Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3a30f470-08d1-3a9f-9da2-88dadb2618b3.roa
File: 3a30f470-08d1-3a9f-9da2-88dadb2618b3.roa (raw, json)
Hash identifier: pVYw09qhhbUl7RIdU1XQk+6CaLx1DBIS7A9pCYqR6Kg=
Subject key identifier: E3:51:27:AA:4D:3E:1F:C9:16:D0:6C:9B:BE:83:D4:92:BD:E5:50:8D
Certificate issuer: /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial: 010D0C9F432858489340A2278403A857D387E980
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3a30f470-08d1-3a9f-9da2-88dadb2618b3.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 35950
IP address blocks: 204.156.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a2:27:84:03:a8:57:d3:87:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=b5b23834-ea44-45b5-b2c4-a373bb84b894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:bd:be:e6:2b:bb:bf:71:5c:c8:a0:bb:71:
26:df:03:99:2a:a1:cb:30:5c:04:1a:a5:b3:53:82:
46:28:52:50:f4:4a:92:89:be:c0:b1:d1:21:35:98:
38:0c:0b:51:44:26:56:d7:e5:96:16:a5:f8:2b:1c:
1b:96:da:d6:a9:68:54:e5:31:70:90:16:95:1f:d8:
d0:d1:40:0d:20:c0:bb:13:73:f0:78:5f:14:56:3d:
eb:ae:b8:3f:74:4e:04:ed:26:ec:f9:31:f7:a8:f1:
5e:12:4c:19:82:9e:93:cb:99:46:01:ac:3e:9c:6d:
51:ae:bc:97:6e:19:e8:a2:07:0f:53:49:a8:49:ae:
b5:b6:e6:30:03:da:25:d9:94:4c:8a:57:b8:c8:60:
5c:a1:92:9e:71:3f:0d:46:06:39:f7:7e:a1:af:52:
ee:85:31:02:b9:fd:40:c0:72:1e:c4:bd:84:92:ee:
db:30:bb:f7:fb:fe:af:fb:29:38:09:45:fb:9b:64:
bd:bc:ca:9c:eb:7f:6a:f9:7a:9d:05:36:79:15:e3:
93:e1:af:8f:67:94:ba:94:9e:55:a7:8a:f9:ef:be:
bd:62:42:91:78:00:6b:ce:61:8b:56:0b:bb:b0:55:
e3:7a:7b:5a:61:b2:7f:0a:61:48:d1:de:62:fb:d3:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:27:AA:4D:3E:1F:C9:16:D0:6C:9B:BE:83:D4:92:BD:E5:50:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3a30f470-08d1-3a9f-9da2-88dadb2618b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
X509v3 Authority Key Identifier:
keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
sbgp-ipAddrBlock: critical
IPv4:
204.156.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c8:3a:07:96:41:0a:dd:6d:ef:0b:9d:75:9d:9a:f2:d3:07:
2a:a2:cd:ef:7d:ea:6d:88:25:22:83:19:53:45:b4:25:9a:80:
3f:c5:d2:5e:f3:9a:06:6d:5a:11:54:7d:57:cf:8a:ea:c5:3c:
98:49:35:78:af:03:a4:0b:df:00:c8:77:00:42:99:36:9c:0a:
c3:5f:e7:80:7a:0f:f4:da:d7:03:1f:ac:27:26:55:b8:04:42:
7a:d7:9b:d2:46:e9:cc:82:4a:a9:77:ff:42:6c:8c:38:43:99:
fa:37:5b:26:cb:a9:04:f5:cb:ca:7d:b2:4c:04:a7:ec:c0:a8:
9a:23:a4:f4:08:03:94:b4:f0:ef:0c:b3:9d:74:c3:fd:70:b0:
6c:df:33:47:98:da:cd:00:59:2c:9e:a5:8f:14:81:dd:9e:24:
bf:d5:75:72:03:12:7d:47:2a:53:46:10:4f:14:d0:aa:83:40:
c9:73:b5:0b:de:2b:05:f4:1a:13:ab:6a:fe:3b:d1:6d:91:ff:
3f:8c:23:5e:3a:39:cc:0b:36:90:11:a3:70:37:c1:d3:88:58:
40:46:be:63:71:ce:e2:e9:a5:df:5b:13:92:f7:15:96:ba:38:
14:24:70:ca:6c:8f:be:d5:fe:87:e2:db:7e:53:e9:62:2e:1a:
95:21:af:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:24:15 2025 by rpki-client