Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/5586d2ac-cfb2-3de7-be20-4f8b62e76052.roa
File: 5586d2ac-cfb2-3de7-be20-4f8b62e76052.roa (raw, json)
Hash identifier: rgwuJztLV2b+z1QLm1dhx7QtpABemY8KeulLEYaauQs=
Subject key identifier: BA:2A:68:EB:FF:80:EA:10:20:44:0E:8A:32:37:26:D5:6D:8F:92:1B
Certificate issuer: /CN=eda66d50-f8db-4ce4-92d6-1b50bf737a3c
Certificate serial: 010D0C9F43285848424AD2528B10568DAAF14F00
Authority key identifier: 9B:14:D1:09:B9:F6:F4:B1:82:3D:CD:CB:77:9C:B7:B8:46:D8:87:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/5586d2ac-cfb2-3de7-be20-4f8b62e76052.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 54368
IP address blocks: 204.174.75.0/24 maxlen: 32
204.174.76.0/23 maxlen: 32
204.174.78.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:d2:52:8b:10:56:8d:aa:f1:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda66d50-f8db-4ce4-92d6-1b50bf737a3c
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=6eb4779c-c921-4ba7-8bed-0d0957a25757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:f5:13:e0:56:23:9f:64:e4:0d:4b:8a:77:
33:fe:ce:94:8b:cf:aa:94:46:7a:70:6b:12:f4:2d:
7b:01:f1:21:6e:70:53:50:c5:48:b3:c6:b9:ab:83:
ad:3b:7f:d7:3d:33:1e:f9:7d:54:4a:9b:9d:f4:02:
18:c4:1b:7e:7d:76:e2:0f:90:7b:11:f8:9f:11:e7:
34:b4:8b:10:62:c1:da:fb:74:80:ad:b3:b9:95:6e:
64:08:d5:96:97:1f:6d:9c:41:74:09:fa:ab:67:4c:
d2:6d:96:db:d7:0d:ac:49:3f:c8:c0:e7:14:09:0e:
02:6e:53:23:04:52:4f:cf:22:8c:8c:ba:46:05:62:
74:5e:af:23:c2:48:a8:7b:22:fa:8e:35:bf:3a:bd:
62:8d:3f:c7:9d:02:ba:7a:50:1f:47:fc:40:a7:36:
de:6a:63:1a:fe:c0:f6:a7:f1:67:7b:87:f6:d0:cd:
a8:7d:74:7c:c9:fa:f8:72:2a:aa:be:74:45:4f:2d:
63:89:cd:9e:82:40:a6:4c:c1:d7:7f:85:d1:b7:6f:
6b:52:40:ec:64:7a:da:54:15:24:c4:90:78:b7:64:
03:48:7b:c0:b0:55:6b:a1:0a:a9:d6:0b:11:2c:fc:
7e:83:0f:5a:85:f4:9d:33:ca:cb:19:ec:dd:dd:82:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:68:EB:FF:80:EA:10:20:44:0E:8A:32:37:26:D5:6D:8F:92:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/5586d2ac-cfb2-3de7-be20-4f8b62e76052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/eda66d50-f8db-4ce4-92d6-1b50bf737a3c.crl
X509v3 Authority Key Identifier:
keyid:9B:14:D1:09:B9:F6:F4:B1:82:3D:CD:CB:77:9C:B7:B8:46:D8:87:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c.cer
sbgp-ipAddrBlock: critical
IPv4:
204.174.75.0-204.174.79.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:2f:c8:5f:48:57:11:f3:2a:d0:70:f9:9e:8f:f9:32:7d:42:
92:aa:b4:6c:72:c5:74:55:c5:6d:ea:52:50:ab:53:b6:79:2d:
0c:54:49:70:c5:0f:0f:08:15:f5:d5:ce:8d:01:57:af:82:73:
e6:49:38:92:e1:23:4b:99:de:a5:2c:01:83:ba:79:97:45:8f:
ed:16:fb:a7:59:95:96:a4:23:03:9c:53:01:70:ef:08:3e:70:
e3:5b:66:d1:6d:ab:32:58:86:48:5e:d0:6b:19:38:2c:9e:9d:
79:3f:01:db:fa:9d:57:18:34:93:84:eb:e9:6f:b3:9d:fe:c7:
eb:dd:24:2a:fe:2e:23:7c:f3:5d:29:75:38:52:5d:b7:75:05:
ae:da:c3:84:4a:de:7e:08:ad:a8:64:61:61:0a:24:42:8a:b0:
0b:ee:1f:ee:9b:10:12:1a:bc:51:11:09:44:ba:92:47:0f:db:
8b:76:ba:cb:5f:56:4a:6f:95:a3:c8:bd:79:a0:00:71:63:7c:
53:4b:91:4d:6c:dc:0c:ca:19:7d:22:3c:21:4f:bf:6b:31:b0:
fa:5a:72:12:2c:cf:22:98:b4:f6:83:aa:53:56:22:3e:2f:2c:
ef:95:c4:01:a4:c0:a8:b5:8a:e9:76:3e:8d:98:bb:16:6a:24:
86:26:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:57:42 2025 by rpki-client