Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa
File: 58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa (raw, json)
Hash identifier: 4HW3VDlvvNyVQKMwvpWDneKfM4iZZLL+aouAHXhR6eE=
Subject key identifier: 02:2D:05:AA:47:3F:80:A0:15:1D:1A:24:6B:D5:44:76:C0:65:20:5B
Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial: 010D0C9F43285848A13619250B24B5168A1F0D80
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 393981
IP address blocks: 204.239.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:19:25:0b:24:b5:16:8a:1f:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=e9bc70b8-a4fd-4972-8a6c-bb094a8a89bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:43:51:52:da:62:65:2e:55:33:79:17:9e:
65:4c:1b:d7:f3:a0:3c:ed:51:27:35:a0:2c:ee:28:
4b:18:b1:55:f7:b0:9d:1d:4c:e8:cb:25:c5:ee:e1:
d2:fc:1f:62:75:64:6e:d3:69:13:69:47:ad:ca:dd:
b8:7e:89:cd:e6:06:68:77:b5:7d:4b:ae:bd:2e:39:
ce:c5:ee:4c:55:f6:0f:c9:62:ff:9e:ab:ad:48:d3:
9c:9e:9e:39:7d:11:f8:09:8a:77:31:bc:89:1a:50:
be:20:cd:9f:52:1f:a3:08:4a:3f:07:24:b3:76:5b:
f7:f6:b8:51:8b:da:9e:d9:01:13:f5:68:a5:e3:39:
02:6f:3b:58:2f:05:1e:aa:67:a3:7a:60:87:cb:69:
40:86:a3:c4:3b:ad:a2:c0:bc:86:d6:ba:4c:3f:3f:
d8:1d:8e:31:41:60:b4:c6:5f:fe:56:2a:b4:20:c6:
9b:e3:bb:07:b9:ba:a5:c9:f5:20:f7:d3:0b:15:41:
4c:7e:bc:9d:70:7e:e5:34:37:bc:73:3f:f1:1b:50:
fb:74:02:fb:a3:69:86:fc:7f:d5:65:74:53:08:66:
66:d9:2c:6c:41:33:a7:0c:c9:ee:48:1a:2b:a4:f0:
72:9d:40:50:2c:d1:a0:57:c8:8c:2d:cf:1c:9b:11:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:05:AA:47:3F:80:A0:15:1D:1A:24:6B:D5:44:76:C0:65:20:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl
X509v3 Authority Key Identifier:
keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
sbgp-ipAddrBlock: critical
IPv4:
204.239.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:81:9d:44:59:66:1d:8d:1a:fb:9a:55:81:bf:dc:85:21:c9:
47:97:c2:9f:99:75:1f:f5:14:a1:9f:4a:fc:cd:f7:50:8d:89:
16:c6:f0:ed:f4:7c:5b:31:61:45:05:b9:11:83:6e:80:8b:56:
40:24:e0:54:33:52:87:ac:f9:7c:18:32:7b:f3:13:47:48:9a:
09:35:6b:0d:30:ff:fb:10:af:45:70:0f:68:1a:0a:b4:73:29:
1f:32:4a:39:a4:1c:59:61:40:9d:b1:79:c2:6a:10:c4:d1:6d:
f4:98:46:e9:c8:2b:53:7e:36:a3:1c:68:99:f8:c2:4f:c0:2a:
7b:5c:0d:c2:fc:a3:0e:52:a7:61:df:34:37:c5:51:c4:a1:76:
3e:42:da:1c:9c:93:d1:98:ce:17:27:4c:e1:c8:9b:5a:38:37:
b6:9b:8f:bf:22:9d:52:df:dd:92:ef:39:4a:fd:6b:21:c9:86:
34:96:da:ee:61:56:b1:d1:46:af:7a:ef:a3:09:98:f7:5c:3d:
5b:11:70:1d:78:98:df:64:bb:7c:ae:05:32:73:71:9a:57:64:
81:cb:da:0d:b9:08:8b:0e:99:3e:9d:d1:18:58:4f:a7:ef:91:
02:bc:bd:4e:ce:c6:38:eb:43:50:bf:75:73:05:cf:4c:0b:61:
c5:b7:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:53 2025 by rpki-client