Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/334f57c5-ecd6-35e1-ab57-cc863f1e3631.roa
File: 334f57c5-ecd6-35e1-ab57-cc863f1e3631.roa (raw, json)
Hash identifier: lj89MFohZooy2G3dWhl41iRGmzWm9mcbd985FuVrd2o=
Subject key identifier: 02:4F:9B:7B:86:14:3A:13:BA:DF:9B:BE:D6:5F:50:42:E5:51:10:5C
Certificate issuer: /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Certificate serial: 010D0C9F432858486C2B133EFB44ADECB52FBEF0
Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/334f57c5-ecd6-35e1-ab57-cc863f1e3631.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 30574
IP address blocks: 204.8.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:13:3e:fb:44:ad:ec:b5:2f:be:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=7de094fc-ea03-476c-af27-3428dba7f684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a0:53:59:0b:cf:1b:2d:5d:13:d2:47:03:b1:
d1:4e:9c:87:e8:d6:66:89:0e:c7:ae:74:9b:7b:63:
36:d2:f1:0b:8c:c4:25:41:a1:6c:3a:3a:da:45:93:
a4:74:f5:16:ab:2c:79:ab:99:ec:4d:1a:1e:44:3a:
55:7d:b4:fe:a0:67:76:19:07:a6:c3:7d:84:7b:4d:
d1:70:1a:05:87:7d:c0:1b:1c:1d:bf:d5:7d:b6:63:
e8:43:ba:00:db:54:1b:e5:fc:77:ed:4c:84:01:d5:
e7:5e:31:bf:c9:3d:bb:a7:51:fa:38:b7:f1:f1:20:
c8:02:fb:ab:17:88:67:3e:89:d4:b7:0d:22:30:63:
cf:e3:f9:c4:92:a9:e1:39:19:00:83:ad:bb:42:c4:
45:10:ad:45:9a:55:c0:3a:47:41:6c:6b:cd:24:e3:
4f:dd:0f:6a:df:76:c8:16:53:db:dc:f8:c3:7b:10:
a3:d3:b0:16:5c:43:4f:7a:a0:33:a7:c2:8d:53:3d:
ba:5a:e9:49:b6:8c:27:96:28:2a:49:2e:ff:77:0a:
da:6e:43:05:76:af:ca:5a:77:28:62:f9:b4:8d:75:
21:d7:d0:97:67:c7:a5:54:eb:86:42:14:db:a0:a3:
6d:79:2c:26:cb:0a:b4:97:4e:5d:41:56:4d:73:cc:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4F:9B:7B:86:14:3A:13:BA:DF:9B:BE:D6:5F:50:42:E5:51:10:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/334f57c5-ecd6-35e1-ab57-cc863f1e3631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl
X509v3 Authority Key Identifier:
keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:db:e8:7c:7e:8b:e8:04:a2:0e:bd:63:f4:00:ed:6e:0f:ba:
6a:b7:7e:d7:0c:3c:40:c5:d6:92:bc:11:0f:de:42:8c:4d:1e:
40:29:e9:40:04:94:fd:d7:29:47:0a:f1:df:9f:06:ce:3e:5f:
49:0f:df:37:13:f6:3e:ff:31:0a:94:98:fa:aa:6f:fe:7b:9d:
f8:6b:07:bf:77:f6:38:e3:f5:ec:9f:19:42:0d:cd:16:fb:d3:
38:bf:e9:d8:0a:d1:23:1e:28:df:ed:49:8f:cc:d0:da:54:28:
00:ad:ff:63:ba:63:0d:5e:8c:75:7d:b6:92:50:0c:cf:a4:99:
04:2d:a1:45:1d:36:e1:cc:bf:49:86:88:aa:a2:d7:fb:00:99:
e4:00:c6:78:02:74:80:79:38:38:f6:d0:3a:8f:e7:cf:d7:f6:
82:8f:15:34:5a:37:9c:78:af:98:b4:3c:7c:ba:64:10:d6:6f:
af:d1:d2:ad:99:e1:69:82:80:b9:36:80:81:fb:89:e5:d2:0f:
3d:72:ef:67:a0:32:1b:47:f3:6b:c0:63:a3:1a:42:4d:1d:6d:
b3:3f:28:5d:9f:b3:ae:80:33:04:4e:fd:ec:71:7d:e3:d9:6b:
9c:d5:63:93:d0:08:1b:b1:48:37:af:dd:f3:44:ff:06:8e:d9:
4a:51:b7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:57 2025 by rpki-client