Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa
File: 04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa (raw, json)
Hash identifier: jIU7GUNtNiXrmF82d9DTyZyRmFFU05hZS4CLNWfOnQs=
Subject key identifier: F7:82:B3:7C:96:88:AB:5E:65:04:C6:91:AB:F5:48:2A:A3:7A:B8:EC
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F05B2AA7ABA492F7C99680
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 204.8.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:5b:2a:a7:ab:a4:92:f7:c9:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=63067b90-35ac-4a0c-b23f-056a1409e33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:d7:f8:a6:97:5e:b2:9b:70:cc:fe:c9:4a:
07:f1:3e:a3:17:39:cb:02:45:fd:c4:0f:1b:3c:57:
3f:4e:94:ea:80:b7:a5:b7:34:9f:00:c0:84:5b:bf:
ab:ca:a6:15:03:33:07:47:20:16:52:6c:2b:12:8f:
67:61:2a:d9:80:72:a9:8f:60:d0:e4:cd:99:62:fe:
9f:73:eb:73:22:d3:f2:ff:dd:52:e6:88:c9:1b:c9:
c9:41:be:ae:66:ea:d2:09:81:db:49:af:80:37:b5:
c7:3f:ed:07:c7:4d:3e:71:07:03:18:cb:79:73:5d:
81:fb:24:9b:7f:93:93:e6:ab:2b:06:18:a0:d5:a6:
f2:65:7b:61:d5:62:5b:86:f2:01:eb:43:3c:e2:06:
11:6c:ed:b8:b1:51:be:58:89:c5:3e:79:5e:03:16:
a8:ae:c4:77:07:c8:67:32:53:d4:3e:0a:97:e1:3d:
93:23:25:43:cf:e0:16:c8:eb:2a:79:58:2d:5c:0e:
b3:73:6b:27:fe:e3:a4:ab:ea:d6:0f:08:c8:7e:01:
10:fb:c5:26:3d:87:07:a2:b6:03:56:b9:ff:38:b1:
b7:ec:a9:aa:0a:84:47:13:85:1c:47:39:70:50:2a:
02:59:a4:15:d6:56:80:99:9a:77:0a:df:0b:32:f1:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:B3:7C:96:88:AB:5E:65:04:C6:91:AB:F5:48:2A:A3:7A:B8:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:bd:1c:84:06:1f:d5:39:3d:6c:40:69:cb:75:6c:dc:09:5e:
52:7c:c3:31:30:07:57:ea:90:66:d1:31:a8:39:6f:cc:5f:1f:
bc:1d:59:e8:11:92:53:3c:ef:fc:cc:40:34:6b:66:6f:fb:96:
4d:8c:92:ea:3d:3b:63:a9:2a:19:df:cd:b3:a4:8a:e0:6f:6a:
80:2f:6c:ab:07:66:46:64:65:c4:77:23:9f:53:e6:ff:b2:ec:
b2:22:f7:11:a9:e7:6f:91:38:99:a5:68:4c:2e:df:dd:74:e1:
e3:f6:29:27:e4:a6:75:c7:48:c2:cc:4f:3d:91:44:72:97:8f:
dc:65:e5:9a:87:f2:cd:e7:9f:27:48:10:fe:17:92:c1:3d:98:
1c:23:b4:4e:62:a3:9a:38:15:79:4b:45:a9:55:c8:c2:3a:fe:
28:8f:7c:3e:05:1f:6c:dd:08:ca:85:a0:3b:72:13:3e:0a:4c:
00:84:46:b1:aa:44:62:f2:44:58:c6:64:d9:31:3a:a5:ff:e0:
2b:e4:7c:4f:9f:a8:ab:24:56:08:ae:06:b7:3f:da:e9:c2:69:
d1:13:0c:df:ec:03:53:9e:e5:0e:7c:94:5f:5e:ee:b6:68:c1:
0d:f4:92:56:08:dc:6e:43:39:d6:2f:94:4c:6d:d8:47:77:01:
2d:15:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:18 2025 by rpki-client