8:b0:b0:a8:97:62:
0d:77:36:0d:5d:6a:25:f1:92:3d:eb:95:fe:bb:34:d4:07:61:
3f:61:99:a1:7d:f1:f3:e9:7e:e2:e5:40:bc:cb:69:d6:1c:f3:
10:20:39:5c:0a:c2:83:9c:16:a8:54:49:aa:8a:88:24:1e:3c:
28:e2:4c:67:5f:84:8d:9f:08:a0:5a:88:a9:30:ea:0f:bf:09:
26:72:f3:c3:cc:4b:e8:c6:c5:7c:5a:fc:86:6f:68:1f:86:25:
99:4c:c6:bd:ab:0d:b7:16:18:87:cb:56:7a:5f:56:ad:26:73:
d6:ee:86:53:32:9d:d0:fa:ff:40:64:29:e0:81:4e:f5:18:dd:
c0:02:6b:66:c1:34:0e:4a:90:50:e0:a1:cb:2e:ce:8c:a9:02:
ef:9a:73:8f:3f:40:87:a1:f1:0b:22:71:d0:36:c3:ed:57:e7:
61:95:80:60:9f:58:4c:01:dd:34:33:94:93:c2:27:58:16:56:
c9:f6:20:04:67:62:4b:52:2e:cb:a9:4f:c1:db:51:d2:20:d2:
9f:64:d4:6e:c1:78:8d:6b:2b:fc:fc:01:20:63:a0:47:0f:1e:
8e:b0:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:19 2025 by rpki-client