Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a1f6594-8e3c-3f03-a0a4-c8ef04abb0d6.roa
File: 5a1f6594-8e3c-3f03-a0a4-c8ef04abb0d6.roa (raw, json)
Hash identifier: 0rp9TO8qVQHjr/H6tsP/wjw+Uia/hbCBglRamuZ2z1w=
Subject key identifier: 64:65:04:E4:89:AD:53:FD:DF:98:10:E9:D4:7E:B0:11:1C:C7:58:AE
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1AB91D430532A6EDF28A20
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a1f6594-8e3c-3f03-a0a4-c8ef04abb0d6.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 204.2.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:b9:1d:43:05:32:a6:ed:f2:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=4e6d3be1-753a-46a3-9d4b-54d9b9387823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ae:a9:39:05:b8:b2:e0:fd:cb:4b:16:8d:be:
7a:8b:df:df:73:eb:70:39:08:37:51:d5:1b:0f:30:
a9:0b:e0:69:78:c3:1f:ce:74:b2:40:24:c4:f9:19:
ed:ce:d8:f1:4e:5e:df:cc:04:cf:d5:4c:e3:0f:e4:
3d:cd:cf:8f:f3:6a:95:e4:5c:ed:31:d1:4d:58:86:
4d:35:47:5a:c2:9c:0e:93:34:81:54:d1:93:71:23:
b2:05:d2:71:83:83:f9:44:15:d9:50:75:42:c1:0a:
d3:f4:6d:93:c0:f7:bc:d6:d1:33:1d:93:a1:f5:4d:
2f:2b:46:a7:51:5e:c3:46:3e:8f:6f:60:8d:81:fd:
1d:bf:d7:ec:d2:36:d9:b3:46:99:9a:50:14:bb:fe:
03:7b:2b:0a:bd:35:fd:06:27:11:39:f9:53:45:82:
fd:c9:3f:95:c2:18:7b:3e:cf:d9:40:32:06:0b:33:
b2:0e:8e:cc:af:bc:5b:f6:2e:f6:a6:10:0e:67:b8:
a4:a7:24:0b:58:cd:21:b8:05:f2:59:6b:d4:26:d5:
37:cf:ba:49:ed:4c:91:f2:72:cd:32:9a:cf:88:f3:
de:64:4d:a9:b5:b1:bf:29:44:a0:90:80:d1:36:fc:
05:94:a2:27:f3:a5:82:6e:ca:79:e2:58:95:55:83:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:04:E4:89:AD:53:FD:DF:98:10:E9:D4:7E:B0:11:1C:C7:58:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a1f6594-8e3c-3f03-a0a4-c8ef04abb0d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.2.136.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:a2:9c:c2:91:5e:26:ea:11:c1:59:b8:5f:0c:c6:9b:52:1f:
86:aa:c8:1d:e6:c1:d4:03:bc:38:f5:61:11:b5:84:7e:e0:52:
a1:f8:0a:47:3c:e8:c6:3e:74:02:71:90:f7:05:2a:60:a8:45:
3f:2a:1d:07:3b:e5:e8:88:0b:93:2f:ab:89:9b:97:4d:99:0f:
33:3d:9f:92:fc:aa:f9:df:d9:16:b2:4e:1d:13:b9:cb:75:94:
dc:34:80:d2:30:d0:05:18:0a:b7:a4:11:05:24:09:53:72:a3:
0b:ac:dc:17:09:36:65:b4:c0:73:47:79:33:dc:78:f2:77:3d:
a3:ea:8b:12:51:80:27:63:69:b0:25:55:19:26:0a:91:e1:b5:
ec:31:76:1a:2c:f2:94:7a:17:72:50:e4:85:74:b5:6c:fd:8f:
74:45:e9:03:60:ad:dc:b1:0e:e2:20:fa:b1:7f:64:81:be:f8:
88:ed:0a:31:a3:f2:29:66:28:cc:4a:ae:ab:ab:3c:6d:80:57:
8c:57:4b:58:b3:91:59:ef:08:e7:ea:3d:0e:10:cf:f2:33:f2:
d9:ae:4c:2b:07:72:57:41:96:47:e9:c7:b7:a3:f4:71:0a:8e:
b4:d9:8d:97:8b:a2:3a:59:23:ae:6f:f8:97:37:70:7b:65:eb:
f9:c5:fc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:37 2025 by rpki-client