Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b9eb070b-0e17-366f-bca7-2671dea8598a.roa
File: b9eb070b-0e17-366f-bca7-2671dea8598a.roa (raw, json)
Hash identifier: efz3ZNQKyiESMWxvMq6v9xyKJF8HfndlldvDUTN9fss=
Subject key identifier: F2:53:8E:0B:C6:B2:F9:BE:ED:D9:E9:61:4B:94:F1:B9:38:1C:26:73
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F432858486C7A0A2A7D6752B0136D3000
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b9eb070b-0e17-366f-bca7-2671dea8598a.roa
Signing time: Fri 03 Jan 2025 16:40:05 +0000
ROA not before: Fri 03 Jan 2025 16:40:05 +0000
ROA not after: Thu 03 Apr 2025 15:40:05 +0000
asID: 394437
IP address blocks: 205.196.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:7a:0a:2a:7d:67:52:b0:13:6d:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Jan 3 16:40:05 2025 GMT
Not After : Apr 3 15:40:05 2025 GMT
Subject: CN=a9b0d554-3cd0-4db3-9237-ad4b9bd7eba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:18:a6:54:23:6a:4d:f8:7e:5f:cc:cc:76:
80:53:23:55:98:74:eb:58:51:a6:54:d3:6e:73:4f:
59:c8:cb:a1:7a:08:45:dd:fb:bb:95:db:ac:65:ad:
98:78:27:72:64:38:64:7e:83:fb:bb:e2:b3:9a:bb:
e2:88:31:3d:6e:22:8a:fd:25:b3:8c:ba:f9:a0:68:
75:e7:8a:21:6c:2d:81:59:30:16:48:e7:8e:79:50:
12:f2:93:2c:52:87:97:a8:c2:4f:92:2b:a2:1a:40:
c5:e4:cc:8d:05:94:c6:e5:f7:b2:89:dc:c2:d1:b5:
23:11:3d:c8:76:ad:67:62:e8:11:67:de:e8:9f:f2:
bd:7a:d4:f9:9c:66:b6:8f:a8:ee:7a:e6:88:a9:0f:
b4:41:1c:0a:5b:b1:c7:b4:4a:31:65:93:b3:fc:af:
63:71:c2:00:d1:8c:f8:0a:1b:7f:80:5b:fb:28:ab:
0c:5e:24:25:ab:c6:d0:6f:a0:90:eb:f3:83:1f:e6:
20:70:a4:0e:63:f5:32:75:89:b7:67:04:45:c1:3f:
37:d4:dd:d9:85:c1:c6:78:18:80:4e:53:d2:0d:bf:
21:c4:83:a8:89:2f:b5:69:73:dc:ad:7a:4f:44:59:
a2:70:e7:9a:d2:e6:65:19:e6:cd:52:57:a5:9b:ac:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:53:8E:0B:C6:B2:F9:BE:ED:D9:E9:61:4B:94:F1:B9:38:1C:26:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b9eb070b-0e17-366f-bca7-2671dea8598a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
205.196.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:cd:c7:2f:d9:89:3f:3e:70:2d:df:27:21:41:68:1b:be:4e:
6d:3c:89:94:4b:56:85:a4:15:7b:7f:d8:99:9f:1e:2a:54:36:
34:67:a6:31:8f:3f:f0:47:2b:ba:c5:c5:c3:c5:37:fb:50:d9:
5b:b5:e7:71:84:ac:9c:5f:4c:e3:bc:19:00:6d:14:ef:7c:dc:
04:63:0e:52:6e:3f:0a:a0:78:16:55:fd:79:11:23:ff:b0:ce:
91:4c:e0:9f:cc:21:6e:35:1d:da:79:14:1c:a7:05:eb:89:22:
30:f3:9c:7e:f1:6f:ea:9d:27:3c:25:f3:19:0a:85:19:e8:93:
82:14:7d:19:b8:73:6c:48:ee:a8:88:47:c9:62:20:84:f0:62:
92:0e:6c:cb:6a:f0:8f:bd:ae:ab:32:50:3f:50:4d:70:e6:cc:
ee:94:27:24:c8:cf:62:a8:c5:0b:71:e0:9d:d1:a6:0d:40:35:
d4:3e:22:db:97:cf:40:81:8d:99:40:85:80:3f:58:6b:99:64:
c1:25:34:3f:98:6b:9c:f8:e3:60:44:2a:07:0d:95:0e:be:1a:
98:77:bb:a0:90:b9:e8:c0:f6:9b:33:fe:36:8b:b3:65:2c:db:
58:fc:3c:9f:27:06:ea:48:1d:0a:92:98:f7:5a:db:cc:ad:55:
f9:a7:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:51:59 2025 by rpki-client