Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/73e13c3d-2f0e-3639-9d11-6c07b6459602.roa
File: 73e13c3d-2f0e-3639-9d11-6c07b6459602.roa (raw, json)
Hash identifier: vJi/OrNkjeTRgG3eXSNeZEEzPhMfIAdUNIjD8wUuGyg=
Subject key identifier: 5B:29:21:9E:D3:27:60:95:03:EC:A9:6C:58:2B:D1:40:49:C7:BC:32
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3DA66A9D958B68282980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/73e13c3d-2f0e-3639-9d11-6c07b6459602.roa
Signing time: Mon 30 Dec 2024 18:10:38 +0000
ROA not before: Mon 30 Dec 2024 18:10:38 +0000
ROA not after: Sun 30 Mar 2025 17:10:38 +0000
asID: 36850
IP address blocks: 204.85.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3d:a6:6a:9d:95:8b:68:28:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:38 2024 GMT
Not After : Mar 30 17:10:38 2025 GMT
Subject: CN=7aa9854f-c9a8-43e7-8f17-248303ab67f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:97:3d:6f:d1:74:28:d6:04:04:03:66:9c:
2f:76:b5:52:f6:f8:f0:b5:aa:30:aa:4d:14:5a:ae:
e2:98:62:a9:ce:28:23:1a:f7:2a:13:5e:4c:61:d3:
36:a6:55:1c:89:bf:8b:bf:26:aa:fb:19:f9:23:30:
27:97:15:e3:75:c7:68:7d:36:a4:24:d8:29:07:94:
56:a8:84:e0:31:20:2d:73:ee:ce:40:ec:af:4f:4c:
da:7d:e9:09:bb:9c:93:55:f8:f9:82:67:58:a5:28:
2f:d9:fd:67:7c:c7:2e:31:9c:44:93:e2:18:fa:07:
9b:bb:6a:0c:68:84:ab:d1:ad:2a:63:13:f9:40:21:
61:62:58:29:68:d4:d7:59:ea:99:e2:e0:a7:75:46:
5c:10:9e:d5:e1:18:ef:c2:28:83:85:63:9c:0c:17:
8d:1a:89:3b:56:ed:d0:b7:f1:e5:f2:2f:1a:9a:89:
17:5e:d7:d6:93:7b:b1:10:27:03:34:2a:53:d9:e0:
42:91:c8:dc:6a:aa:a8:9e:e6:ee:fe:ff:3c:0b:ac:
f2:e2:58:19:72:ab:80:a6:e9:64:80:5a:eb:d0:ca:
c9:31:b6:0f:99:4f:7e:44:14:2f:9d:cc:d2:e9:82:
44:2e:6d:e7:48:f5:28:9d:79:4c:24:c3:81:93:ea:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:29:21:9E:D3:27:60:95:03:EC:A9:6C:58:2B:D1:40:49:C7:BC:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/73e13c3d-2f0e-3639-9d11-6c07b6459602.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:1e:7b:fd:64:81:6c:2d:b9:74:28:c0:58:94:f1:19:d3:6d:
7f:08:61:95:08:0c:71:a5:93:db:98:b6:2c:19:e3:cd:28:8e:
48:4a:ac:ec:6b:8d:dd:aa:b6:1a:7a:a8:f6:0d:e1:2c:e3:52:
d7:47:17:dc:39:1b:87:04:2d:ae:38:62:ee:d7:7c:6e:8a:cd:
0f:2a:9a:8a:e3:e4:8f:4f:dc:ba:37:37:76:d8:42:75:5e:5a:
16:51:aa:ef:80:75:29:1e:93:5a:ad:96:e5:25:51:86:66:72:
dd:fa:24:2a:a3:7a:f7:45:b2:30:7c:ee:5e:58:4c:95:94:70:
3b:56:07:5e:9c:f5:75:d4:4a:d6:aa:ae:f6:b1:95:5a:8c:54:
c8:5b:40:c7:be:82:0e:54:c7:d4:ce:77:0c:34:ca:f0:8d:df:
f2:bb:d2:ca:bb:5f:d5:48:bf:09:61:c8:8f:2f:82:ea:d6:d0:
86:be:db:36:96:43:c9:be:99:4d:d0:80:e3:84:f3:64:26:26:
a3:b8:02:05:34:db:ef:68:18:c2:65:cc:a5:5f:16:50:bd:36:
d7:27:6c:02:3a:29:6c:32:ce:40:69:c4:b9:e7:98:6f:17:aa:
7a:dc:d5:03:19:7c:77:41:9b:4d:c1:cb:6b:27:61:44:66:82:
51:78:ee:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:41:06 2025 by rpki-client