Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/8974480b-9b94-3460-bba1-8896eeb5d29b.roa
File: 8974480b-9b94-3460-bba1-8896eeb5d29b.roa (raw, json)
Hash identifier: aJzI3cF5tInvyxrZe69nKftm8ETU235ZDFtYjf+ETlY=
Subject key identifier: 2E:40:77:3E:00:5C:E7:9F:29:F8:5A:C4:4F:69:4B:9A:24:4D:06:39
Certificate issuer: /CN=a92da870-be06-471e-89b6-f5063eb7350b
Certificate serial: 010D0C9F432858483E1ABD7A8D7DDCB5165E9100
Authority key identifier: A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/8974480b-9b94-3460-bba1-8896eeb5d29b.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 397050
IP address blocks: 204.144.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:bd:7a:8d:7d:dc:b5:16:5e:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92da870-be06-471e-89b6-f5063eb7350b
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=171fbe13-9fbf-4345-8ee0-9ef823644e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ad:37:b4:54:df:d6:51:59:0a:e2:4e:af:16:
a0:b8:3c:18:5a:db:40:71:83:13:85:fa:5c:fb:33:
c5:13:ad:05:6f:db:0b:e8:ea:69:84:f1:6c:33:03:
33:97:b9:f1:2f:98:a9:1a:c7:e9:c6:78:d4:1a:79:
fb:b8:2b:68:b5:84:70:e8:27:9d:15:f3:bd:0f:3a:
3a:eb:c7:76:2b:59:f8:e9:4b:8f:b7:e0:c1:85:69:
83:99:20:31:3d:9e:dc:19:1f:95:f9:4c:1a:73:0a:
ed:87:40:cc:77:8a:5c:47:12:fc:47:79:3f:df:42:
85:28:11:f2:93:97:fb:ce:a3:e2:e6:61:6e:f5:42:
2b:03:93:89:27:3e:e7:0d:5a:1d:2f:51:c6:44:3b:
fb:fc:27:44:f7:ad:ff:9a:14:73:0d:b1:23:7c:88:
02:b1:3e:8c:f1:c7:92:d2:69:6a:a4:45:fa:57:84:
a3:50:f1:2e:95:a5:36:58:f3:7b:4c:8a:25:90:5a:
13:64:dd:12:17:85:07:cc:d1:ad:ed:f3:36:20:44:
8b:a7:c5:f4:c3:f4:44:e7:74:3a:72:19:69:bb:e9:
8e:1f:07:3b:8c:64:0e:b8:19:36:97:ef:dd:a5:2b:
1a:3c:0a:98:de:d2:95:3a:58:aa:28:dc:77:e2:7b:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:40:77:3E:00:5C:E7:9F:29:F8:5A:C4:4F:69:4B:9A:24:4D:06:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/8974480b-9b94-3460-bba1-8896eeb5d29b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b/a92da870-be06-471e-89b6-f5063eb7350b.crl
X509v3 Authority Key Identifier:
keyid:A7:74:2E:49:15:B9:70:2F:E8:B7:60:50:ED:7A:A4:DD:14:A3:74:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a92da870-be06-471e-89b6-f5063eb7350b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.144.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:73:32:fb:11:f4:db:69:ad:e9:1b:b0:2f:9d:83:78:25:b6:
f7:2a:fe:9f:09:2e:58:62:07:e9:b0:fb:06:8d:c6:87:e6:05:
9d:69:8b:cc:92:84:07:c7:4b:18:5f:5e:fd:1a:25:98:b4:fc:
73:ad:d0:e5:89:ba:b7:06:1e:72:c1:fb:e6:9f:94:ab:81:2a:
d9:a0:68:69:78:bf:8e:1d:14:eb:e1:6e:d8:ae:df:56:13:f6:
62:6f:dd:65:ba:e7:80:47:f7:be:6e:61:08:3b:e1:ff:7f:f1:
1e:f4:ab:ba:23:5e:53:e5:30:2d:ed:e3:ed:72:f3:ba:f4:96:
d7:24:bd:43:64:f6:4c:bb:5c:aa:b9:d7:ff:58:98:2d:f0:00:
60:4d:96:14:86:83:fd:34:79:53:8e:bd:99:eb:c5:ae:c4:61:
4c:e9:d8:6e:19:6f:8c:d3:d8:bf:ba:9b:88:33:07:51:c5:0f:
98:2b:8c:01:39:52:12:86:73:f6:38:44:d6:45:a4:70:0c:ee:
a3:35:c0:5e:7e:c3:cf:f6:28:de:6f:fc:af:78:c3:a6:0d:02:
90:74:3d:0b:06:4c:e6:46:36:07:a2:88:93:10:3f:d4:0f:5d:
a0:dc:4c:b7:5c:bf:13:48:2c:4b:a9:94:c0:92:43:7a:0f:b7:
78:bc:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:52:39 2025 by rpki-client