Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ca1c06e7-f5e7-3ee2-bc77-8974aab0e7ad.roa
File: ca1c06e7-f5e7-3ee2-bc77-8974aab0e7ad.roa (raw, json)
Hash identifier: cXuc4UmmXqepUwfM2Dev/fDBjaEQ7gl6ODDUBE3vtzs=
Subject key identifier: 47:48:4E:4B:6D:32:85:51:2D:24:F9:46:99:67:E9:A2:31:EA:91:5A
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3DD360DB7BF42BEBCC80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ca1c06e7-f5e7-3ee2-bc77-8974aab0e7ad.roa
Signing time: Mon 30 Dec 2024 18:10:38 +0000
ROA not before: Mon 30 Dec 2024 18:10:38 +0000
ROA not after: Sun 30 Mar 2025 17:10:38 +0000
asID: 81
IP address blocks: 204.85.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:3d:d3:60:db:7b:f4:2b:eb:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:38 2024 GMT
Not After : Mar 30 17:10:38 2025 GMT
Subject: CN=6652a018-77dc-46a6-bcbf-290e1b37fb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:07:f9:29:d1:94:2c:45:0c:5d:17:a2:70:
b3:3a:1d:e5:ff:14:a3:b0:97:7f:f0:2b:e8:5d:f1:
f3:be:0b:58:14:e4:b6:cd:36:73:3c:9f:58:af:be:
33:e8:bd:de:13:15:fd:8c:d1:79:3b:d6:1b:7c:86:
c1:f3:de:ec:3b:fd:cc:07:02:bc:bb:c2:18:71:ad:
dc:5f:a4:3f:98:dd:49:48:6d:91:0e:5c:93:57:d6:
ff:9e:3d:e3:d8:89:d6:b9:ca:e8:d0:1d:2b:15:60:
ae:17:79:8c:60:bb:e4:6b:d4:37:8e:85:1a:3c:72:
05:ea:1c:4f:89:50:27:a4:1a:17:4a:f1:50:40:50:
e7:4c:ef:28:d5:93:87:1d:37:d7:03:b8:d1:f6:a2:
78:b9:93:35:04:3a:2f:08:3d:3e:a5:0b:c8:0a:ee:
39:a7:74:ca:64:bd:a4:cc:6d:29:ba:8a:bc:03:0d:
49:4e:a2:ea:03:d0:6b:50:ae:9b:f3:9a:e3:07:62:
75:1a:97:0b:5e:4c:53:3c:71:b8:9b:fc:51:c4:6d:
13:07:a2:1a:90:3e:e3:58:a3:60:1d:8a:99:33:77:
56:7e:20:84:bb:e3:a8:fe:36:73:50:92:7d:8c:c1:
14:14:f6:a6:f8:eb:28:30:02:39:ff:5c:a2:46:1d:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:48:4E:4B:6D:32:85:51:2D:24:F9:46:99:67:E9:A2:31:EA:91:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ca1c06e7-f5e7-3ee2-bc77-8974aab0e7ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.85.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:17:b6:ae:ed:53:63:c4:72:f9:f1:75:68:20:85:a5:9e:68:
28:c2:4c:16:71:ea:25:23:c7:17:3b:bc:65:c6:91:a4:78:b7:
17:90:54:92:b5:32:a3:6d:00:22:9b:45:9c:64:69:1d:5e:ff:
d3:56:51:a7:3a:85:40:90:6b:3f:ed:ec:85:65:37:ef:78:11:
a3:18:40:1f:be:37:99:de:ed:2a:e7:a3:dd:ac:45:68:05:ee:
c1:27:c8:f5:55:11:11:c6:51:6d:4d:d8:2f:26:8a:1c:69:f4:
f8:a0:68:ad:ad:47:87:c4:02:7d:30:a1:9b:a8:8b:b9:19:84:
bd:77:ca:a7:3c:69:33:e6:6a:71:20:a9:1b:2c:ee:a0:aa:72:
ce:13:79:40:7b:5d:18:8a:13:9f:a1:c1:d8:ed:f4:f7:71:6d:
41:c5:96:6c:d9:61:f3:88:26:57:c7:a9:3e:ca:43:2b:09:4b:
b8:9e:03:cf:71:bf:03:42:84:50:73:74:8c:98:84:b1:74:1e:
cc:2c:a8:62:67:83:01:17:58:7e:01:41:e9:b8:c9:0f:d6:a0:
ee:2a:ac:e8:f2:63:b6:3b:d7:ae:ea:f8:2b:e4:01:34:7d:14:
d1:55:23:f0:8f:b6:8d:65:79:72:37:53:38:c9:f6:8a:fb:a0:
21:f1:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:20 2025 by rpki-client