Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d211989e-d01a-373b-b3b7-167816d1f06f.roa
File: d211989e-d01a-373b-b3b7-167816d1f06f.roa (raw, json)
Hash identifier: Gxa3VNMMZBLVHClJ4OvqILmlFio25VUAPsrHMgVlbUA=
Subject key identifier: B3:86:49:B3:8F:32:75:F6:53:F9:9B:04:AE:7C:5E:C2:1B:38:C7:09
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858487325B870A67D3B9FFCA9BA80
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d211989e-d01a-373b-b3b7-167816d1f06f.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 25645
IP address blocks: 204.174.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b8:70:a6:7d:3b:9f:fc:a9:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=2a935a26-fd28-425c-9115-9dc8d2e1f89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:c8:0c:ec:26:48:9c:e0:b4:c7:35:93:4f:
05:b4:f8:4c:ea:0d:e2:46:f4:63:d3:8d:df:39:49:
31:e2:12:87:1d:d1:35:42:7d:f5:96:38:51:68:64:
c4:eb:10:54:8d:45:84:07:25:e0:0a:c7:ad:8a:b6:
0b:60:d7:c3:f9:7e:aa:40:d4:60:2c:b8:5d:41:56:
03:ab:46:df:bf:a8:25:21:4e:cc:a3:36:ba:ca:74:
e0:d3:8c:af:f3:9e:89:51:48:38:60:05:ff:ef:1d:
91:1c:df:c6:ef:c6:79:e8:50:fa:9c:b2:5d:1b:e0:
85:28:33:dd:c4:b8:69:5e:2d:2d:e1:8c:22:0e:a4:
ef:fe:04:f8:fb:5e:99:0b:b8:28:3b:aa:d3:0b:5d:
8c:0d:6f:e2:ee:8d:1a:bc:97:93:97:3f:fc:9d:8d:
1f:0f:7d:56:70:13:bb:08:0b:26:cd:a1:09:49:34:
5e:0c:c1:bd:dd:63:dd:82:b4:c4:3b:c7:1b:78:28:
dc:5c:21:d4:fb:af:45:96:a7:a5:33:13:eb:7e:31:
ff:4f:e2:c7:2a:7a:51:52:97:92:86:55:10:5a:98:
eb:48:1f:ea:39:97:06:49:0a:c3:45:cb:f5:53:f2:
64:1f:07:58:06:13:63:4e:d1:aa:7f:41:43:e0:5a:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:49:B3:8F:32:75:F6:53:F9:9B:04:AE:7C:5E:C2:1B:38:C7:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d211989e-d01a-373b-b3b7-167816d1f06f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
204.174.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:a8:f7:7f:0f:10:7d:ee:48:ed:c2:50:86:1e:e5:ba:4d:ef:
b4:94:74:08:15:6e:e9:88:9c:8c:a3:f4:ad:9a:6f:76:a9:7e:
f4:a9:8c:aa:7b:7a:c3:2c:07:78:07:1e:cc:59:f4:ab:15:91:
c0:9b:b9:f4:d2:90:42:9e:10:6b:b4:00:c3:12:8f:87:3e:7c:
6a:75:ea:f6:a7:63:3c:c3:01:a8:73:54:5f:87:d5:ab:79:20:
c5:59:9f:ab:37:50:80:72:22:51:ef:79:0b:ff:5a:6a:46:9e:
10:79:a6:c7:63:d0:68:d2:a6:e0:0d:d2:62:52:19:e9:b5:f9:
86:7b:e0:ad:2b:c5:d3:c2:62:fc:23:6b:6e:cf:7b:0b:fb:b0:
03:5a:ec:e5:d5:00:a3:45:b4:f3:e0:60:f6:be:5a:fd:0b:5e:
b8:16:3c:79:e1:67:6c:48:60:37:7d:e7:58:45:d9:42:0a:0d:
08:42:2f:0b:ca:e3:e9:f8:bf:96:c0:dd:a7:b2:11:71:25:b8:
1d:18:d0:db:45:24:fb:ed:bb:e2:4e:7d:d2:07:23:23:cc:15:
93:28:b9:44:b1:66:17:c8:1c:9d:a5:c3:7a:db:c7:72:9a:f1:
e5:57:d3:c1:95:57:c8:ea:54:25:aa:7e:64:61:17:01:21:7f:
09:48:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:12:49 2025 by rpki-client