Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
File: 85936ab9-681e-3063-9c40-0a46025e36e9.roa (raw, json)
Hash identifier: SHpvegBtFYWd2X54SCF3Q1KYvz5GkUBTx4c60lmRh0Y=
Subject key identifier: 69:30:05:6E:9C:8D:DE:40:C1:06:36:69:28:E0:5C:F4:9C:27:66:A3
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F432858484AAADEFC709C6B271BDCC780
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 64243
IP address blocks: 205.213.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:de:fc:70:9c:6b:27:1b:dc:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=9b733f05-dd44-4897-8f1c-367eb35415cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:b0:b8:38:9d:1d:4d:15:35:e0:01:73:4a:
c2:62:64:08:64:f0:9d:08:88:32:9d:1b:d1:57:80:
57:3d:35:ac:dc:e2:dc:a5:65:27:cc:0f:32:bc:7c:
16:ba:72:f2:8e:cf:ae:be:f1:26:c5:e4:fc:08:69:
84:cd:21:17:60:d4:ff:9f:5f:c6:33:b8:8d:13:8f:
bc:73:65:7d:92:06:40:8b:1e:1d:77:92:eb:34:fe:
ca:3e:50:cd:1c:0f:d3:1c:63:cb:e9:33:b5:aa:7a:
ed:3f:dd:38:0d:01:d3:5a:77:98:f2:38:67:bf:98:
8e:e9:56:96:78:48:57:04:a2:86:eb:68:02:4b:e5:
f9:54:18:26:0d:1b:7d:06:31:0f:30:25:53:cf:df:
c6:25:a8:5a:cc:09:ad:76:30:2a:41:93:fc:6c:ca:
e1:02:82:d1:70:c0:52:52:0f:50:c4:d3:80:39:e1:
f7:8c:02:1d:af:79:05:a4:cb:48:b6:fa:81:9f:78:
b5:77:0c:a5:28:a9:47:a2:0f:ad:7a:2f:cd:99:76:
2e:7f:5d:56:bd:56:51:b5:41:0a:ad:f6:31:07:3f:
85:8b:7b:dd:fa:92:e4:45:a0:85:85:f3:62:1a:9a:
b7:6e:dc:2f:ba:6b:83:4d:b3:ca:ec:53:94:f7:04:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:05:6E:9C:8D:DE:40:C1:06:36:69:28:E0:5C:F4:9C:27:66:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
205.213.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:cc:e9:a2:b7:86:5a:91:e1:d2:6e:f2:f3:17:4d:7d:07:b9:
be:eb:d2:ca:33:25:67:38:43:34:13:63:0f:4b:cc:20:7e:99:
80:10:33:30:f1:4f:b5:f6:81:82:7a:78:56:cc:dd:91:ed:a5:
4a:6e:20:d6:bf:20:bb:8c:fb:70:e8:d0:74:78:c2:16:86:3c:
24:b6:82:60:31:09:fc:43:75:c9:6c:31:8f:1f:37:51:42:4d:
e6:00:a3:a9:8b:9d:c7:14:c5:0d:35:9b:7e:42:f1:41:d9:82:
28:ee:e0:f8:fe:a1:3b:5b:cf:08:98:53:6b:74:eb:c6:4a:7f:
8f:8c:7b:f8:3b:a3:63:d2:0c:53:3d:46:85:39:67:74:5f:e9:
ef:66:9a:b5:23:af:7a:56:9b:a0:19:a2:e3:29:c8:12:d9:9c:
a6:19:8f:e4:2d:75:32:d0:a6:e7:6b:6d:44:b8:ce:f3:cb:be:
97:e4:91:c3:b5:c6:d2:8c:34:36:2b:3b:ee:52:b0:1a:d0:53:
4c:28:c5:c4:7b:81:cb:a2:1f:4f:dd:a7:73:15:75:19:5c:b6:
41:14:7f:26:34:b2:06:32:67:12:ac:a2:a7:37:e7:27:d8:cb:
3d:84:a3:6e:42:f2:43:f3:a1:0c:ca:a7:13:a9:ce:fe:1f:f1:
ff:36:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:28 2025 by rpki-client