Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43ccb4d4-c5aa-30b1-9dc3-afe8de2891cf.roa
File: 43ccb4d4-c5aa-30b1-9dc3-afe8de2891cf.roa (raw, json)
Hash identifier: K9REXA8fmfnEUM30m7t+rwU21UHRJJpCS5ph/VEWHVY=
Subject key identifier: 14:77:B0:8D:3F:26:12:E9:3D:2F:C9:6F:80:93:F6:0F:4E:B4:6D:47
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1ABAC903DEB21706267D00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43ccb4d4-c5aa-30b1-9dc3-afe8de2891cf.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 204.2.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ba:c9:03:de:b2:17:06:26:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=0f4c02fa-fd99-464e-8c5c-c066a49be18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:97:1d:44:47:7b:88:47:fd:89:2f:b1:7f:
40:28:a5:ef:4d:a4:ba:54:b8:3c:7c:f4:6a:37:15:
df:b1:18:61:51:4c:aa:ee:5c:78:b1:22:42:85:f9:
12:10:56:83:24:6c:17:3e:e8:7a:ff:be:63:d4:60:
b9:d0:f7:b3:8c:f8:cc:fb:16:d9:77:38:26:8b:f0:
b9:a4:89:7e:cf:64:de:0f:3b:75:6e:f8:f6:cc:a1:
1b:ed:fa:e8:6e:57:e0:b0:e4:9c:a7:69:ce:ab:bf:
78:c2:4f:db:c0:56:20:73:50:94:a5:2e:93:69:fa:
b5:08:fa:15:65:51:5f:70:cb:f2:73:b3:66:43:39:
4f:a4:54:ed:14:a2:9b:1f:e5:be:f6:a0:09:be:33:
50:0b:76:5d:29:e4:57:c5:f5:ea:99:24:c8:23:48:
a2:dd:29:a7:1d:11:81:09:00:c9:db:f3:65:84:e5:
f5:d6:24:7a:b7:87:25:28:82:84:29:48:df:e1:e3:
a2:ba:92:fc:6f:18:62:0c:84:41:9f:fe:39:a1:f6:
ec:30:e4:63:ff:98:31:cf:a7:68:19:42:af:27:f6:
b5:59:59:7b:9e:d8:f1:e1:09:93:6b:d9:fc:92:0d:
30:ad:e8:9d:3d:2c:34:09:61:5c:3c:f6:5e:fe:02:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:B0:8D:3F:26:12:E9:3D:2F:C9:6F:80:93:F6:0F:4E:B4:6D:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43ccb4d4-c5aa-30b1-9dc3-afe8de2891cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.2.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:2a:00:48:7f:19:2b:cc:aa:d9:00:25:8a:25:25:95:8e:08:
74:22:e3:9a:df:36:b5:80:d7:d1:0b:ae:52:7a:88:6d:19:a8:
2a:5b:16:b0:b4:7e:1f:d3:6f:59:a9:34:35:eb:78:22:bf:fd:
4d:34:7f:91:b0:df:ea:1f:dc:ba:e8:f6:65:be:61:76:ce:75:
52:f6:47:7c:7d:b8:49:30:31:86:06:50:b3:72:2a:dd:b6:88:
72:a3:06:77:c9:06:13:8b:ad:d1:0c:eb:6f:e7:66:14:10:2a:
22:ca:b2:7b:e2:97:3c:d0:9c:ab:b4:1b:36:b8:71:e5:50:f8:
66:46:52:ac:07:6d:3f:97:de:0d:45:18:75:09:f3:2a:d4:7a:
c4:29:7f:2b:76:a0:de:ef:47:66:01:e6:57:99:e7:58:86:35:
b5:4e:ae:72:b1:05:d1:25:a0:cc:0f:4a:05:bc:b8:49:3e:ea:
80:09:e7:ab:38:27:72:b7:9b:f1:c4:e4:c8:a4:cd:4f:8a:f0:
7a:b9:7f:c9:c9:ed:cf:60:06:e2:c1:ab:3a:50:63:81:f9:7a:
8f:43:d4:17:ac:88:72:a6:1d:57:a5:72:cf:67:e2:ec:6b:3b:
2e:94:89:7e:aa:3c:17:60:52:30:06:5c:57:d3:0f:d7:7b:a4:
4b:6b:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:29 2025 by rpki-client