Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa
File: f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa (raw, json)
Hash identifier: Dc4cLsXZ36zQhYnWx3WlPzWzvBRfbeRlAKuKXQxJQLs=
Subject key identifier: 07:48:DC:AC:29:C2:71:0A:A0:76:E3:F8:8D:F3:CD:6D:AA:83:BE:02
Certificate issuer: /CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
Certificate serial: 010D0C9F4328584869606AB1A5F6FDEF2E454780
Authority key identifier: 07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 11105
IP address blocks: 142.58.0.0/16 maxlen: 16
199.60.0.0/20 maxlen: 20
199.60.16.0/23 maxlen: 23
199.60.18.0/24 maxlen: 24
204.239.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6a:b1:a5:f6:fd:ef:2e:45:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a74ba-c9d7-4a9f-8def-7b0124a204a7
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=9d789139-0c7a-41f6-a9e1-cb22bf8ccce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:07:02:82:4a:e3:15:85:3c:6a:97:fd:4a:63:
ca:a3:bf:d7:d7:9d:bb:9f:3b:1a:5d:f6:be:67:56:
cb:f2:87:b0:cf:39:24:8c:26:3a:d1:b6:19:61:87:
c3:89:e7:6c:23:ae:ca:7b:ce:8c:b6:27:45:a2:82:
f0:c3:86:61:aa:43:28:93:6d:10:5d:23:4c:7f:ec:
ad:71:5b:f7:ba:33:66:04:98:e7:ce:79:44:27:7c:
f5:58:88:2c:51:01:c6:41:5f:9d:43:d2:ee:f2:ca:
26:d6:2e:39:80:ad:63:7d:8a:e5:05:3a:20:3d:fa:
86:10:8e:9b:34:00:6f:63:f8:87:8a:de:69:ae:fe:
d1:2c:40:e4:8e:90:34:7b:80:de:09:1a:b1:9d:bb:
6c:55:08:24:fc:88:c2:24:ec:94:2d:c3:20:87:e1:
66:6b:14:f8:34:19:b5:f8:54:ab:91:e5:17:14:93:
b2:a5:03:80:29:91:53:58:5d:29:80:3a:52:2d:a1:
fd:9a:f5:77:12:8d:e7:5d:0d:44:ad:ce:d5:58:ed:
97:83:ff:c7:e2:96:22:fa:69:12:9d:16:7d:70:a3:
df:79:5d:2b:05:0b:8b:03:3a:7d:8f:01:6b:66:24:
c8:fc:6c:00:f1:3c:7e:5d:ff:75:f4:ff:ec:40:d3:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:48:DC:AC:29:C2:71:0A:A0:76:E3:F8:8D:F3:CD:6D:AA:83:BE:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/f193aa4e-19fe-3838-96ce-e27d859b1d9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.crl
X509v3 Authority Key Identifier:
keyid:07:CA:33:60:B6:E9:6C:26:41:FE:41:24:60:7A:CE:25:ED:9A:88:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d61a74ba-c9d7-4a9f-8def-7b0124a204a7.cer
sbgp-ipAddrBlock: critical
IPv4:
142.58.0.0/16
199.60.0.0-199.60.18.255
204.239.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:a5:63:90:df:14:bb:5a:cb:c8:71:44:7d:d4:a6:dd:8e:fc:
e1:0f:2a:91:94:90:19:fb:5e:f7:16:af:f5:19:55:3e:f8:8c:
07:0a:10:9a:23:4d:c3:f4:e3:e9:6b:76:30:5f:f0:69:f8:a5:
c9:bc:68:35:6b:7a:51:ff:98:52:58:57:bc:13:46:4e:17:80:
42:17:c6:eb:59:7a:9a:a3:a2:30:41:17:98:1e:a7:4e:39:0e:
b0:5a:76:7f:13:ac:2a:2a:5e:18:75:87:cd:4b:41:c7:22:a0:
01:d5:ff:1d:c0:16:4e:22:a2:11:d8:fe:9a:82:18:b1:cc:d4:
36:37:74:76:ba:5d:c5:0d:84:ff:75:d5:64:79:ed:fb:07:69:
3b:77:7a:70:ec:ff:4c:3f:33:b3:69:a1:bb:56:a4:e6:26:c1:
9f:ce:4a:15:4b:3f:01:14:08:81:21:9c:32:20:bf:e5:fb:92:
5d:a5:17:5e:d9:aa:ed:7f:ef:2e:36:53:5c:d4:93:06:57:ba:
fd:24:e2:88:b6:b8:cf:78:a0:66:dd:9a:91:a5:e8:37:5f:7d:
a6:92:4d:27:b4:19:07:90:9c:83:9c:e0:c2:0a:17:e9:bf:a7:
d7:01:52:d2:ee:a5:6e:3b:d3:8c:bb:53:95:42:c9:45:1a:34:
85:c9:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:51 2025 by rpki-client