Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/abc187f5-d78e-37e5-a3ae-5f15b9b0a874.roa
File: abc187f5-d78e-37e5-a3ae-5f15b9b0a874.roa (raw, json)
Hash identifier: 7TN6XLJO68pcLLnnhbUrU4I80BRhVxhyXFqwknY0om8=
Subject key identifier: A6:1F:E8:C5:45:C0:66:5E:34:FD:E0:B9:29:20:CB:08:46:9C:AD:C7
Certificate issuer: /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Certificate serial: 010D0C9F432858487FB5E2F4A14F8639DA478A80
Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/abc187f5-d78e-37e5-a3ae-5f15b9b0a874.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 53597
IP address blocks: 204.11.135.0/24 maxlen: 24
204.15.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e2:f4:a1:4f:86:39:da:47:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=0ae4d2a9-2198-4816-bac4-848905331104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:74:74:cd:4b:2a:7e:c3:85:d2:bf:0f:7a:
2f:96:e4:1a:eb:35:1d:87:20:fc:64:0f:1a:f5:b9:
56:d9:dc:f2:9d:a7:f4:11:db:f2:95:37:54:f4:95:
1d:d3:ce:6e:73:d6:ae:ab:94:28:d3:64:74:2a:b7:
1a:56:ae:07:6a:db:40:51:3e:ff:ca:b7:05:2d:c6:
83:8a:84:e2:e7:48:ad:a4:c7:80:8a:b9:e3:92:10:
c8:9a:53:3c:c0:51:85:c8:80:91:ab:90:ef:8a:44:
3e:bd:0e:ba:52:9a:61:e9:0f:85:28:f8:b1:0c:90:
73:67:e1:f5:17:3f:72:d9:e8:81:8e:7a:fe:28:b4:
e7:e9:82:64:4c:e3:c2:30:bc:9e:23:5d:48:0e:af:
90:77:ef:2a:77:ea:c0:22:f5:11:71:fa:b0:cb:e9:
5d:21:ff:6d:6b:98:8a:99:4a:78:f9:14:0c:7f:43:
4d:1e:44:62:61:fe:d3:d6:38:4e:e3:2f:4a:b1:eb:
b2:6b:a8:ed:43:c2:f4:a2:21:f0:5c:83:09:9d:c7:
fc:09:5a:56:d5:82:dc:5d:c1:92:c6:2b:7e:2b:7e:
29:8f:d7:ce:1c:6d:92:09:47:61:ab:46:28:9f:ce:
69:4e:45:0d:19:6b:96:1a:d2:84:9b:61:15:5c:75:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:E8:C5:45:C0:66:5E:34:FD:E0:B9:29:20:CB:08:46:9C:AD:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/abc187f5-d78e-37e5-a3ae-5f15b9b0a874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl
X509v3 Authority Key Identifier:
keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
sbgp-ipAddrBlock: critical
IPv4:
204.11.135.0/24
204.15.110.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:67:85:dc:66:e9:03:08:9b:d4:12:46:2e:a0:f1:6f:d0:59:
3d:8e:27:6c:eb:cf:41:27:76:9c:a5:b0:0b:15:e5:fb:f8:42:
2a:7f:20:5c:19:05:46:b2:25:80:47:64:a7:f8:6d:ec:cf:09:
6b:bd:15:d2:49:d0:51:c3:dd:c1:d4:ec:32:3d:ec:e9:f4:65:
e0:f3:2f:af:b8:9c:e8:c4:e7:0f:94:6a:86:e7:72:0d:91:71:
c6:26:b9:ad:65:41:39:b6:5e:da:a9:4a:c6:64:14:e5:e6:8c:
8c:ac:4e:13:6a:5e:ca:c8:81:8b:70:a4:a0:99:26:79:62:05:
a3:bd:d5:4a:75:aa:c2:2c:8f:31:d7:7f:51:39:17:ea:dc:ad:
d8:ce:0b:18:27:db:86:84:b1:ff:5f:a2:64:59:ce:d7:8b:ed:
7a:45:12:d3:58:46:0c:d0:bd:4e:15:5f:08:ff:55:e2:44:17:
a7:43:da:3a:84:41:a6:a1:14:81:f8:42:84:43:fb:33:0e:fe:
3f:a9:f3:b0:36:18:43:af:48:ff:0b:e1:45:f4:c1:3d:eb:48:
dc:0d:31:74:f3:7b:72:70:84:72:91:4c:d3:5f:f9:2f:5c:87:
58:ca:dd:5f:00:9d:43:92:3a:6a:75:e0:33:5f:74:19:26:46:
e3:73:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:15:02 2025 by rpki-client