Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa
File: a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa (raw, json)
Hash identifier: Iq33TxRBcpP+Hf6e+YC36hIBY6bMS1C8a2w7vdzMMsA=
Subject key identifier: FD:02:3E:C3:7C:F8:FE:8E:42:36:AB:86:54:63:52:33:77:FA:71:DE
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F432858484AAADECE60A53238C2281680
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 64251
IP address blocks: 205.213.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:de:ce:60:a5:32:38:c2:28:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=61668aa0-76ea-426b-aa8f-8cb268c22382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:29:33:98:a7:71:49:e2:90:fe:ae:db:49:0c:
31:3d:3b:ad:14:4d:b2:0b:91:a3:27:5c:3b:91:52:
7b:4e:3d:3a:12:7c:ab:22:7f:e3:ea:58:9b:74:0e:
19:87:95:cc:01:e0:5d:49:34:75:71:b4:24:0b:29:
07:d0:f9:80:72:3d:4b:da:f3:f6:2f:f8:77:5f:8c:
85:7a:ab:a2:b8:17:dd:b4:e0:08:84:cb:53:b3:83:
40:ce:ab:85:5a:00:34:52:23:8d:d9:52:73:57:58:
b2:66:c7:a2:3d:3a:81:66:75:3d:2b:80:6d:76:47:
ea:4d:de:de:a5:14:dc:87:f6:d2:5e:54:7a:4e:8d:
65:1e:de:47:5b:9e:6f:7c:b6:22:a7:55:f5:8f:48:
40:24:89:18:4b:2a:b6:33:34:2e:09:8d:cd:a0:03:
53:8a:fa:49:c9:17:68:9a:3b:67:0c:e4:83:5e:48:
e0:37:f0:2a:54:42:65:57:72:bb:47:e5:d9:7b:46:
88:a4:d8:b9:27:21:ae:4d:8d:70:6f:dd:8d:47:41:
ce:25:3b:41:f7:ad:53:f6:a2:bd:34:e4:51:95:e5:
43:da:f6:0f:e5:cb:9c:9a:51:2e:40:d2:6e:e5:78:
00:82:7f:e7:31:b9:04:f1:60:d0:67:3c:f8:48:e8:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:02:3E:C3:7C:F8:FE:8E:42:36:AB:86:54:63:52:33:77:FA:71:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/a3d3d07f-7e7e-3cd2-991b-136fb6c37bcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
205.213.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:cc:f6:2e:98:76:5e:5d:4d:b1:b7:f4:00:49:aa:2d:76:bf:
1e:24:38:c0:a9:b5:be:eb:4b:5e:2d:81:dc:a7:73:e7:60:3c:
00:35:c8:5d:5f:c1:55:0d:c1:7e:f7:bd:80:8c:b0:81:ee:e4:
5d:98:3a:fb:31:80:76:bd:b9:9f:60:c4:ee:01:fd:a3:ca:8d:
df:d1:55:ae:0a:2a:e5:cb:ab:41:ea:84:06:dd:8d:18:2f:3c:
fa:aa:3b:0f:3f:78:54:f1:6e:c0:f4:38:4a:01:8f:2f:ec:c9:
3a:81:8f:4e:45:00:7b:fd:62:e1:ce:f8:91:bb:45:eb:38:2d:
b8:3f:bf:19:ee:c7:7c:13:5e:6f:31:be:ca:6c:6c:8b:f1:0f:
3e:55:b8:5e:4a:56:8d:71:11:33:1c:8b:8e:c6:ef:3f:27:2b:
d1:cc:7d:d0:ca:3b:17:40:1f:88:0e:30:75:7d:6b:4c:e7:ec:
ef:49:fd:9f:0f:7c:d3:e6:cf:a9:16:f5:30:77:6a:8c:5f:53:
a5:7f:b5:80:8b:34:f4:f2:5b:a4:d6:87:91:71:e2:da:89:f3:
1a:da:e4:cd:8a:de:99:6d:40:c8:52:64:8d:b0:2e:5d:a1:82:
32:c9:e0:d8:14:af:1b:74:b5:d1:e8:ad:ec:25:d7:58:19:62:
1b:49:43:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:30 2025 by rpki-client