Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/2241d61c-ed9e-3f82-8f52-309986a1176f.roa
File: 2241d61c-ed9e-3f82-8f52-309986a1176f.roa (raw, json)
Hash identifier: mAXjMTrrMqsbcc0kCvn4twSn+8G0e7xhZ5F25OFEK8w=
Subject key identifier: 02:0E:49:F8:FD:89:95:F1:B7:E3:2B:3B:7A:B5:21:F1:F4:1E:B0:63
Certificate issuer: /CN=fdccefde-032f-46cb-9138-30e7726ea619
Certificate serial: 010D0C9F432858484C101FD66DD8E2A849B22000
Authority key identifier: 5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/2241d61c-ed9e-3f82-8f52-309986a1176f.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 205.147.81.0/24 maxlen: 24
2604:f700:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:1f:d6:6d:d8:e2:a8:49:b2:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdccefde-032f-46cb-9138-30e7726ea619
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=89e0f5f3-888f-4dca-9dda-be7a1174bb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6c:cb:ab:68:12:67:18:54:68:2c:5a:81:b4:
f2:94:5d:0c:3e:2f:d6:c0:eb:38:04:21:50:b0:49:
2b:e5:f3:81:53:61:e0:ee:cd:b0:f4:f5:bf:fe:72:
a9:0b:a4:84:a6:be:3f:7e:d0:ea:cd:17:a2:af:60:
c3:9d:ff:79:17:76:70:81:bf:50:52:1b:93:49:fe:
3d:06:85:8f:4e:cc:20:d4:94:f5:8d:d8:f2:cc:a5:
54:b8:6b:d7:ff:41:6a:9f:58:44:7c:a7:ad:72:2e:
47:91:e1:9c:9d:52:85:54:34:20:c9:66:2c:33:28:
93:3b:df:db:d3:d4:c9:c5:a6:99:0c:19:3d:65:63:
24:0f:90:ae:5b:93:ec:a3:1d:c2:4c:22:fe:7f:33:
86:c9:63:29:72:a3:5a:68:0b:9f:96:cf:37:b4:77:
5f:43:d1:ed:a1:0f:db:c0:98:94:4f:4c:c0:8a:a7:
08:2d:5b:bf:7d:9c:74:93:f6:d8:01:46:89:bb:6f:
e8:3f:66:d6:0b:92:7a:ec:f1:49:fa:60:b8:1d:5d:
2b:3a:70:d2:34:d9:9b:20:6a:01:31:db:74:f9:7c:
84:82:cb:2c:97:0f:ed:db:0c:c4:29:c3:47:de:e2:
2b:06:0b:7b:1b:28:a9:35:4e:85:65:8f:96:cc:f1:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:49:F8:FD:89:95:F1:B7:E3:2B:3B:7A:B5:21:F1:F4:1E:B0:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/2241d61c-ed9e-3f82-8f52-309986a1176f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.crl
X509v3 Authority Key Identifier:
keyid:5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer
sbgp-ipAddrBlock: critical
IPv4:
205.147.81.0/24
IPv6:
2604:f700:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:6f:c5:39:f3:ba:24:e3:e9:69:48:9f:38:7c:c9:c4:b9:54:
5c:1d:c3:a4:82:fa:b8:76:42:91:fc:a4:dd:24:e6:b6:9b:68:
05:62:08:ca:6c:8b:56:2f:33:b8:ac:fd:12:07:45:aa:07:23:
cf:82:5d:a0:4c:db:ce:6b:69:f9:df:19:13:43:9e:f5:c7:44:
2e:d1:d6:2d:7b:f0:ae:d6:18:ae:ae:c1:51:65:a0:8d:73:be:
32:62:cf:2b:08:5a:f9:65:bd:e5:fe:57:e0:da:9f:5c:b0:75:
fa:60:4b:57:e2:9f:ef:5f:7b:ab:d8:b9:86:d4:bb:80:bd:d8:
8a:52:87:b4:b0:19:6c:38:a6:06:ac:4a:19:57:6f:8c:ee:f9:
30:a1:82:4b:e5:bf:9d:18:f0:bc:0c:34:9e:11:95:b2:0f:42:
33:0c:7e:21:cf:6d:0e:11:af:47:91:7d:0a:49:1e:f3:50:c2:
70:0c:0a:91:59:d7:a0:bb:9e:51:90:ee:23:e1:07:e1:a6:2c:
bd:dd:e0:48:ec:29:bb:53:1c:15:88:1f:04:cf:65:14:46:67:
7c:47:24:b4:0b:fd:63:53:a8:66:2e:b5:d4:c5:1b:ea:9f:e7:
86:57:a6:8c:05:e8:91:67:c0:68:d1:93:be:2d:ac:03:8c:6e:
64:f7:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:56 2025 by rpki-client