Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/e7022e3a-f48f-338a-ad62-7a1b32063e4c.roa
File: e7022e3a-f48f-338a-ad62-7a1b32063e4c.roa (raw, json)
Hash identifier: ZfZEL1hbKJwqFEjVMRHtbv83+Pkr+fSVZ8ZIVgOQHkU=
Subject key identifier: 5A:A8:0B:03:FB:83:F0:E6:BB:94:FC:92:1E:51:E0:40:81:01:4D:15
Certificate issuer: /CN=6935e5f0-57c3-49af-bbca-0feb72f3c19b
Certificate serial: 010D0C9F4328584862658A3BB862F88DD0910400
Authority key identifier: 6B:A9:25:AB:2E:3C:50:09:B3:A3:40:A3:2A:47:41:4D:25:59:1C:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/e7022e3a-f48f-338a-ad62-7a1b32063e4c.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 14618
IP address blocks: 205.235.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:8a:3b:b8:62:f8:8d:d0:91:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6935e5f0-57c3-49af-bbca-0feb72f3c19b
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=f5cb7fd0-7d5d-4128-89ee-0121c2532276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:0f:85:a6:ae:74:c2:ab:5a:90:05:58:d2:
6e:1e:b0:93:20:05:c0:d4:53:51:ce:c8:67:fc:17:
74:57:69:de:06:03:4f:7d:e8:9a:9e:50:46:1a:24:
be:1f:63:96:5b:92:c9:88:a7:f3:63:c6:c3:cc:ef:
8e:0b:a4:7a:ae:88:1b:73:ab:b3:d0:0d:11:c1:02:
ea:f5:c1:33:ef:2b:10:d1:f4:f6:98:e3:12:4b:0e:
0b:46:38:44:d0:9c:13:a3:34:6d:e4:d9:5a:55:22:
ff:c8:46:3e:96:cb:6f:32:99:ee:0d:7d:a9:78:f7:
41:c1:90:26:a4:42:e4:fb:79:c3:fc:20:14:8f:92:
8a:bd:99:f8:12:44:e5:73:e1:6c:bb:70:21:6e:bc:
4a:15:c9:c9:41:75:74:76:ba:76:fc:2e:38:4e:4c:
98:40:1b:0a:06:6f:27:65:ef:a5:78:fb:2b:70:0a:
2d:64:23:dc:b8:ae:59:d1:54:06:e0:56:00:f4:1a:
f4:40:4c:01:5b:66:be:a2:e0:07:aa:42:24:5f:60:
d8:33:ca:47:fe:5a:56:07:cc:2c:d5:3c:cc:f7:b9:
39:92:b5:b5:e3:9b:2c:4a:5b:a6:34:17:11:18:fd:
9f:fa:60:55:ac:3e:75:59:b2:25:85:ed:df:dc:dc:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A8:0B:03:FB:83:F0:E6:BB:94:FC:92:1E:51:E0:40:81:01:4D:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/e7022e3a-f48f-338a-ad62-7a1b32063e4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/6935e5f0-57c3-49af-bbca-0feb72f3c19b.crl
X509v3 Authority Key Identifier:
keyid:6B:A9:25:AB:2E:3C:50:09:B3:A3:40:A3:2A:47:41:4D:25:59:1C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer
sbgp-ipAddrBlock: critical
IPv4:
205.235.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:b7:a9:ce:3b:e8:ce:fb:00:5f:92:f6:56:d4:ab:c4:d7:35:
03:c3:f1:8d:35:70:61:18:0b:49:93:85:62:91:ab:9f:0f:cf:
c6:4f:f2:84:48:fb:5e:4c:e2:c4:44:7e:ff:12:7b:60:43:a8:
b0:fb:2a:cf:42:b1:99:b8:11:11:c4:94:47:60:b6:05:7e:21:
47:d4:80:9e:f3:03:b0:8c:d4:6c:f9:8f:48:63:5c:23:32:fb:
f1:82:d4:c4:78:d8:fd:37:03:a8:ef:d4:05:eb:88:6c:54:3f:
9a:49:54:7a:9f:ec:7a:a1:d6:32:5f:9f:04:19:b7:c0:a4:80:
37:e2:4a:d2:e8:6f:6a:57:9d:fd:c8:b0:cd:b8:70:aa:12:32:
10:00:2a:76:f5:7a:a2:82:99:80:da:14:38:9c:40:18:f1:fe:
25:fc:a6:b0:2d:66:7a:7a:48:e0:01:80:c5:81:3e:f8:b0:f1:
69:7b:c1:8b:1c:cc:ea:ba:c8:45:93:9b:66:66:b9:5c:6a:c1:
d5:0d:ef:83:60:f7:91:06:68:f9:aa:3c:27:0f:fc:a3:af:94:
8e:45:c1:e4:ed:5b:c3:01:a1:21:ea:9e:0a:a0:ea:5f:59:7c:
2b:5d:7c:9c:06:de:3b:3f:e9:2f:7b:e7:36:1c:90:f9:fb:b7:
11:b2:75:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:35 2025 by rpki-client