Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa
File: 0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa (raw, json)
Hash identifier: kttf1Bdjmw2nIbpLAsvcNCl+f9e7gXRaZ2f0b8BNGeM=
Subject key identifier: 10:85:61:6D:9E:5E:3E:9B:31:D5:80:A1:59:98:A9:43:FC:C1:A2:EC
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584875F05713D825E6F108B470E0
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa
Signing time: Tue 07 Jan 2025 02:00:39 +0000
ROA not before: Tue 07 Jan 2025 02:00:39 +0000
ROA not after: Mon 07 Apr 2025 01:00:39 +0000
asID: 4540
IP address blocks: 205.236.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:75:f0:57:13:d8:25:e6:f1:08:b4:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Jan 7 02:00:39 2025 GMT
Not After : Apr 7 01:00:39 2025 GMT
Subject: CN=46911833-88ce-418b-80d6-398e22088220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ea:2e:c2:cc:e3:a1:b4:4c:35:89:00:ca:79:
ea:a5:e5:61:c2:ae:01:62:16:aa:c7:eb:9e:c4:ee:
e2:ba:17:24:40:d8:80:c4:35:2f:6a:52:49:94:b8:
1a:f9:c8:60:98:7e:6c:40:67:1d:55:43:c2:9e:69:
80:e1:f6:f0:49:6f:30:8a:05:1b:7d:d8:c0:5a:66:
e3:42:40:23:a9:6d:17:40:45:82:de:be:50:cc:28:
04:70:37:fe:de:ae:f1:b5:82:2c:33:7c:24:9d:d5:
f5:19:a8:4b:0a:1d:5c:65:ba:7b:d4:e5:c2:ff:34:
01:fc:42:9f:b6:53:f2:52:6d:a0:af:a6:77:d4:8d:
8e:1a:0f:7c:cc:2f:8d:e9:66:93:ff:e0:ff:7f:01:
5a:a1:01:0a:35:41:0e:71:1f:df:1a:74:5d:50:e5:
4f:1c:50:b5:63:35:15:76:cf:75:82:8e:ed:b9:ec:
8a:fa:ce:57:46:3e:ad:e1:6b:af:36:8a:c7:1d:68:
94:28:a8:5b:93:f6:b8:66:67:35:81:e9:79:df:5b:
02:11:ec:65:0c:80:53:f3:41:ad:57:1d:f3:d5:c1:
ac:b8:1a:86:f7:e0:75:e5:8e:66:a7:25:ae:8b:c0:
98:31:8b:26:55:26:24:dc:14:37:75:97:68:2b:88:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:85:61:6D:9E:5E:3E:9B:31:D5:80:A1:59:98:A9:43:FC:C1:A2:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
205.236.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:43:be:a5:3d:87:65:5d:d2:64:2b:be:1e:62:f3:11:8f:d6:
02:9e:07:46:25:d9:1e:ba:b8:c6:a8:2e:fe:01:af:e2:e4:df:
68:2f:0e:8c:d0:ad:0e:3a:e1:99:10:9c:bf:36:a6:9e:cc:ab:
90:e9:08:3b:a1:5c:b6:95:f4:d2:b3:9c:46:8e:a5:07:cb:3a:
e5:9a:8b:45:51:10:0a:7d:f0:ec:58:fc:cd:bc:b1:fe:7c:b4:
21:21:85:c2:48:c7:93:ac:fa:78:7d:aa:2a:ca:d1:82:3d:65:
1f:a6:cb:1b:54:1c:83:96:85:1e:47:c0:9f:2f:de:94:18:9b:
29:4c:6d:54:54:da:d0:2b:bb:53:f6:c6:cf:10:24:f2:64:b4:
b8:64:e7:25:c8:5a:87:a6:eb:b6:be:e2:8f:12:9d:0b:82:56:
39:a9:05:75:99:57:63:35:57:b9:a6:28:3e:54:50:2b:f0:40:
71:79:97:52:74:fc:0a:86:42:77:9b:04:dd:bf:09:f3:9d:53:
64:e2:58:44:f6:6c:34:06:a2:a4:66:e6:21:81:d2:73:dd:e7:
68:df:f0:f5:cf:e8:b9:0d:34:bb:82:48:88:65:34:80:15:6d:
82:2c:ac:24:5d:8a:c4:a2:41:19:75:a4:d9:ad:00:b8:f1:d8:
2f:c9:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:30 2025 by rpki-client