Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/8a28e187-25ad-32ca-abd7-210aa7b3f414.roa
File: 8a28e187-25ad-32ca-abd7-210aa7b3f414.roa (raw, json)
Hash identifier: VoCv3qkjsMLp5ll074+Yvks4nylG8svz9ppBgYbDX8g=
Subject key identifier: 04:19:10:AF:3F:B3:72:6A:E9:35:11:73:20:14:4B:FA:B8:8E:BE:65
Certificate issuer: /CN=126268d9-7906-418d-863b-642221ce925f
Certificate serial: 010D0C9F4328584824FA82CBEDB40541844F6000
Authority key identifier: E1:A0:45:D6:CB:94:70:C5:40:1F:9C:F1:AE:64:42:26:5E:8A:C4:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/8a28e187-25ad-32ca-abd7-210aa7b3f414.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 25680
IP address blocks: 205.132.40.0/22 maxlen: 22
205.132.40.0/24 maxlen: 24
205.132.41.0/24 maxlen: 24
205.132.42.0/24 maxlen: 24
205.132.43.0/24 maxlen: 24
205.132.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:82:cb:ed:b4:05:41:84:4f:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126268d9-7906-418d-863b-642221ce925f
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=09610c36-f94e-44e4-9056-b8144e2ba647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:e8:1a:08:45:7d:8f:0c:9c:00:95:6e:4a:
da:60:de:0a:f1:be:56:94:fe:1b:b5:04:84:a3:60:
55:a9:81:22:18:66:18:80:3e:d1:18:32:e6:3d:4d:
e0:3d:d0:b0:f4:db:d6:97:ca:79:91:26:ce:2c:a3:
e5:43:8b:31:21:00:97:6e:12:10:b2:68:3d:98:90:
9c:01:2a:ac:5f:36:15:f9:a5:90:9f:3d:b0:8b:d2:
37:98:e7:1e:9c:94:7d:12:7d:ad:dd:9a:84:cc:84:
fa:74:39:26:c2:22:25:b9:bb:5e:f5:60:87:cc:38:
e8:5f:ee:aa:e3:3b:e7:2e:b7:65:46:78:99:89:a9:
8d:84:e2:60:0b:61:c1:e6:2d:ab:00:d4:cb:09:b2:
d3:90:8e:fa:60:fc:ef:20:06:cf:02:12:d0:b0:3e:
b0:2b:b3:27:3c:73:53:c5:9e:73:be:c6:af:50:98:
76:2c:0c:69:17:a0:be:ef:9f:08:a2:1e:aa:45:a0:
96:c2:e7:c3:c2:77:b6:41:0b:25:b8:04:19:cf:d3:
81:59:9b:9d:72:85:f1:8d:b6:4c:9d:f6:80:c5:34:
72:d3:85:46:3b:3e:ee:66:79:a6:38:8f:db:5a:b9:
4d:3b:49:67:3c:76:de:23:96:d2:32:4a:40:e1:72:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:19:10:AF:3F:B3:72:6A:E9:35:11:73:20:14:4B:FA:B8:8E:BE:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/8a28e187-25ad-32ca-abd7-210aa7b3f414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f/126268d9-7906-418d-863b-642221ce925f.crl
X509v3 Authority Key Identifier:
keyid:E1:A0:45:D6:CB:94:70:C5:40:1F:9C:F1:AE:64:42:26:5E:8A:C4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/126268d9-7906-418d-863b-642221ce925f.cer
sbgp-ipAddrBlock: critical
IPv4:
205.132.40.0-205.132.44.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:b6:79:c5:0f:10:4f:ea:5f:85:1a:ed:e9:6d:80:fe:df:80:
e5:c2:47:9e:6c:42:14:05:b1:5e:ff:33:74:ea:a9:14:49:ce:
05:6d:b0:e7:38:4d:61:c0:eb:45:d2:91:d1:66:c0:e3:b2:e5:
0b:e9:ef:e8:43:d9:09:57:06:3f:b0:13:2c:3a:15:12:9e:92:
b0:8c:0d:f7:c6:80:aa:f9:ef:fe:2c:15:92:93:a7:a6:c0:e1:
2f:d5:e8:d6:fc:96:8b:4c:d0:64:ad:e2:9a:2c:4c:0e:58:b0:
2f:c6:2c:a4:2e:0e:72:ba:59:eb:8a:3a:b0:32:2a:ee:99:06:
90:0a:a1:8b:da:83:d8:ba:1a:42:9b:25:27:bb:9f:57:cb:a5:
3c:c5:17:6c:bb:f0:84:93:51:43:d4:80:08:f2:8c:2c:9a:02:
87:00:f3:58:93:18:98:7e:fd:85:66:4a:c3:ff:87:7b:e8:2e:
2e:03:5a:6b:89:15:02:56:0d:6f:7e:bb:c7:44:60:3f:8b:62:
d2:7f:b4:8a:32:47:4d:99:9e:ef:23:fc:61:53:ef:8b:bc:13:
41:d0:b6:d6:e7:68:1e:56:8d:8b:76:f5:8d:ea:50:14:31:dd:
ab:de:1c:d5:d0:97:1a:ae:2b:86:d5:3e:17:34:e6:02:fb:86:
e7:3b:7e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:25:14 2025 by rpki-client