Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/01b06d28-0ad0-3036-9c71-00879687acbb.roa
File: 01b06d28-0ad0-3036-9c71-00879687acbb.roa (raw, json)
Hash identifier: GsLZpaXMXjDvJuiFgunk1tA6y63oMUoH5HGAKXGUs0U=
Subject key identifier: E5:D1:56:42:BD:86:74:66:50:CF:DA:1E:47:C0:B1:F8:15:CE:41:7C
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584824FA8D111A10B800A7C53B10
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/01b06d28-0ad0-3036-9c71-00879687acbb.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 16696
IP address blocks: 204.89.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:8d:11:1a:10:b8:00:a7:c5:3b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=0a48edb5-03c6-4511-9e96-16154d3e075c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:ac:cc:6b:f8:8b:f4:58:f7:eb:86:7f:3d:
a8:ea:90:65:d6:57:78:36:02:0b:d8:ab:ac:39:b4:
5e:b2:5d:4b:25:02:b9:de:54:ef:dd:48:99:f2:84:
91:00:6f:9d:e4:a7:2c:03:99:ec:db:9c:71:45:db:
46:8d:c3:9f:ab:57:36:fc:03:4f:ec:34:25:cf:1f:
85:05:11:96:1a:c9:81:d6:f5:9d:10:c9:59:f7:5f:
cf:03:40:de:f5:72:f2:e3:cf:a9:b8:91:6a:92:1c:
fd:8a:8b:02:70:b2:ce:b7:8f:13:ae:f6:b9:9b:d8:
d5:5f:39:ef:15:d1:ae:9d:06:9c:20:90:ac:42:92:
2d:f6:89:71:16:a2:9c:6b:57:ff:98:2b:6a:bb:97:
71:e9:f6:cf:98:e8:59:a6:59:eb:07:c5:84:38:2e:
a0:df:c3:15:25:1a:c6:f8:8e:b9:61:c5:fa:18:44:
5c:fc:d4:5d:a3:fa:02:8f:5c:dd:77:04:2f:29:ab:
64:48:da:15:f8:e9:5c:0e:36:bb:65:09:e7:40:7a:
49:e4:2c:90:91:ce:d0:85:20:e4:e2:7d:e4:64:fb:
12:24:cb:5e:0b:d1:6f:12:1d:1d:b5:2f:46:8d:dc:
fb:d8:50:01:18:6d:9a:a3:d6:7f:59:16:31:21:be:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:56:42:BD:86:74:66:50:CF:DA:1E:47:C0:B1:F8:15:CE:41:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/01b06d28-0ad0-3036-9c71-00879687acbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
204.89.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:d7:cf:2b:fd:2c:b1:d9:dc:80:c1:37:94:89:a2:0c:e7:5c:
b8:58:4e:c8:df:89:da:d3:e3:e3:16:a1:0a:1e:31:f3:d5:94:
0e:72:65:f0:b6:1d:a6:cb:08:24:e2:82:c1:42:11:b1:65:6d:
ae:55:99:14:40:07:fd:6a:f2:62:f8:b6:b8:ac:18:45:b5:fa:
fe:86:9b:e9:38:0e:51:73:9e:f4:fc:3d:9d:9e:a5:a2:1c:57:
9f:29:76:8c:96:3a:83:60:ba:5a:0c:9a:83:87:2f:49:6c:46:
92:f4:4c:8c:56:04:6a:ec:d1:20:04:df:fa:29:f5:ab:58:22:
8d:73:18:7e:af:a6:00:33:da:56:43:b9:46:31:81:b8:e7:91:
90:4b:25:1f:a9:63:90:65:28:fd:cb:be:0e:b2:12:90:f1:4a:
f2:1d:91:8d:d9:c5:cd:3d:d2:30:25:a9:07:38:d9:8c:f7:a4:
0b:85:6c:01:57:b1:d6:8f:f8:a5:fd:47:8a:7e:8d:74:2a:d4:
51:ca:cc:5a:6c:2c:29:09:f9:ca:58:db:95:b1:21:84:13:f6:
28:93:bc:df:98:41:14:45:60:39:d4:fc:67:b8:a7:9b:62:08:
f5:b5:ce:7f:2d:b2:15:d0:91:4c:20:6d:c4:f5:fd:07:a2:88:
7e:d2:24:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:40 2025 by rpki-client