Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa
File: 6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa (raw, json)
Hash identifier: cirl2sj7sRm82K49brGf54rj9yo65naGTZbvEyChZN4=
Subject key identifier: CE:99:F1:AC:E3:E4:90:77:3F:6A:12:AB:25:10:CB:F0:BB:7B:0C:AB
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F432858480214FA8A4607AD8F2A4DCE80
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 4005
IP address blocks: 204.59.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:fa:8a:46:07:ad:8f:2a:4d:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=efa47de9-c748-4b61-8eba-272a0a787dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:d4:09:9a:e9:60:72:2f:32:27:1d:1b:da:
dc:4c:c8:8f:6d:f1:ee:38:68:34:7b:0e:d2:8c:18:
62:2a:e6:8d:53:85:bf:32:0b:a2:ca:cb:c6:17:ca:
0f:9a:d8:17:bf:22:ae:db:49:37:78:5f:3b:17:c4:
7b:9f:c3:8b:de:08:d5:cd:73:54:94:7b:d7:d8:a0:
d2:2e:27:8d:42:7f:83:b3:f1:7e:e7:d1:6f:33:28:
aa:db:11:71:21:67:61:ec:3e:ac:28:02:f7:49:39:
c2:e9:f1:f0:b5:a0:a6:c8:c9:df:f1:1e:03:0c:f9:
a3:26:04:97:b1:54:f3:be:1b:42:90:17:fd:a2:cd:
82:5b:db:cb:80:ef:a1:98:b4:6b:ed:0b:53:19:c0:
8f:93:7f:51:0d:18:0b:f8:fb:56:f1:86:e9:d8:63:
62:1a:ce:1f:54:5c:a4:e2:42:4f:76:af:bc:79:85:
2f:61:98:f8:e6:7d:ed:2b:d6:d8:1e:49:50:b0:e7:
7b:d6:1f:02:fe:51:a1:4a:e0:ea:bf:e2:06:71:b1:
2f:74:5e:21:b7:3c:25:a5:ab:31:de:84:6b:45:4c:
3d:65:8f:2f:52:70:30:9f:98:ca:a7:aa:18:b3:b3:
57:36:86:17:90:9c:d7:0e:30:5d:98:48:81:9b:54:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:99:F1:AC:E3:E4:90:77:3F:6A:12:AB:25:10:CB:F0:BB:7B:0C:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
204.59.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:e0:68:30:f2:31:61:5b:b1:62:ca:01:73:29:3d:7d:f9:06:
78:ec:ec:8e:90:9a:79:3e:3d:c5:46:b1:92:6b:d3:68:cb:9c:
24:76:a4:2e:06:b4:38:99:c2:07:1e:ff:a9:68:01:8b:ed:6f:
9b:e7:04:28:4f:c1:6a:1e:bf:d7:d7:55:3e:e4:cc:4f:4a:8b:
0f:0f:c6:e7:3b:44:cd:63:06:c4:c6:82:be:8d:96:3f:5f:2a:
c6:95:e2:0a:4c:c7:2f:fb:9d:74:a6:c4:36:2f:77:18:80:26:
bc:a5:2f:0c:b8:a5:11:da:62:29:9b:f8:31:15:77:4e:67:b3:
f8:7b:3a:d5:6c:04:8d:4c:3f:a6:6d:1a:a4:bb:9a:45:be:96:
f1:7a:09:54:2c:fd:47:45:82:a5:22:75:25:31:11:d0:e8:99:
3f:6c:62:33:25:cf:26:56:d1:21:9a:0e:fb:7a:a7:db:4d:d9:
c0:df:eb:3c:fe:76:fb:43:2c:d6:d0:96:b5:49:15:51:f1:3c:
c8:d7:5f:f6:d6:d1:b8:f0:24:44:e0:7b:a6:b0:4a:4c:3b:2e:
24:c7:de:cc:bc:ee:af:96:3c:9e:17:71:20:99:7d:04:d8:1e:
e8:d6:7d:d6:7f:70:16:99:bd:92:e8:9a:51:22:14:d1:8f:3f:
f9:2a:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:23 2025 by rpki-client