Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/f18d89cb-9b1e-36e5-a555-7eb2502dedec.roa
File: f18d89cb-9b1e-36e5-a555-7eb2502dedec.roa (raw, json)
Hash identifier: Hb2NvSVIMYQL/r7yb0luK18L6pCnfd75w9XTlLcR/Ho=
Subject key identifier: CA:C7:9D:10:22:37:02:FB:E7:EB:F8:A7:06:56:22:F0:CC:D6:88:DC
Certificate issuer: /CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Certificate serial: 010D0C9F43285848467AB9B395EC0112DA7D1C40
Authority key identifier: D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/f18d89cb-9b1e-36e5-a555-7eb2502dedec.roa
Signing time: Sat 21 Dec 2024 02:00:39 +0000
ROA not before: Sat 21 Dec 2024 02:00:39 +0000
ROA not after: Fri 21 Mar 2025 01:00:39 +0000
asID: 35280
IP address blocks: 204.13.136.0/22 maxlen: 22
204.13.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:46:7a:b9:b3:95:ec:01:12:da:7d:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Validity
Not Before: Dec 21 02:00:39 2024 GMT
Not After : Mar 21 01:00:39 2025 GMT
Subject: CN=a3aaede4-fb91-4785-801e-9d52213f53e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:ce:ad:04:16:0a:0c:a3:98:d6:b4:47:cf:
c5:25:f8:8f:b4:80:11:97:ae:fe:54:0d:95:a7:31:
64:52:e6:57:d0:56:5d:82:37:8c:c0:59:6f:05:fa:
23:64:9b:11:6f:63:f6:20:e5:73:97:88:1d:70:7f:
bf:2c:16:f4:61:3f:35:a2:6d:de:c8:32:06:95:e1:
e0:67:a3:a4:3c:51:5a:4e:29:58:83:f4:28:b5:6e:
80:27:81:e0:4c:bd:c1:9c:85:15:75:ee:f3:cf:b6:
f6:e5:99:6a:b2:8d:b0:52:b2:9c:64:d3:9f:e4:ec:
67:3f:4b:b1:2b:b0:e2:da:4b:70:9a:30:1b:40:66:
bf:3f:53:92:b8:78:69:05:b7:7f:10:22:c7:03:62:
f3:a0:c1:44:04:c7:2b:9f:5f:dc:37:51:a7:cd:a0:
8a:6f:26:c6:42:90:2f:5c:a2:9f:c7:34:69:fa:48:
82:a7:59:6b:24:a2:8c:24:38:3b:ee:99:57:7c:e5:
e1:7c:f7:09:f1:f7:bc:1d:61:c1:de:13:55:be:3c:
d6:2d:cd:0d:53:84:8d:17:3f:9c:b9:d9:d6:97:b5:
ea:09:16:98:4d:cf:a3:29:b1:8d:e8:69:aa:7f:78:
04:26:38:31:8a:11:8e:43:80:16:1c:a8:88:48:ae:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C7:9D:10:22:37:02:FB:E7:EB:F8:A7:06:56:22:F0:CC:D6:88:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/f18d89cb-9b1e-36e5-a555-7eb2502dedec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl
X509v3 Authority Key Identifier:
keyid:D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
sbgp-ipAddrBlock: critical
IPv4:
204.13.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:69:9a:ad:c3:be:5c:82:b2:d6:e5:38:6f:8d:80:c7:e8:2c:
95:c4:e7:56:21:27:84:a9:65:12:02:50:36:e1:ca:c2:5f:34:
96:fb:46:68:1c:d7:da:52:15:e4:22:33:58:1c:08:06:b2:62:
45:a0:4c:71:da:94:0b:65:72:cb:8d:17:c3:3f:9e:03:51:2e:
aa:39:01:bf:dc:c3:da:fd:a7:df:0c:cb:be:18:b6:76:31:a7:
a8:4c:7f:63:77:1e:c5:07:5f:7e:30:c8:1e:f7:e7:f1:69:c8:
91:7b:ab:7f:28:5e:13:81:ab:48:7f:6c:29:0f:a7:1a:95:00:
98:ab:f0:46:29:7f:74:0c:f8:a5:87:79:ec:d2:19:fe:e6:f6:
61:61:ae:49:fe:52:07:cd:79:74:56:3c:b8:91:71:6e:c9:4c:
5b:89:84:f2:f5:38:39:63:27:e4:d7:68:00:8a:e5:c4:e6:3c:
03:90:c9:cd:75:ab:45:5e:53:cb:83:a9:2d:11:2d:79:bb:63:
69:8a:b9:54:30:4a:d5:a5:b1:c2:2c:1f:05:68:ae:33:db:41:
3b:89:76:09:00:9a:7d:93:37:7b:45:b5:6c:74:d0:91:8f:64:
49:69:2d:15:12:f8:40:59:d4:1f:d4:58:bd:2d:49:ba:8f:c2:
e4:b2:0d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:42 2025 by rpki-client