Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa
File: 504539a8-a450-354d-9c7e-6a0128d4ded2.roa (raw, json)
Hash identifier: ZUU3ZvmRlb5yOdfPNivh88u66AV6jwXPyu6fjJioLaw=
Subject key identifier: 05:3F:26:94:0B:B2:DA:6C:43:29:76:33:35:7D:7F:43:B3:09:99:CD
Certificate issuer: /CN=c003af2f-f626-4f2a-a59d-433951f53b3b
Certificate serial: 010D0C9F43285848897B24CAD30D0C7E785A00C0
Authority key identifier: A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 7132
IP address blocks: 204.17.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:24:ca:d3:0d:0c:7e:78:5a:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c003af2f-f626-4f2a-a59d-433951f53b3b
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=7a22eb1e-b2ea-44ff-9797-3a40fb7c844d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:32:ba:85:ca:ad:7a:21:1f:3d:12:ea:34:
85:c9:53:1c:1f:0b:cb:6d:40:c4:e2:51:8e:42:59:
41:94:76:8b:ca:94:8d:c5:09:8c:05:a2:01:5a:a0:
43:d1:72:03:82:f9:47:11:15:0a:f5:97:3c:57:38:
fe:95:fe:ce:3a:a9:be:95:c5:2f:2e:52:c4:88:75:
02:70:a7:91:84:34:f8:17:ca:6d:4d:a0:a8:c4:a5:
78:fa:f9:a4:ef:bc:d1:f7:47:b1:d2:0a:42:3b:30:
18:9e:29:a9:af:7e:f6:88:4d:22:47:d2:49:01:a3:
47:0f:98:fa:40:e2:f7:9f:f8:50:4c:52:6e:e9:19:
e9:5e:b8:c9:50:bc:8a:30:76:7b:28:b8:11:62:2e:
dc:bf:fd:ec:bf:61:d4:a4:9e:ea:d4:55:bd:6b:d7:
66:98:f9:49:ee:a4:c7:d6:d5:78:34:62:45:15:55:
86:0e:9c:d8:c9:94:fd:9c:f9:0e:f6:6d:97:a1:5a:
19:64:02:3d:c0:c7:76:0b:19:d5:d8:ad:75:d7:e1:
e5:13:db:8a:de:c1:dc:fb:87:4b:ab:90:9c:92:5d:
94:38:3f:d9:d1:70:11:39:63:b9:d6:0e:82:a2:f4:
6e:e8:71:ad:a8:d4:fe:ba:a7:e9:38:a9:ad:85:4b:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:26:94:0B:B2:DA:6C:43:29:76:33:35:7D:7F:43:B3:09:99:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl
X509v3 Authority Key Identifier:
keyid:A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer
sbgp-ipAddrBlock: critical
IPv4:
204.17.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3f:cd:52:5a:1f:b2:02:20:6c:c4:9c:41:49:0d:0e:49:87:
cd:e1:f5:b9:f5:72:f6:5d:a0:30:77:fd:20:33:03:22:18:db:
26:06:06:52:ed:56:fe:45:bf:e2:60:0c:eb:fd:83:3d:19:20:
97:85:df:95:81:61:f5:72:5d:e5:6c:7f:60:b9:71:24:fc:2f:
22:39:de:ca:b0:74:d3:96:ad:ec:45:15:b4:bd:d0:78:cb:bd:
82:60:c0:a8:22:98:22:b4:1a:e0:a3:0c:35:1b:7f:ee:59:6a:
d3:7f:88:b4:ac:66:4a:6e:f9:a8:a5:ae:d6:54:b4:90:38:4c:
d8:bd:b7:e3:16:93:49:91:62:64:6e:a4:2b:56:e8:ec:2a:74:
5e:d4:2f:fa:28:50:c6:79:9a:9d:ba:14:fb:4f:fb:5c:ef:23:
54:9a:bb:39:19:e2:ab:6e:d1:c5:33:38:f2:95:07:9a:2f:0d:
72:56:58:31:9e:bc:a3:b4:78:5c:69:96:76:9f:46:5a:76:c9:
2a:99:33:0e:7c:e4:a3:62:1d:58:76:e6:f8:12:7c:18:f6:ca:
81:7b:a7:55:f2:53:a9:2f:42:e9:02:1b:bb:c5:97:40:77:31:
4a:56:c0:a7:f2:72:cc:2e:83:9b:2b:d0:55:af:94:4d:d4:a2:
a9:ff:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:18:11 2025 by rpki-client