Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/70990893-c448-35af-b40a-9bc235cf74c8.roa
File: 70990893-c448-35af-b40a-9bc235cf74c8.roa (raw, json)
Hash identifier: aNM8OdqyL7kGm/GATeEXlIqHLebnROQH3kZzPPVYvVY=
Subject key identifier: 1F:29:46:49:A8:86:73:3E:83:F4:9F:3E:41:4D:EC:7D:E8:BD:57:92
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F4328584845157F583FABBBF4E566B480
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/70990893-c448-35af-b40a-9bc235cf74c8.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 51964
IP address blocks: 204.59.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7f:58:3f:ab:bb:f4:e5:66:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=6ebe74e4-0277-44e2-a245-708c6daffbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:35:04:77:08:34:c9:09:d7:50:67:04:8e:
e6:df:e2:a6:ab:45:83:27:7e:82:b9:58:7d:5b:01:
94:40:91:ee:f3:ba:ff:5e:25:9b:69:de:55:cc:19:
f4:39:b6:c4:f7:60:82:a5:e6:59:68:78:6b:86:91:
24:d5:7d:c6:10:d0:51:53:71:39:b9:73:5c:41:80:
8b:fb:c6:b6:77:93:41:ca:0b:ca:ab:03:26:ff:64:
e9:1c:13:ca:3d:21:bd:15:99:d8:83:88:47:ac:ab:
f0:4f:5c:65:1c:6e:68:93:79:3c:61:a1:cc:03:64:
8a:ba:45:a2:3f:1d:30:f3:47:b5:7f:88:52:bc:b6:
a0:fd:99:e8:c4:b7:ce:c1:bd:e5:d4:9e:38:c7:b5:
c1:7f:d4:89:0f:62:02:6b:4d:dc:8b:1c:03:7f:e3:
60:44:ba:ae:f2:07:04:88:ef:7b:d4:d5:e4:62:a0:
3d:9f:7b:0d:c6:fc:9e:63:af:a0:f3:93:e0:f7:ff:
b4:b9:dc:11:a9:33:f1:0a:4e:83:48:d7:50:b5:2c:
17:55:be:68:b1:ee:78:bb:83:bb:05:9b:53:a9:3c:
e0:2e:b4:19:ed:3d:b4:72:78:d8:fe:0c:b0:b1:61:
c5:5e:e2:63:97:73:e4:08:99:93:57:66:3b:29:22:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:29:46:49:A8:86:73:3E:83:F4:9F:3E:41:4D:EC:7D:E8:BD:57:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/70990893-c448-35af-b40a-9bc235cf74c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
204.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:34:2a:f2:21:4f:b3:4b:ff:a5:11:87:48:98:dd:62:26:ee:
63:25:a7:9b:06:82:08:03:b1:da:5a:cc:3b:36:af:d9:24:71:
d9:c9:4b:0c:94:38:b4:44:af:fe:46:fa:cb:11:10:5e:07:ad:
38:b0:80:b3:2d:e8:0d:26:30:20:94:e5:d8:40:61:50:07:12:
ac:a8:b5:00:2d:92:eb:db:3f:a8:f6:c8:3e:7c:11:cb:00:46:
23:0e:bd:fa:60:1c:a9:5b:47:4f:a8:29:ec:22:f4:62:12:08:
20:ba:1e:fb:15:d0:c6:6a:52:3b:6a:a5:b4:db:14:05:a6:e2:
03:e2:50:ab:4d:83:c3:90:7c:fd:8d:5f:b2:28:72:8d:7f:be:
c3:c8:ba:83:23:0d:6f:2b:16:ae:4c:80:a7:4c:98:94:3b:cc:
59:01:78:6c:59:c3:b4:5b:ca:07:17:4c:bc:a2:c5:fc:f9:8c:
a5:66:e5:b8:42:27:c2:96:75:40:0e:d6:32:8c:56:f9:a4:5a:
4b:65:dc:87:d8:22:e5:9c:7f:18:9a:db:39:71:f3:3d:60:b7:
ab:62:d8:f2:a0:4d:fd:7d:8e:f8:9a:07:44:72:94:6e:81:4f:
dd:88:20:82:ba:2d:af:e8:e5:9c:f5:1b:31:3c:07:43:fb:43:
a0:28:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:15:04 2025 by rpki-client