Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20788088-a23e-345a-b68d-a28ca6bcb9c5.roa
File: 20788088-a23e-345a-b68d-a28ca6bcb9c5.roa (raw, json)
Hash identifier: W0kG746qaYF+dHCVxNFDqkt8YsqDNyxCOMpMHLVwmg0=
Subject key identifier: AD:8E:A8:64:C4:70:24:B3:35:9D:1C:B3:0C:65:2A:AA:F0:D1:96:09
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A9962ACCB7248B119B8CCB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20788088-a23e-345a-b68d-a28ca6bcb9c5.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 63949
IP address blocks: 172.235.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:2a:cc:b7:24:8b:11:9b:8c:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=01faa742-ca84-4569-8ac4-4ca615574f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:63:f1:ae:ac:12:ed:5f:47:f6:5a:8f:63:36:
47:35:93:b4:4b:68:50:8f:e1:7a:b5:b1:57:96:7f:
c2:88:ef:ed:ad:2a:5e:2a:c6:24:73:9f:71:7a:14:
ef:86:38:80:8f:81:d2:3f:cf:8d:97:66:99:03:9b:
89:76:7c:7b:1b:46:72:db:a3:5f:89:c7:e1:42:3e:
9a:67:58:3f:d4:89:d2:5e:a9:88:56:8d:6a:ef:05:
67:e0:10:21:b1:4f:9d:f2:71:41:96:46:8c:75:53:
9c:c9:4e:85:34:60:c1:f4:d8:25:1a:61:b9:28:45:
bf:62:f1:02:3a:99:a8:b5:a1:68:47:35:12:56:85:
68:d3:ef:35:95:84:cf:4c:18:30:1a:b4:5f:ff:5c:
83:45:4c:d2:9c:79:a5:ee:32:86:3e:23:c4:15:f6:
da:96:dc:d3:6c:79:3b:aa:b3:05:aa:2c:ad:8a:e9:
c6:f6:61:64:b2:69:1c:79:23:de:ef:f3:5e:82:fa:
12:d8:84:71:1a:de:f2:21:5a:26:67:51:7f:ef:e7:
59:a7:2d:98:55:55:65:3f:79:36:d4:d6:a3:5f:91:
8b:9d:fd:af:e5:a8:c9:f2:d1:36:10:1e:87:6c:49:
46:25:9c:ae:20:36:72:48:be:6b:54:eb:5e:2e:bc:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:A8:64:C4:70:24:B3:35:9D:1C:B3:0C:65:2A:AA:F0:D1:96:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20788088-a23e-345a-b68d-a28ca6bcb9c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:73:5d:26:bd:a0:e3:19:bd:54:a8:88:5b:14:15:62:5e:c7:
76:da:23:c1:ea:96:11:0f:0a:cb:7b:83:64:50:3a:9b:85:0a:
6e:b3:6c:f8:c8:6a:e9:1e:9a:fc:8d:7f:15:a2:49:67:1d:e2:
88:0a:9f:0a:1f:4c:3b:44:e2:ea:0f:17:cc:ca:28:4f:e6:64:
5b:31:e5:54:46:2f:89:4d:d2:0e:de:dc:c2:1f:57:74:6c:9c:
bb:55:b7:17:16:99:35:8d:e7:4f:5e:a6:56:33:e7:e3:c3:8d:
b0:9e:89:45:ca:18:94:91:31:db:f3:dc:2a:7a:fc:3f:bf:24:
92:aa:dc:5b:52:be:86:98:f1:2e:e2:4e:93:d4:48:48:0c:e1:
88:f8:2a:c8:32:be:0a:37:3c:9d:70:2c:46:09:b8:45:8a:89:
33:fa:8b:91:0a:91:fe:1d:8b:b5:d2:cb:9b:e2:ff:32:23:0f:
4d:49:c9:b4:81:cc:dd:f5:86:e8:94:53:77:71:0f:53:dc:f6:
3c:91:04:b4:9c:a7:39:62:ba:51:37:5a:d0:d0:3e:9a:17:8a:
ad:4f:55:30:b9:67:33:69:ac:33:61:3c:35:64:13:ea:08:3e:
0c:14:96:fb:3b:33:80:ad:ac:7d:b8:1b:7f:fd:04:76:a4:37:
02:e0:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:07 2025 by rpki-client