Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c5680fed-e77b-3daf-9898-cc08dcde86cc.roa
File: c5680fed-e77b-3daf-9898-cc08dcde86cc.roa (raw, json)
Hash identifier: dI6qxaiIDMujcp+0dZdyW3JEz409x1d92ZIVI/e22fo=
Subject key identifier: 95:88:30:6D:49:29:99:AC:29:A4:EF:36:0F:17:A2:46:1B:21:DE:4E
Certificate issuer: /CN=0c75fe19-a93c-4656-bf2d-b205565f9d07
Certificate serial: 010D0C9F4328584827C541F7FE508AE31DDDE040
Authority key identifier: 6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c5680fed-e77b-3daf-9898-cc08dcde86cc.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 6327
IP address blocks: 204.209.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:41:f7:fe:50:8a:e3:1d:dd:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c75fe19-a93c-4656-bf2d-b205565f9d07
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=b7741862-b7fd-400c-8b08-80e26d5f43e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5d:51:06:ef:80:78:71:ab:d6:2a:65:f3:53:
b0:e8:e5:d8:e5:6d:ee:d6:05:a0:0a:a9:2a:5b:e3:
dd:0a:e8:4c:df:5d:3c:92:40:b1:a0:5b:ee:87:70:
23:c2:46:aa:1c:05:c0:c9:96:17:c4:68:a9:d2:ac:
3a:ea:c1:2b:a1:4b:d1:94:03:f4:58:c2:82:66:a3:
f7:d1:78:ab:6f:62:85:86:39:28:51:ae:11:bd:cb:
09:d5:a7:90:c5:0d:09:0e:d8:4e:86:37:a9:d2:6d:
76:eb:2f:f5:c4:b9:c2:c5:7a:43:9c:51:d6:49:ef:
9c:bb:38:3b:e5:83:64:c3:44:db:74:ba:04:b2:72:
d3:a4:6c:d4:13:7e:55:6c:db:4f:c6:ca:fd:76:9a:
12:f7:0e:4a:82:59:e6:d4:fb:cb:25:73:ff:c4:f7:
8b:bc:46:0b:e7:50:aa:26:e0:24:9f:84:de:0e:78:
f5:c7:6f:f3:7d:c3:26:d8:f7:9b:ea:83:4d:9f:19:
cb:58:d2:62:06:09:44:d7:6a:e5:04:27:89:1c:43:
47:f7:76:d7:6f:5e:c6:01:12:3f:db:26:3d:c7:d6:
d7:2b:85:22:5b:7d:1f:49:62:24:85:b7:23:13:26:
64:4e:90:65:7e:91:a1:00:8c:61:59:11:87:f0:6f:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:88:30:6D:49:29:99:AC:29:A4:EF:36:0F:17:A2:46:1B:21:DE:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c5680fed-e77b-3daf-9898-cc08dcde86cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.crl
X509v3 Authority Key Identifier:
keyid:6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:7d:fc:67:34:0a:0b:26:e2:37:2d:40:41:41:0f:e7:d2:18:
c8:5d:a6:c4:a4:33:1a:14:67:cf:dd:34:fc:a1:81:68:59:1f:
41:ef:0e:11:27:bc:bf:db:e8:dd:b6:00:92:7a:f4:93:45:0a:
97:ad:b5:a1:2a:bf:fc:c0:70:17:fa:61:47:a1:34:64:c1:90:
97:38:e3:70:36:e4:47:35:2e:15:82:1f:60:51:36:1f:0d:33:
da:c6:b5:8c:fa:3f:05:a9:fc:30:b9:cd:c7:ed:49:34:ec:ec:
29:b4:02:47:42:d2:56:11:b9:16:ab:1b:e4:8f:dc:08:5a:45:
21:6d:aa:42:de:fc:8d:55:b4:e6:17:0d:c7:eb:12:ae:8b:19:
07:d4:96:65:12:20:1b:55:6a:9a:70:73:00:39:49:67:8b:bf:
1b:5d:1e:c4:c9:c3:b5:91:d0:97:40:22:19:b5:e0:d6:bc:8a:
92:2e:ac:00:09:e1:34:e7:c3:70:4d:ff:89:c4:02:dc:e4:3f:
de:fc:7e:f3:fc:e3:fa:7b:08:9d:14:a7:b4:dd:80:b9:22:da:
8f:79:36:89:d9:4a:57:e2:0a:bd:a3:4f:f3:c8:af:9e:8e:b2:
20:70:62:27:42:a9:5b:1a:88:4d:5b:ff:7a:ad:7e:a3:4a:b0:
8e:8f:b4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:26 2025 by rpki-client