Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24262f87-ddc7-32f3-b101-d568cf9038fc.roa
File: 24262f87-ddc7-32f3-b101-d568cf9038fc.roa (raw, json)
Hash identifier: MWWusUYxDpulcQHlneIgfdf8X3e6ipCjUP1ukZv6U54=
Subject key identifier: 77:7B:41:0D:9E:C7:1F:CD:87:AD:5F:9F:C7:49:D9:29:F5:9B:6A:AB
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3D348C0F7185C8D40340
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24262f87-ddc7-32f3-b101-d568cf9038fc.roa
Signing time: Mon 30 Dec 2024 18:10:37 +0000
ROA not before: Mon 30 Dec 2024 18:10:37 +0000
ROA not after: Sun 30 Mar 2025 17:10:37 +0000
asID: 20197
IP address blocks: 204.84.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3d:34:8c:0f:71:85:c8:d4:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:37 2024 GMT
Not After : Mar 30 17:10:37 2025 GMT
Subject: CN=93aac473-1dcc-430a-8414-aee7dbf4c0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9c:91:24:12:ee:5b:1b:35:c9:9f:95:2f:2c:
65:3d:3a:08:94:87:02:36:77:8c:84:a2:6e:cf:f9:
a1:a0:9c:6b:27:f8:39:7d:07:e4:34:05:2c:41:a9:
c3:e4:4e:31:3a:a1:02:12:b3:fb:6a:e3:96:e5:f5:
30:e9:0b:87:b7:e2:94:32:16:43:95:9b:5b:5e:a7:
6e:5c:3d:c2:5d:f0:2d:50:f7:9e:97:d2:7d:83:73:
10:ba:e3:e8:69:43:9e:28:43:e4:a7:9b:c3:8f:05:
12:f5:64:71:db:cc:8c:01:d5:4c:ba:92:4b:2b:3a:
88:e3:47:be:db:9f:24:53:73:51:68:b9:3f:10:1c:
6f:83:af:6d:66:ae:62:f6:04:5b:4e:f0:4b:76:85:
05:7e:37:fb:b7:03:dc:47:9c:2d:ec:9b:c5:24:7f:
68:08:0f:27:88:48:56:42:f0:92:41:28:2c:e9:f4:
ab:a1:42:4d:85:83:7d:62:ce:52:1a:eb:fc:80:17:
cd:ff:00:94:fa:91:ef:74:7c:d2:48:d5:1b:66:a6:
4b:18:6f:f0:25:b6:47:75:33:2b:15:9f:73:b1:9b:
19:51:f1:80:d1:aa:68:38:da:53:6e:98:54:08:89:
7a:f4:66:05:50:22:1d:65:aa:47:18:d4:09:0d:98:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7B:41:0D:9E:C7:1F:CD:87:AD:5F:9F:C7:49:D9:29:F5:9B:6A:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24262f87-ddc7-32f3-b101-d568cf9038fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:00:6d:b9:cb:64:09:fe:4f:b8:05:56:4f:95:ca:5d:37:93:
2a:d9:a8:e0:24:2f:4e:50:c7:23:da:74:bb:72:60:7d:9c:d5:
66:f1:81:a8:6e:4b:45:66:51:e9:71:69:78:23:7b:b5:88:e7:
71:bb:78:9e:a4:d7:cd:cc:8e:46:9a:a8:43:c4:29:c1:ab:95:
03:59:03:94:3f:bb:a9:15:92:19:37:3c:9e:fa:ff:64:23:a0:
02:0b:ea:d5:64:e5:45:4a:30:a1:f1:b9:ea:45:4a:11:45:1c:
47:ef:6c:91:ad:05:ed:3a:a6:ad:0f:f3:c7:f7:1d:55:63:e6:
40:ef:13:c1:8d:4f:1c:b7:53:ea:f1:6d:7b:ac:81:fc:62:2d:
0c:cd:8a:10:d0:92:4f:56:5c:24:4b:3a:0f:21:a4:30:00:22:
95:50:cc:22:43:d7:e9:88:14:24:28:44:d3:eb:08:b8:b8:26:
83:a0:76:f1:3b:5b:e6:18:35:d3:c9:1b:8f:f9:1e:c1:8a:88:
b4:2f:a9:8b:65:e0:6f:91:cf:ce:43:45:2f:dc:2f:fe:fc:8f:
bf:6a:c6:bb:97:7d:1f:25:df:7a:00:e6:d3:c2:dd:c5:87:3d:
2a:f9:ab:81:a3:fb:c5:31:75:10:04:d4:a3:be:c7:49:5c:c1:
75:f3:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:32 2025 by rpki-client