Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6c26a249-f6fa-3e28-8211-4f6bc711d1d0.roa
File: 6c26a249-f6fa-3e28-8211-4f6bc711d1d0.roa (raw, json)
Hash identifier: gPEXQWr5zXxXI/8GCwYgoTsytu4Wq32wL5lAIjdch5E=
Subject key identifier: AA:8E:B4:88:6F:A4:A1:43:01:CF:86:45:69:DD:FE:60:09:7E:C2:20
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3C6D11B181CD2382E480
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6c26a249-f6fa-3e28-8211-4f6bc711d1d0.roa
Signing time: Mon 30 Dec 2024 18:10:37 +0000
ROA not before: Mon 30 Dec 2024 18:10:37 +0000
ROA not after: Sun 30 Mar 2025 17:10:37 +0000
asID: 81
IP address blocks: 204.84.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3c:6d:11:b1:81:cd:23:82:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:37 2024 GMT
Not After : Mar 30 17:10:37 2025 GMT
Subject: CN=5092ea6e-f050-472c-9081-11b5ffa407ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:62:2d:68:bf:a4:5a:c4:bd:5d:6a:f5:55:
b5:03:95:bd:4b:a8:87:8f:01:c3:05:3b:52:dc:45:
7c:0d:19:be:a0:a0:2e:26:23:f6:06:24:1e:f7:a5:
a6:cf:a2:79:4b:bf:36:07:20:e6:ce:6b:9a:68:b2:
42:5b:c9:10:35:cd:91:93:8e:08:48:8e:a4:5a:71:
00:f2:42:11:e1:bb:ec:aa:4b:f4:20:fc:dd:29:b6:
6d:5f:be:34:4a:d9:bc:34:a1:ea:b0:df:59:1d:04:
f3:6b:1d:3f:bb:40:4b:fb:57:84:0a:9d:36:0f:6b:
ae:7a:58:c8:46:25:d9:21:85:9f:14:b2:2f:bb:f2:
73:4a:27:03:6c:8a:1d:ad:b3:d9:6d:0a:93:d2:10:
61:9b:ed:ca:71:2f:3a:15:e9:5c:7e:c0:ef:d7:73:
3e:f2:6c:61:76:fd:70:02:f1:00:48:3a:83:96:6a:
f8:5b:8f:f4:b8:0a:68:44:0e:46:36:bd:49:db:a6:
f2:68:37:79:ca:cf:18:8e:30:84:b0:52:3b:df:0e:
19:4e:31:18:bd:85:f2:69:4b:ea:36:3e:7a:e4:c0:
bb:26:f5:97:7e:1a:f6:c4:ed:90:7b:9e:6d:aa:9a:
74:92:50:31:f1:ec:1b:1a:55:7a:fb:ca:26:59:df:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:B4:88:6F:A4:A1:43:01:CF:86:45:69:DD:FE:60:09:7E:C2:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/6c26a249-f6fa-3e28-8211-4f6bc711d1d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.84.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:cc:a9:2c:25:e6:ac:d2:71:7b:ba:40:0f:f9:49:44:4a:d8:
8f:31:a2:28:d7:59:f9:88:25:e3:b3:68:78:ce:0f:f6:ae:38:
af:d6:6e:e5:32:85:11:d1:63:18:31:22:d3:69:c8:be:26:79:
c7:c1:bd:27:b3:fe:97:58:eb:7a:86:80:40:c1:f2:ac:69:16:
d6:73:c5:01:65:0d:4c:9f:8d:66:68:8d:ba:28:95:d5:bd:e1:
8e:e7:49:c0:e8:0c:a2:ff:45:40:b0:f1:a0:d1:a9:8c:a7:2c:
cb:ea:c3:e0:51:15:dd:aa:9d:0a:d4:3e:5d:1c:18:10:f3:e0:
f4:6d:9f:18:55:02:37:45:b8:e1:48:69:bf:f3:8c:7d:b6:a2:
0f:c3:52:1e:87:0c:db:a2:62:a7:04:14:f2:84:7d:18:65:20:
7c:d9:13:d3:4e:f5:a5:6a:f6:53:9f:ad:d1:9c:24:c7:c3:4a:
cc:49:1d:cd:1b:0c:e8:1e:cf:96:4f:3d:4a:25:1a:b4:51:7f:
78:a6:19:b6:ea:60:0b:1f:47:e4:82:f9:82:0b:45:03:01:48:
52:c2:ca:13:19:6d:64:e7:3a:08:ed:c6:b9:22:5b:4c:9e:c2:
c9:ae:9f:87:df:cb:b0:43:71:fa:7d:ff:c0:c3:e0:43:91:2c:
b7:dc:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:46 2025 by rpki-client