Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa
File: 518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa (raw, json)
Hash identifier: yQG0SVHrlORoS/t2nAm1+b2Z5t6hxsI3cRJjTew9h2A=
Subject key identifier: 68:47:C6:82:DF:2C:44:12:84:EE:EF:5D:21:75:3F:07:B0:90:32:E5
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F43285848BE862E9995FA8F79E612A700
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 13445
IP address blocks: 144.196.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2e:99:95:fa:8f:79:e6:12:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=6fe33cd5-39bf-46f9-ba07-518e09eaaac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:f1:49:bb:8b:61:b4:d9:d1:ff:1d:37:d1:
a0:e6:11:82:fa:6f:91:b9:f1:bf:67:8b:cb:0e:76:
e5:b3:61:3c:80:c2:eb:18:5d:39:43:04:22:c7:61:
6a:74:6f:8f:3f:c4:82:b7:f9:6f:9d:33:59:35:a8:
2d:a6:0f:9e:2f:d7:73:44:99:89:78:66:e5:5f:47:
f8:bd:5a:a3:2a:fd:34:2e:89:19:ec:55:5b:2d:fa:
3a:d5:27:57:dd:6f:f4:f7:69:36:90:d3:6c:ae:ef:
6c:ef:4b:9a:44:01:94:b9:0e:bc:f2:94:cb:0b:ae:
70:42:5b:2f:e1:27:e9:a8:99:b6:be:9b:04:f1:02:
68:71:c4:9c:ee:35:2f:8e:aa:e4:68:d8:e1:f0:63:
7c:c6:fd:4d:c1:4c:62:71:cc:66:d2:5e:43:54:3f:
59:5b:28:8b:5f:00:d5:9b:c6:d6:8a:00:8d:9f:14:
0a:74:69:c0:8c:39:73:68:f4:3c:ff:90:85:28:fd:
ca:ac:a3:41:d2:39:cc:bf:7d:41:a6:70:88:42:63:
d9:19:dd:0f:b2:d0:10:fc:5d:04:8d:df:51:5c:da:
b8:9e:f3:06:34:18:6f:fd:1b:98:d1:75:69:cf:23:
ba:b6:a2:35:3a:ef:fd:69:d7:36:f4:02:20:34:3f:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:47:C6:82:DF:2C:44:12:84:EE:EF:5D:21:75:3F:07:B0:90:32:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/518d1b1b-6ce0-3adc-a0b4-1a528d820b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
144.196.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:80:a2:31:88:41:67:a8:b2:25:c3:b2:5d:9e:37:0b:31:71:
61:41:c8:ed:00:ec:ff:28:38:40:8d:fd:1e:fb:26:d2:37:2a:
b1:2b:3e:a0:ac:3e:f6:31:ed:12:75:62:c0:91:31:b4:4f:d0:
d7:b8:80:e0:2f:ad:65:fd:25:93:0e:f8:a2:d9:17:8f:e1:19:
a1:62:4b:95:2d:92:f7:9e:a4:e6:e9:74:8e:f8:4c:6e:13:e7:
08:8a:6e:e8:44:9f:f5:a7:c9:55:41:57:f1:e1:63:11:23:83:
c2:90:db:d9:e3:bf:c4:00:52:e1:1c:78:b3:e5:33:28:8b:e2:
2e:0e:3b:24:2c:ab:60:0f:07:48:49:25:04:d2:6a:d6:15:65:
8f:5f:42:5f:de:6b:21:f0:d9:f5:88:c1:05:4e:64:e1:f2:5e:
ff:a7:ee:8d:d3:a2:fc:bf:a4:82:33:d1:b4:6f:5f:d4:7b:36:
9b:0f:32:46:14:24:a9:a6:f8:9b:2a:25:31:8b:13:c2:98:22:
55:79:94:b5:4b:93:bd:01:1c:9f:3e:59:1c:50:b8:4f:07:6b:
c4:83:0d:2a:93:c7:d1:fd:a6:9b:36:06:a9:f8:19:69:84:92:
93:df:17:49:3e:b6:ad:99:dd:e3:6a:60:a8:92:70:a5:0d:16:
72:cc:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:45 2025 by rpki-client