Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/15c1acb6-1df2-3a92-bbc1-54d980d57e48.roa
File: 15c1acb6-1df2-3a92-bbc1-54d980d57e48.roa (raw, json)
Hash identifier: jTK/OJZSys0dIHVjQt9gqhWdV1liYwIqT1nsPCpQklU=
Subject key identifier: 50:D4:50:89:5E:18:37:03:73:3A:C9:4B:DC:8A:D8:15:B5:E9:4A:70
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F432858485F9ADCCBB81381D2A58C2100
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/15c1acb6-1df2-3a92-bbc1-54d980d57e48.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 400317
IP address blocks: 204.119.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:dc:cb:b8:13:81:d2:a5:8c:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=52d25021-88ab-47f8-9086-fd3a346b8495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:71:fa:2c:de:18:12:30:34:c5:10:ce:1b:
77:bb:7b:1c:88:9e:e5:c0:6f:0f:c8:8b:c4:de:bc:
c2:fc:15:4d:b1:5b:cc:e5:71:c4:00:79:29:76:e7:
72:e2:ed:b7:dc:e9:b8:8b:60:b3:19:dd:33:82:91:
0e:65:fb:67:45:63:52:5f:4f:cb:88:f5:0b:ed:9f:
d8:8f:b1:bf:6e:4e:63:41:df:83:e5:93:75:84:ea:
e1:38:3d:8d:65:83:b5:6e:a3:06:ad:af:7c:e9:8b:
38:0f:1f:12:7f:a1:23:1b:b8:af:58:47:bd:83:4d:
f2:38:57:40:2d:e0:07:bd:42:33:18:ad:94:81:f2:
b6:bd:45:63:d3:15:6d:93:24:57:11:e9:66:3c:e0:
ff:20:5a:f6:bb:8c:de:a5:e9:2e:f6:37:3f:07:49:
0b:94:93:41:51:f9:5d:9d:a9:da:dc:4a:eb:27:f6:
d3:da:ed:69:3f:c0:13:bc:75:d8:a7:ac:8f:71:c0:
fb:4d:8e:50:34:c2:d6:fb:9e:69:a9:05:c6:4c:60:
00:26:89:f1:d7:86:4a:40:65:c9:65:6a:b9:99:1c:
21:33:0f:c1:56:10:33:cc:d2:24:5e:f3:55:03:d9:
61:60:fc:57:1d:71:1e:d1:0f:56:85:0d:4c:ef:71:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D4:50:89:5E:18:37:03:73:3A:C9:4B:DC:8A:D8:15:B5:E9:4A:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/15c1acb6-1df2-3a92-bbc1-54d980d57e48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.119.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:a1:d7:fa:33:38:52:6e:98:a4:7f:e2:f2:2f:8d:c5:fb:32:
93:5d:d2:17:c2:d8:3a:f6:b7:36:7d:31:14:86:4f:f8:79:43:
de:8a:5c:87:e9:80:4f:01:a3:49:81:12:b6:ca:19:87:57:c2:
ab:70:32:11:a0:2a:73:47:d8:63:0c:90:91:88:64:a3:ca:17:
09:ae:58:19:b5:eb:e5:4a:24:93:52:2e:0b:26:37:c7:ca:f7:
e5:4d:fc:8d:95:e3:d3:ff:be:87:2d:ef:0f:1f:7c:73:a4:30:
32:f6:dc:7c:8c:fe:f0:21:5d:65:89:f0:7a:e2:9f:f9:b5:c5:
c8:f4:5a:6e:f1:b3:5b:35:24:4b:af:31:c4:71:8e:eb:6d:cd:
2f:87:a1:2e:ee:44:9f:0c:5e:cd:f8:a9:73:c5:53:9c:cf:2b:
c7:00:a4:52:32:97:08:dd:8f:0d:f9:24:3b:ab:45:a1:eb:e6:
f4:0d:d8:59:8a:16:be:0c:de:d8:d3:57:af:de:ef:7b:09:7d:
dc:d1:3b:07:a5:b8:dc:d4:29:c5:95:c0:46:ba:b9:99:ed:ff:
eb:75:55:d4:a8:d3:9b:81:63:c8:c5:aa:d5:45:e5:67:3d:58:
16:be:49:53:d6:f4:12:37:ba:e2:b3:a3:35:0f:22:fa:07:ac:
3f:86:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:05 2025 by rpki-client