Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa
File: f45bc517-864a-32c1-b059-db26a9dffa20.roa (raw, json)
Hash identifier: cK+YNnHar0TyM9j8wpdRceCC/ATrEmY8Kh0xdEHaTho=
Subject key identifier: AF:F2:C5:C0:14:47:D4:71:8B:2B:F0:7C:A9:72:8F:6C:63:B0:72:55
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848159FF6E9DF02D98A98F3C740
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 3938
IP address blocks: 204.141.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f6:e9:df:02:d9:8a:98:f3:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=84a3fb28-0034-4273-8c39-4de0e4c26a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7e:e3:44:29:1c:1e:db:61:7c:92:3f:ef:85:
45:34:0b:87:6a:29:6a:8c:60:a2:7e:1e:5b:d3:e6:
c0:e0:f9:fc:81:93:3b:31:8c:02:c9:98:fd:5c:ac:
4f:c8:9c:17:1f:fa:0e:f1:b0:4a:4e:99:7f:b5:8e:
da:c7:fe:88:eb:d1:99:b6:3c:d4:34:58:ee:43:96:
51:a2:ee:81:07:01:72:e3:59:08:28:84:ac:86:c1:
9e:c3:7b:a9:ff:d7:3d:b4:4b:d4:79:56:89:f6:b5:
63:02:6c:af:4d:e2:94:9b:5c:8d:d6:aa:3d:a8:93:
59:71:19:e0:a1:f0:1b:77:11:e1:c2:97:bb:7d:55:
a5:63:85:83:83:70:74:ea:58:eb:1f:55:8c:8b:b8:
6f:be:3d:6b:e9:42:97:b8:66:81:c9:0f:6f:db:02:
ed:36:77:1a:34:41:81:3b:d8:e3:a5:61:dd:b1:3f:
3a:06:ca:54:f2:bb:45:1c:ad:e2:ba:df:bf:1a:f1:
06:14:b2:0c:de:16:d6:4f:e1:ab:07:ea:fe:d3:fc:
f7:88:ff:56:60:cb:63:65:b2:0b:fe:f6:57:e9:43:
a2:51:48:00:4b:28:35:ff:64:19:dc:e8:86:71:22:
dd:68:fc:a9:66:98:d1:7f:7a:b1:86:db:e0:b3:d3:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F2:C5:C0:14:47:D4:71:8B:2B:F0:7C:A9:72:8F:6C:63:B0:72:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
204.141.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:01:37:a8:97:85:51:98:76:3c:2c:29:2c:6e:28:dc:89:d7:
94:a9:8f:ea:bf:6f:5f:f0:7d:7e:49:0e:e6:d0:89:7f:e1:51:
28:57:68:7c:e8:ab:9f:5c:cc:79:c1:d5:c5:8a:24:b2:5f:2f:
cf:71:48:f6:a7:f2:7c:38:0a:9e:d8:6f:1d:db:b8:9e:5b:ad:
a9:f3:2e:e0:3d:74:63:e0:c4:e5:d3:c7:86:b0:02:5d:18:0b:
e9:29:00:32:42:ce:5b:47:83:0d:68:8e:0d:07:2e:11:e1:02:
ed:da:51:4f:5e:06:e9:10:43:70:07:84:e8:c4:aa:36:04:4d:
ff:c4:55:0a:21:af:07:fb:ac:dd:2c:c0:82:af:e1:19:15:fb:
aa:bb:47:c7:a2:ce:15:62:44:d2:59:52:13:d1:f7:a4:08:4b:
5e:6c:99:f8:40:cf:25:ed:13:d8:37:8b:ae:89:fa:53:1d:f8:
d1:00:6f:c3:d3:fa:4f:d9:e9:6c:22:5d:2e:df:57:aa:16:f3:
3e:64:ca:0d:af:5b:49:0b:b4:3f:cf:64:68:f3:f6:12:29:05:
82:86:b0:cb:9d:d4:04:01:a7:2d:54:2d:61:e2:0c:f0:7d:9a:
71:eb:79:c5:2f:8a:ed:ec:c0:6a:3c:2c:cf:a4:91:e6:65:42:
00:64:59:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:06:45 2025 by rpki-client