Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa
File: cd834625-5e03-3003-a219-1f2ecf641d36.roa (raw, json)
Hash identifier: xq3wE4Fkbleq1mcaBixBnxa1GdKDbMXdP4Yvy595W3U=
Subject key identifier: E2:FD:00:D4:7A:5A:98:93:11:0F:B0:80:30:C8:A1:3E:A3:4D:CD:18
Certificate issuer: /CN=da6a16ad-9697-4d95-a04c-86394f7b78c8
Certificate serial: 010D0C9F43285848424AD1FCDC5BEC0907A6E840
Authority key identifier: F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 16509
IP address blocks: 204.10.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:d1:fc:dc:5b:ec:09:07:a6:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6a16ad-9697-4d95-a04c-86394f7b78c8
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=4f5c016f-c429-45d5-9146-cf8ae0ec39ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:2b:06:8d:6a:01:a1:37:98:62:65:b6:2c:
d1:d5:77:ad:90:68:25:d1:50:c5:32:17:5f:01:ed:
ad:d4:6d:c7:66:7d:65:fd:d8:35:3a:1b:df:ab:ef:
64:e2:e6:be:2c:4d:51:f8:ca:12:ba:2f:9b:c3:b4:
ec:30:f6:14:68:80:e7:c0:64:e5:b1:2a:ad:c1:50:
f0:97:22:bf:70:54:9a:e4:ea:36:39:a5:b6:72:64:
a8:63:87:23:74:78:13:5a:f0:54:0f:22:ab:4b:7f:
b1:93:5f:b6:91:b2:78:bb:bc:54:c1:4a:e8:96:c7:
12:15:ab:5a:68:41:de:ec:61:bc:23:e1:ff:15:7f:
b2:c2:5e:d1:d6:13:37:7f:34:89:19:79:2a:f1:c5:
ff:5a:a6:d7:07:8e:54:2a:f4:47:83:45:b4:9d:74:
ef:17:1f:93:79:07:d3:fc:1a:a5:dc:c6:0a:34:b3:
4e:ca:a4:65:4f:b2:c1:92:b4:47:2a:3e:89:9d:5e:
79:3c:b0:58:e8:b1:f4:64:14:98:e7:0d:8c:02:3a:
61:ce:e9:e2:5b:eb:c2:55:57:08:30:3f:91:18:41:
a9:7a:74:a5:9c:d3:45:6c:0a:8b:6d:4d:6f:8e:58:
6d:4f:18:43:8b:5e:73:ba:c7:ee:59:18:c7:57:f0:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:00:D4:7A:5A:98:93:11:0F:B0:80:30:C8:A1:3E:A3:4D:CD:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl
X509v3 Authority Key Identifier:
keyid:F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer
sbgp-ipAddrBlock: critical
IPv4:
204.10.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:26:16:90:8a:c3:a4:1a:fc:5a:9a:6e:87:9e:71:3c:06:72:
65:38:60:23:b0:2e:cb:bb:8c:2b:45:1c:6e:c3:57:81:b4:7a:
34:dc:c8:22:30:fd:13:fd:85:c2:04:d5:e2:57:fe:56:40:35:
fb:9d:a1:d7:77:77:c4:70:d6:cf:77:01:ce:e9:74:57:19:f5:
27:82:df:6e:4c:4f:e9:94:79:b5:05:77:9d:28:81:57:8c:38:
5e:5e:c2:fc:09:ae:84:b5:69:25:d8:d7:10:f3:32:0a:1a:ac:
1a:34:0b:1c:da:41:26:ab:05:67:98:8e:54:1d:fe:87:98:43:
a9:bc:f2:80:be:77:2e:9f:9e:79:ce:b0:40:5b:95:ac:bc:88:
75:78:96:67:97:25:16:62:57:24:9e:a9:da:73:71:16:42:1e:
90:65:f7:0e:a1:74:7e:79:f1:3a:46:98:ef:34:ca:8a:06:4a:
74:3b:ab:b4:0c:a1:d9:38:4a:7d:5a:61:c0:cd:2e:8b:18:d0:
a8:a3:bb:63:58:b3:df:90:3c:50:e9:84:e3:f0:a7:ab:6c:27:
41:3b:f0:e6:fa:0b:62:d8:09:6b:41:34:0f:9f:d2:ff:83:d3:
27:af:53:bb:05:74:ad:f1:64:0c:53:2c:e7:43:27:59:62:68:
fe:d0:8e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:10 2025 by rpki-client