Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/7c4e8ce2-84f8-3ee8-a2a3-754e631b637b.roa
File: 7c4e8ce2-84f8-3ee8-a2a3-754e631b637b.roa (raw, json)
Hash identifier: AP0j7cxEQCeR2cGTlpEbIrtQjONzbpDKlNqa82mjDdQ=
Subject key identifier: 41:C4:F3:FE:4C:69:4C:4F:2F:A5:B3:AF:11:D9:C6:9A:8A:66:C8:CA
Certificate issuer: /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial: 010D0C9F432858488C45CF69CAC538A0E4BA8180
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/7c4e8ce2-84f8-3ee8-a2a3-754e631b637b.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 3423
IP address blocks: 204.193.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:cf:69:ca:c5:38:a0:e4:ba:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=339374ca-fdc2-4273-988f-6757b5391500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:c2:d4:db:09:54:25:8a:9f:7a:d8:b6:b3:
a6:90:df:98:18:08:5d:39:9b:55:dc:17:9e:29:9e:
33:61:4c:75:32:71:e8:b6:0a:f4:26:06:56:f0:61:
f6:b6:d7:4b:c6:8e:9c:d0:3d:c1:61:40:22:78:b5:
1f:dd:b6:db:28:19:6d:33:a1:71:d7:44:52:bb:5e:
ac:2d:4d:82:fa:3e:b8:13:d4:31:e2:ba:a3:3a:d2:
f3:85:76:d6:8a:36:97:33:ee:41:68:fa:4e:7d:55:
79:e5:25:21:ba:0c:fd:eb:e8:20:e6:eb:33:d6:88:
d4:b5:76:42:82:3c:a9:b0:1e:9c:ed:01:51:6c:ca:
94:08:19:52:03:15:8f:9f:f6:9c:3c:b4:93:18:d7:
fb:5b:74:7f:45:d0:4b:3f:46:fe:b4:e5:50:2f:fc:
92:6d:61:2a:0b:e4:8c:94:5c:ff:29:53:a7:2c:5a:
80:c7:cd:54:2b:3a:f7:85:52:8c:c5:43:b0:0f:52:
29:f1:01:8a:5f:c5:b3:85:bd:e2:da:1c:17:a2:37:
11:c5:b7:fc:f0:33:d3:7f:68:fc:fb:1d:7d:a7:26:
be:b1:f6:ea:1c:f3:f8:23:12:34:f3:83:36:2f:b7:
28:8f:dc:93:17:ce:fd:99:e8:4b:e6:11:e4:96:bd:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C4:F3:FE:4C:69:4C:4F:2F:A5:B3:AF:11:D9:C6:9A:8A:66:C8:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/7c4e8ce2-84f8-3ee8-a2a3-754e631b637b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
X509v3 Authority Key Identifier:
keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
sbgp-ipAddrBlock: critical
IPv4:
204.193.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:53:9b:4c:93:a5:4e:cd:e8:bc:aa:5d:b9:09:d6:e7:f2:10:
a9:ac:af:52:64:39:69:20:1f:fa:0c:1b:01:b6:df:34:7a:6d:
1d:c7:57:84:ee:f9:d8:0e:17:8a:31:a3:dc:ec:71:89:aa:62:
b4:9b:78:c5:92:fc:34:3f:43:3d:06:05:f3:0d:70:1b:7e:d8:
70:d7:20:4c:63:49:b0:39:00:94:14:d5:f4:65:d7:46:20:85:
29:0e:dc:7a:1c:bb:86:03:8b:eb:b0:e0:75:76:94:33:f2:e3:
58:a7:69:67:f1:f0:ce:ae:ce:f5:cf:2c:f1:15:77:bf:a8:55:
b8:a7:12:33:6b:69:5e:cf:9a:a9:32:60:61:78:61:d9:02:5d:
ad:eb:fd:66:30:78:92:d4:b0:08:c2:c3:d5:4f:6f:9d:f2:35:
a7:ec:5c:81:4e:d6:2f:44:0b:80:04:a9:23:b6:12:25:af:dc:
50:04:cc:4b:aa:3d:c2:35:ec:63:0d:5d:a6:d3:06:10:2f:d7:
a3:ad:a6:a5:ec:66:56:cb:b3:01:5f:87:3f:d1:fe:3f:ed:28:
09:24:35:fb:f2:19:22:c4:d9:00:f8:96:8f:f3:a6:5d:63:f2:
4b:10:1d:c5:ce:99:9d:c7:5d:29:a6:d6:a5:0d:16:66:50:74:
86:10:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:05:09 2025 by rpki-client