Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/2a125135-c767-3cdb-a5c1-2d3d83205056.roa
File: 2a125135-c767-3cdb-a5c1-2d3d83205056.roa (raw, json)
Hash identifier: G1jUpXOTMu17dn12Vy0CK0gK8Sb6fZpLJX8dCgD7r90=
Subject key identifier: C4:84:79:75:AE:39:35:6C:04:50:A9:16:77:6C:62:E9:9B:3B:04:F1
Certificate issuer: /CN=7cac21fa-fb8a-4352-9772-6995e344f72c
Certificate serial: 010D0C9F4328584802150DFF12B0929652B79B40
Authority key identifier: 4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/2a125135-c767-3cdb-a5c1-2d3d83205056.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 20055
IP address blocks: 205.196.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0d:ff:12:b0:92:96:52:b7:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cac21fa-fb8a-4352-9772-6995e344f72c
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=172a2daf-0002-4455-9195-79ef38aee2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:d2:b3:4c:21:17:72:e7:9e:02:28:d5:2f:
4e:74:f0:4a:0d:ee:e5:28:e3:10:1d:c1:68:17:76:
da:56:4c:c2:3a:4a:7b:c1:f5:52:e4:d6:bd:d0:0a:
1f:91:9c:4f:25:56:ca:b9:56:2f:34:48:56:02:64:
1b:22:87:32:95:a6:f3:36:c4:f2:be:71:a3:22:f9:
e0:c7:39:b1:05:e4:8a:e7:a6:65:cb:dc:66:8d:6e:
15:53:2a:9f:e3:a6:9e:57:5e:41:e3:11:96:23:7b:
98:18:65:83:3c:64:ea:55:98:e0:14:5a:38:95:44:
72:02:52:f7:5f:a7:20:bb:99:c0:d5:3d:66:22:e6:
f6:14:69:74:c1:73:c4:58:b9:48:cf:a5:90:48:a3:
b0:53:76:22:7d:0b:74:d3:82:0f:cb:f4:00:d8:ed:
4e:b9:a0:45:31:b8:31:35:d5:5e:20:e1:62:9d:35:
d6:27:1b:7f:ac:47:2d:8f:89:97:76:bd:aa:ea:f7:
61:dc:a1:6a:49:4a:48:f7:34:39:32:63:49:a6:92:
81:e8:86:36:01:e5:25:db:d2:32:dd:46:0b:27:91:
12:c8:86:09:ba:4d:e6:66:98:2e:2d:e1:f5:39:d5:
18:37:e0:0a:47:7a:6b:6e:c2:8d:18:b1:04:74:83:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:84:79:75:AE:39:35:6C:04:50:A9:16:77:6C:62:E9:9B:3B:04:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/2a125135-c767-3cdb-a5c1-2d3d83205056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c/7cac21fa-fb8a-4352-9772-6995e344f72c.crl
X509v3 Authority Key Identifier:
keyid:4E:53:DA:A7:BE:CE:C4:F0:65:FF:69:82:59:35:CF:9B:00:4C:A2:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cac21fa-fb8a-4352-9772-6995e344f72c.cer
sbgp-ipAddrBlock: critical
IPv4:
205.196.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:34:2f:16:12:88:d3:d0:f2:7d:9d:a8:4d:d9:24:38:5b:88:
a3:74:d6:e6:bb:52:34:31:02:18:37:33:75:9b:06:21:41:b5:
bf:e1:cf:9e:d4:d4:4c:dd:3c:bf:64:16:37:d8:5d:83:48:97:
14:c3:ba:b3:1e:64:e4:22:87:e5:26:ba:aa:aa:5b:8f:b8:08:
79:92:01:f6:61:ed:02:f2:13:b2:b0:81:a5:89:9a:38:3f:25:
0d:dc:36:1c:79:b9:ef:ed:72:df:86:1f:76:06:1d:01:4b:93:
ce:bb:f7:1e:b7:0a:d6:77:6f:9a:cc:39:db:34:28:e4:37:20:
8c:fd:76:48:41:b3:3d:b2:33:51:fd:3e:90:f9:df:b6:a3:b9:
51:7a:1c:07:8e:a9:93:34:0d:0b:ae:41:95:da:64:d4:5d:c2:
78:3c:f2:9e:3b:68:e0:e7:1e:02:9e:9f:ce:02:14:59:3f:ad:
a4:6e:17:94:c9:91:71:4a:69:d1:46:5d:99:28:43:30:90:7c:
ac:2c:af:08:48:8f:ff:0b:3a:0d:06:8f:82:09:60:2c:47:7c:
a6:e9:36:bf:50:85:60:5c:95:5f:3d:09:85:ef:94:f2:88:5e:
45:66:50:83:e7:4a:16:1b:4b:23:ac:73:de:b9:a9:ac:25:1e:
6c:00:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:54:48 2025 by rpki-client