Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa
File: cf4be9dc-75c5-3f44-b4d0-65e111847482.roa (raw, json)
Hash identifier: 5aknglRk3jT2tm4j/X22TCrYRda4SKDyOuox+NgLZlI=
Subject key identifier: D5:36:7D:04:91:35:75:91:AC:74:BD:85:62:88:DB:22:F2:72:AA:2F
Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial: 010D0C9F432858486530401006460AC001F8F400
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 4922
IP address blocks: 204.111.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:40:10:06:46:0a:c0:01:f8:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=969c4053-acc8-481b-8323-e1b20d8d7a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:58:36:6c:f7:73:c0:d0:42:89:db:e3:ad:
39:b0:a3:48:cf:9b:a6:15:a2:38:64:66:ca:17:49:
bf:7e:42:a9:5c:45:09:19:a7:6b:0b:4f:25:67:dc:
c9:e4:84:b1:81:04:fd:71:b7:11:29:29:e3:31:28:
1b:54:4e:92:a0:33:d7:33:84:8a:e9:25:34:2a:f0:
50:df:7d:c2:05:c1:94:03:1f:27:f7:7e:a5:05:be:
16:8d:0c:b6:35:e5:0f:73:9e:32:73:f2:a7:2e:26:
77:5d:40:dc:30:8d:53:40:09:32:b3:63:04:82:ca:
ad:20:31:18:90:8b:f1:d6:e5:6f:c4:3c:68:19:f0:
4e:2a:c7:a6:dd:1d:5b:36:1e:ed:91:73:35:03:f1:
0e:96:ca:ef:9d:65:88:fd:e4:1d:3f:22:8a:10:c4:
6a:18:96:fc:41:b1:c5:a6:04:6f:bf:78:ec:9b:3c:
13:c0:09:82:02:6c:f2:89:5c:2b:6b:c4:59:d8:5b:
1e:74:36:69:59:a0:35:03:84:64:52:ad:1e:0e:c4:
af:4a:5a:bb:06:a0:d5:a7:ff:bd:bd:4b:48:f4:bc:
c7:61:3e:3a:9c:9a:5f:bc:a5:89:da:5b:d2:0d:2b:
24:71:f2:93:98:92:d2:fe:0f:f0:e0:8f:a7:11:2f:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:36:7D:04:91:35:75:91:AC:74:BD:85:62:88:DB:22:F2:72:AA:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/cf4be9dc-75c5-3f44-b4d0-65e111847482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
X509v3 Authority Key Identifier:
keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
sbgp-ipAddrBlock: critical
IPv4:
204.111.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:20:5c:e7:5d:6c:dd:ec:d0:c6:64:e8:61:8a:a2:ac:86:af:
07:40:bb:7e:d1:87:05:29:15:1c:46:b1:ae:16:b7:81:e9:0e:
b2:ad:27:3f:9d:d8:bd:70:3a:b8:aa:f8:88:50:71:5d:7d:91:
93:a7:70:a1:76:9d:10:03:be:69:58:7c:91:80:4b:b5:d3:67:
b3:5e:36:d5:59:b3:ef:2b:65:72:a3:7b:be:7e:56:98:53:b1:
b8:44:06:e4:93:6f:c2:03:26:8f:72:b1:4b:b3:66:48:12:78:
fa:2a:94:c1:e3:35:9d:9d:33:01:5a:80:94:be:35:bc:85:eb:
b0:1d:d1:ee:ae:77:89:09:e5:69:43:e7:34:30:87:f1:10:7d:
d3:c0:24:51:95:29:e5:69:02:7c:bc:25:54:d8:c1:91:68:ec:
3a:89:dd:38:6c:6b:02:30:9f:a1:35:10:a6:80:b6:13:c4:fb:
ad:0f:fc:19:2a:ad:a9:46:9c:51:02:a6:17:5e:94:06:4e:05:
5c:ea:69:ce:c5:c6:19:ee:e5:ac:4e:19:cd:90:73:4c:44:f0:
71:32:09:39:c6:b3:83:94:ab:ce:cc:0f:74:bd:e4:c6:99:f2:
eb:9a:fc:e1:10:af:5e:b4:8f:55:d8:c3:11:27:30:5d:a0:a3:
4e:07:b0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:31 2025 by rpki-client