Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/a8c350c4-f79b-398d-b15e-aa58ed9800c7.roa
File: a8c350c4-f79b-398d-b15e-aa58ed9800c7.roa (raw, json)
Hash identifier: VP5LQ0hEF8PRDEq9KqS+ilWHIT076QFVkyDtxF7y1Hc=
Subject key identifier: 24:09:89:1B:73:5B:B3:D3:86:C4:E6:CA:20:AF:31:89:84:2D:CF:5F
Certificate issuer: /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial: 010D0C9F43285848789CF6A5DCBE64E889605D00
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/a8c350c4-f79b-398d-b15e-aa58ed9800c7.roa
Signing time: Wed 08 Jan 2025 01:00:09 +0000
ROA not before: Wed 08 Jan 2025 01:00:09 +0000
ROA not after: Tue 08 Apr 2025 00:00:09 +0000
asID: 21928
IP address blocks: 204.235.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:9c:f6:a5:dc:be:64:e8:89:60:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Validity
Not Before: Jan 8 01:00:09 2025 GMT
Not After : Apr 8 00:00:09 2025 GMT
Subject: CN=63a5822a-6c3b-4933-8cae-c62b924095ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:c2:42:bd:b1:ce:41:43:45:4d:3b:99:51:
cd:d3:94:82:97:8c:f3:cb:8c:e2:6e:5a:09:63:00:
84:24:3f:8c:68:db:f6:82:e0:fe:5d:93:f2:72:7c:
e2:ae:cb:85:05:3d:e5:18:21:6d:9e:98:9e:e0:86:
df:33:d7:fa:da:a4:af:c5:f3:a5:d7:89:12:9b:5c:
3c:f4:be:42:11:56:77:06:eb:e5:9c:8e:c6:b9:e9:
39:06:a6:b6:61:47:57:35:5d:ab:d3:77:29:bb:c0:
ac:ab:8b:0e:af:bf:4a:fb:dc:60:2f:28:e3:87:41:
ec:3b:a0:d4:93:01:91:e8:39:a9:4f:1f:e2:bf:b4:
62:83:07:03:7f:d2:3e:92:3b:c8:ab:ef:b1:a9:a6:
2b:b6:f5:6c:b9:cf:cf:ae:27:58:fa:b5:f4:35:ce:
1b:e1:ce:f5:d3:c0:9a:e4:a7:9c:3a:64:db:d8:ee:
4d:c9:81:81:6b:9a:fc:43:ef:b2:30:94:36:36:8f:
f0:c3:ef:de:99:30:73:09:55:26:57:c0:44:89:b2:
d1:43:cc:21:98:51:48:12:a7:a1:67:a3:45:ae:78:
59:c0:01:52:f8:69:ea:e7:d2:00:65:86:8a:98:58:
e9:6f:fa:bc:86:02:30:e9:26:55:b0:81:8f:2a:72:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:09:89:1B:73:5B:B3:D3:86:C4:E6:CA:20:AF:31:89:84:2D:CF:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/a8c350c4-f79b-398d-b15e-aa58ed9800c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
X509v3 Authority Key Identifier:
keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
sbgp-ipAddrBlock: critical
IPv4:
204.235.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:0a:ee:1c:d5:a1:bf:6b:16:ff:68:f2:9f:75:44:78:2e:ef:
89:b3:7f:9d:5a:42:07:f3:de:53:ca:95:f5:6c:b8:44:2b:96:
62:b1:91:12:1f:57:88:2f:24:11:04:c5:b1:1d:6a:59:8d:f8:
48:ad:26:ea:97:42:2e:5a:35:bc:eb:fe:b1:04:a3:25:6a:8e:
a6:01:75:5d:79:f5:6b:7e:bd:8a:47:98:31:78:58:b3:d7:62:
39:71:0d:42:09:46:a6:e7:b7:2b:38:17:ed:3b:39:93:5b:14:
7f:25:73:04:ed:71:03:11:17:f0:52:c4:94:eb:31:0d:0b:38:
60:b9:32:61:dc:7b:f0:bd:ef:af:dc:ca:1b:91:b7:e6:69:58:
78:f0:a3:d3:68:b7:b7:61:7e:84:d1:0d:de:99:18:2e:8e:e9:
95:e2:32:56:39:ce:7a:15:cd:59:5d:38:85:7e:94:75:e7:bb:
3a:85:6a:37:90:29:49:db:85:b6:27:90:d7:d4:51:92:47:57:
f4:6b:c2:ef:48:23:57:93:4e:65:ff:d4:35:7a:14:cc:a9:fc:
02:f6:aa:8b:6c:50:58:22:5b:06:2d:28:2c:b8:a1:92:7c:41:
7c:1c:97:87:e6:70:6f:40:bb:8a:01:7f:83:81:1f:cf:0c:ba:
79:82:d2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:33:08 2025 by rpki-client