Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa
File: 9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa (raw, json)
Hash identifier: H8x+XtLRJuc0bcTbtUs983R71OxQsXddCxYqTbqAJ5Y=
Subject key identifier: 63:C2:3E:57:C1:3B:79:79:A1:6E:44:60:70:D8:DD:43:A5:22:89:D5
Certificate issuer: /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial: 010D0C9F432858488C45CBB639DE2ABC2F156E00
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 3477
IP address blocks: 204.193.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:cb:b6:39:de:2a:bc:2f:15:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=f3a8853d-94d9-46e8-a8f5-5ab3b68ec2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:d5:70:bc:52:6e:92:57:6f:49:25:d1:8e:
39:60:c6:18:96:52:09:a1:58:36:5e:a5:b2:12:ba:
d2:44:73:f6:23:df:1f:78:76:4c:15:77:8d:67:9d:
b0:dc:1a:4f:8e:b7:90:7b:c7:ba:2b:ea:ea:b9:f7:
bd:ea:28:e3:c9:a0:19:36:ef:a3:da:b1:f5:ef:3f:
56:39:b9:d0:43:97:11:0c:dd:a4:dd:ba:1a:d3:a8:
b3:8b:d5:6b:0a:44:e3:53:dd:17:cf:13:3b:0b:6c:
34:25:d1:b1:13:f0:22:58:c0:b3:fc:e9:38:c5:30:
63:cb:20:86:5f:64:af:c4:3f:f0:0a:51:e0:e5:1e:
27:b9:15:1d:a1:d4:22:1a:38:07:de:59:62:69:38:
58:27:89:b5:07:d5:05:5a:60:94:35:fd:5e:17:0a:
05:bf:7a:01:b6:7a:a0:5a:40:4e:1f:12:ba:41:df:
e4:8e:51:99:a2:05:30:64:f8:89:f4:fa:6f:69:20:
e6:48:3a:d6:4d:b8:b5:a0:f1:53:ce:af:d8:97:ac:
1e:eb:eb:84:7b:87:ca:df:14:17:94:8c:0a:38:df:
e1:63:ed:e1:fb:70:7b:99:8f:cb:ea:bf:1b:15:ed:
19:23:df:3d:ce:6d:ba:63:29:a2:4c:95:bb:66:65:
53:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C2:3E:57:C1:3B:79:79:A1:6E:44:60:70:D8:DD:43:A5:22:89:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/9fd3a3e1-dfc7-34ed-8f84-1734d992ec4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
X509v3 Authority Key Identifier:
keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
sbgp-ipAddrBlock: critical
IPv4:
204.193.246.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:75:e4:a7:93:ed:bb:3c:7f:02:0c:41:33:c3:40:3a:40:fe:
6e:91:59:4d:5f:ab:fa:f5:32:0e:48:8d:2a:37:e4:f4:64:a9:
fc:27:11:96:be:10:ac:07:6f:8d:1c:2f:b7:80:87:12:8d:1a:
29:57:2b:cd:83:39:80:e7:67:30:8f:a0:f3:1f:8e:a7:1d:59:
51:c7:15:e5:fc:20:11:72:fc:c4:29:b1:bd:e5:b7:89:77:f4:
99:8f:9c:b9:bc:d1:dd:77:56:fd:a1:dd:ae:44:b7:b5:b9:01:
10:8e:21:a1:f2:be:b4:a0:0c:7a:1e:bf:54:60:71:92:23:f5:
68:6a:9e:f4:a3:71:cf:78:8a:87:88:55:bc:c0:db:43:6c:61:
e5:60:4d:cc:d7:cc:55:90:47:76:7e:b7:04:cb:1d:d6:8b:74:
99:e6:fb:2f:fe:9e:42:b1:5b:82:24:63:77:a0:43:93:89:4f:
3e:2e:b8:f6:02:2b:4a:bd:2b:4c:73:22:64:a9:e7:d9:24:b3:
67:95:76:31:b4:c8:ce:3c:3c:63:41:fd:85:6e:00:40:7b:71:
38:fc:82:6c:1e:a5:00:88:81:a2:0f:78:1d:42:5b:7d:c8:6a:
5c:c6:c7:3e:70:24:75:31:4c:c1:f0:11:fd:4c:67:ae:a2:d8:
ab:25:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:57 2025 by rpki-client