Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43007c65-b61f-3ce9-86de-f9f14a6c9617.roa
File: 43007c65-b61f-3ce9-86de-f9f14a6c9617.roa (raw, json)
Hash identifier: IC52LbdmQPazI5iXN5lMaW7UrLtw7b4TtBLQDLBPN4Y=
Subject key identifier: 99:D4:2C:C2:9B:3D:4B:D4:32:FF:99:C7:B3:C6:8E:21:63:03:12:4A
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3D1DCF29FC722128E580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43007c65-b61f-3ce9-86de-f9f14a6c9617.roa
Signing time: Mon 30 Dec 2024 18:10:37 +0000
ROA not before: Mon 30 Dec 2024 18:10:37 +0000
ROA not after: Sun 30 Mar 2025 17:10:37 +0000
asID: 36850
IP address blocks: 204.84.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3d:1d:cf:29:fc:72:21:28:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:37 2024 GMT
Not After : Mar 30 17:10:37 2025 GMT
Subject: CN=f70f6ead-199b-4e03-85b0-73384452a8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:a2:5f:5d:e4:ec:fe:cb:c0:89:66:89:6f:
df:4c:46:2f:32:98:ac:5e:24:17:ec:3f:81:f6:fa:
12:6a:1a:16:54:92:c8:1e:b1:a0:17:40:4f:86:2e:
4d:ee:9f:0b:1b:ed:2b:e7:f4:7c:9d:3c:6f:e1:82:
90:1c:f4:e9:99:a9:c1:1d:9f:10:58:04:7d:4a:94:
e5:96:47:5a:24:6b:47:83:97:b8:74:93:3e:5b:d9:
e4:50:3d:41:c3:16:0b:7c:6d:79:e9:4b:4e:69:63:
ce:36:ce:0f:6f:52:99:6d:5f:de:5f:dc:0d:01:c7:
30:c3:50:36:e7:8a:52:0e:cb:72:14:73:93:5f:81:
90:16:33:ae:14:bd:54:5a:30:e3:4d:b1:2e:c3:b9:
97:eb:65:30:c1:91:a5:41:67:d6:0a:14:75:32:9a:
b9:47:56:6d:07:b4:ea:e0:51:87:99:ac:53:ce:96:
63:a4:43:31:e1:97:92:de:47:b8:9f:4b:29:ad:f6:
79:b7:25:32:76:b4:44:25:57:2c:f9:76:37:09:e3:
25:d5:1d:d2:76:36:ed:67:57:ae:6e:58:15:ae:fa:
e6:80:45:79:a8:5d:2b:31:b0:64:ca:43:ff:0c:c0:
63:41:d0:a0:29:0b:5d:ff:c0:dd:03:23:85:34:ba:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D4:2C:C2:9B:3D:4B:D4:32:FF:99:C7:B3:C6:8E:21:63:03:12:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43007c65-b61f-3ce9-86de-f9f14a6c9617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:eb:70:71:88:3e:d4:fa:3c:35:86:83:d7:8f:b4:4b:b6:a4:
cc:35:ef:63:d0:d2:24:b0:e8:df:45:22:91:77:cb:a3:72:b0:
a7:59:a1:c7:9a:69:1d:83:d0:49:67:b8:ad:5f:5e:af:42:9f:
11:fb:3b:8b:3d:fe:c7:14:3b:69:6e:c0:63:5f:77:f5:8e:6d:
b9:fd:cc:7e:2a:42:05:65:3a:ac:ce:6b:e9:7f:94:9e:d3:36:
c5:5a:bb:2b:4d:6f:1a:94:9e:e6:c3:cf:cd:95:ce:84:24:68:
cf:e5:72:e3:b0:4a:88:99:21:37:29:58:f8:ef:ef:2a:54:29:
79:94:e2:5a:ef:2d:f7:d4:c6:7d:24:d6:19:2a:ad:fa:7f:69:
1b:47:e4:67:9c:a3:89:a6:4b:9c:78:1b:e9:34:2e:24:86:69:
71:74:29:64:1b:6a:cb:1c:e9:98:63:fc:e5:cb:52:42:13:d6:
bd:ed:9b:e9:9f:fb:28:43:43:a2:64:f4:14:21:32:52:d0:28:
c8:dd:68:e4:1f:2b:8e:35:04:5e:4a:6c:ab:20:ea:a4:0f:2e:
bc:9f:8a:3f:aa:5f:7d:36:b2:4f:61:6d:ed:71:79:8f:f1:a2:
94:0c:fd:14:d3:70:d2:e7:b2:7a:14:6d:80:f6:4d:31:99:2a:
30:40:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:04 2025 by rpki-client