Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa
File: e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa (raw, json)
Hash identifier: H3hZDD/wd/IGSwsYi2ZhEbg1lI2KzEHpWSkb6nEwbSg=
Subject key identifier: 43:6C:B5:0D:FE:53:DF:C9:D4:36:FD:E2:6E:29:34:D1:8D:97:6C:E8
Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Certificate serial: 010D0C9F432858488280825FDDAED0D977080380
Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 398471
IP address blocks: 204.108.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:82:5f:dd:ae:d0:d9:77:08:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=3c68cc74-ff34-43ae-8f7d-700162ccd13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e3:c9:21:bf:be:f8:23:11:0c:41:82:35:61:
42:12:12:7a:97:f1:01:d0:33:18:9a:39:cc:70:f4:
ad:71:55:fd:04:d3:72:b8:92:9e:f0:e0:ce:83:78:
7c:59:45:7a:0b:4c:65:82:28:6a:02:da:e2:01:a4:
c5:2c:b2:db:2e:bc:ba:43:7f:01:17:b3:27:16:4e:
38:1a:f1:4b:d4:8f:e8:fc:15:08:6a:e5:05:c9:c6:
e6:a3:b1:69:b8:69:ee:f0:cb:39:c9:63:d2:27:2e:
c4:2a:1d:d0:2c:11:98:b1:12:3a:dc:a3:63:cf:95:
cd:79:c5:fb:73:51:e7:fb:75:b7:96:93:b0:d9:ac:
c7:20:98:bd:35:18:a7:99:be:37:bb:d7:cb:22:10:
54:36:8f:eb:09:ec:cc:14:fd:fd:6b:5d:f8:48:1b:
ec:ab:bf:0e:39:0f:4e:dc:99:8a:ab:ac:f7:48:93:
a7:22:65:78:21:22:1e:63:60:c1:27:e4:5c:c2:3c:
9f:74:dc:2f:82:7a:8a:5b:e7:78:27:8c:b0:0b:36:
fd:f1:46:60:d0:4b:d8:a3:22:3b:d0:aa:c2:67:fb:
b8:57:3c:db:e1:b4:d3:6f:b1:95:a4:83:20:02:e9:
33:da:58:b6:fd:55:86:72:f6:d2:e3:4c:29:a9:df:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6C:B5:0D:FE:53:DF:C9:D4:36:FD:E2:6E:29:34:D1:8D:97:6C:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl
X509v3 Authority Key Identifier:
keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.108.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:be:fd:fb:43:b6:da:b6:e7:62:a9:89:16:05:7a:6e:9e:f2:
ef:8a:9d:34:44:8e:43:1e:8a:51:5a:39:8f:45:cd:e1:ad:e6:
28:78:0a:01:39:6c:d0:de:c5:d8:e1:13:7d:76:0c:c8:dc:54:
a6:0a:15:55:25:8a:39:21:f3:50:80:cc:24:aa:af:7a:b7:ef:
be:dd:0a:c8:da:0c:af:c3:39:56:c4:70:0e:e2:c8:f7:ba:b4:
b6:00:c4:6c:9e:15:16:ff:c0:80:a1:7f:b3:fb:1e:af:b8:25:
54:30:53:4e:c9:9c:2f:bc:4e:65:f1:80:a5:93:f4:74:7c:b5:
18:02:db:27:9a:3c:c0:42:6b:93:a3:3b:e7:4e:1e:85:17:47:
1b:ab:2c:cd:3b:1d:6d:76:bb:4f:12:12:0c:35:89:97:41:c5:
43:96:b1:a1:39:9f:d9:ff:9f:c3:1f:c8:16:68:8b:c6:8d:aa:
4f:d0:16:50:50:d0:b9:33:60:9c:cf:21:37:0d:27:b9:dd:3d:
bd:fe:63:40:e2:d0:30:ca:a7:08:29:43:3c:67:8b:01:6b:6b:
2c:30:7d:d9:ec:aa:6b:66:33:10:09:c6:de:7a:f5:5d:97:69:
3f:8d:a1:69:30:a8:3e:03:48:4d:98:0a:8e:16:7b:57:6e:ed:
38:e8:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:42 2025 by rpki-client