Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa
File: 34c75caf-5f31-3ddf-b113-d584f51f166e.roa (raw, json)
Hash identifier: HlOagVbsnRtQbNon3q85L5Bi+vRuvrroETo9lu+rpU0=
Subject key identifier: 22:BB:B2:65:55:2E:13:DB:5E:BA:BF:D1:B4:DB:53:74:9D:11:E9:5B
Certificate issuer: /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Certificate serial: 010D0C9F4328584858A05D88BE4CEBEC2B75F340
Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 8075
IP address blocks: 204.209.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:5d:88:be:4c:eb:ec:2b:75:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=fff1f714-8820-418d-9b82-ccf5b46b2069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:4a:c7:6d:b2:dc:91:2d:bd:4b:01:1a:cc:
9d:d8:91:82:dc:55:51:89:2c:43:20:3f:23:05:ae:
78:22:38:52:70:47:4b:d3:9a:f2:aa:0d:78:5b:ac:
16:8a:80:d3:24:2e:df:61:f8:cb:23:47:fa:d9:e6:
b7:a3:c9:06:19:a2:ca:ac:87:c9:14:6c:4f:60:5b:
32:ab:90:6f:cd:a3:e5:b5:22:70:c7:07:3b:2b:0d:
49:d2:a4:74:c1:f7:1c:18:18:be:dc:4a:68:49:a8:
c2:83:86:bd:a3:3c:ae:71:38:d0:aa:7a:61:fd:2b:
e0:96:5e:f1:6a:56:01:31:91:ee:8f:02:b3:6a:6f:
0b:96:14:48:ae:a9:8d:8e:03:18:e7:e1:78:6b:6a:
11:37:85:1a:38:de:f2:d2:5e:24:96:83:64:d4:8e:
f0:c9:10:2c:65:25:57:df:54:51:0d:aa:cf:b4:f6:
ed:50:53:1d:a1:8d:b6:a5:2a:40:a3:90:8d:43:14:
3c:23:bd:02:ac:c7:0d:ae:c7:1a:6c:6e:40:5a:1e:
9b:d0:02:ee:40:4f:b0:3e:15:3c:2f:3c:76:91:7c:
dc:e5:de:9c:fd:05:77:e1:05:5e:81:20:a0:7c:50:
ab:0d:4e:ca:31:92:25:ec:b6:91:4e:52:16:31:0b:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BB:B2:65:55:2E:13:DB:5E:BA:BF:D1:B4:DB:53:74:9D:11:E9:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl
X509v3 Authority Key Identifier:
keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
sbgp-ipAddrBlock: critical
IPv4:
204.209.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:1f:32:87:f4:c4:81:b8:08:e7:b8:03:98:2d:05:ec:bd:63:
24:30:f9:fb:44:60:7d:83:66:94:8b:c0:b9:3c:07:07:27:a2:
cb:a7:5a:da:8a:8e:a0:b9:ad:d1:af:f6:7f:52:93:9b:cc:6a:
f9:41:c5:71:8b:6f:30:b0:a8:3f:19:8a:22:8b:b1:53:f2:99:
10:2b:26:c3:11:1c:7d:b5:f9:24:44:69:72:4b:72:38:6f:66:
08:cd:1c:5d:9a:a1:b8:4b:af:95:23:eb:ba:d5:ee:bf:20:ce:
a3:03:61:e3:02:c2:2f:64:9f:3c:71:ab:90:6a:a1:33:39:b8:
7c:8e:87:32:f2:47:89:fc:0e:c4:46:7d:59:ef:63:3d:85:6a:
f5:a3:56:4b:00:6b:82:b0:10:27:76:b2:9f:2b:9b:9f:cb:57:
60:fb:a6:d6:74:d9:d1:56:cc:d9:b4:99:8b:37:31:89:da:b9:
f3:29:fe:2b:a1:8b:55:66:e8:ca:5e:8b:60:ec:13:8b:fb:e2:
20:9e:de:19:14:b0:9f:d8:5e:cb:1a:d4:0d:27:e0:35:61:a1:
d3:a2:cf:f8:13:7d:85:c9:c6:bf:b1:b0:f9:9f:1e:41:39:12:
32:d6:f0:ba:ef:70:7b:a7:9e:3c:64:5f:4d:25:59:94:d6:c7:
7b:51:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:19 2025 by rpki-client