Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa
File: 7fe96268-b787-3529-9f78-3e3d0ced15ee.roa (raw, json)
Hash identifier: hMxrlt3ZVFzobSKC4ekmj7VRhLKeWk3lSeT+bXTWa3M=
Subject key identifier: EF:B1:93:BA:A0:9D:9C:8D:72:2E:CF:37:6A:05:9E:7A:BD:0F:61:9F
Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial: 010D0C9F432858480EA5149B359826CE6DAEF780
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 13325
IP address blocks: 204.25.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:14:9b:35:98:26:ce:6d:ae:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=33933182-eb7c-4aae-aefb-a9339df2711a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:51:a8:d2:32:bd:a6:f9:94:ad:5d:9f:c9:
53:f2:45:e0:5e:d2:86:85:57:11:26:30:37:ff:60:
d7:cc:ed:d6:f9:b6:2f:d6:0d:09:81:70:7d:10:fb:
bb:e6:e1:24:2c:a9:43:a2:07:2b:2a:f2:d1:75:d4:
ae:b7:41:9b:04:15:be:68:f0:40:d4:03:bc:63:37:
a3:dd:01:bd:45:79:5f:26:a5:02:9a:a8:e1:1b:f2:
3b:3b:09:ec:a4:64:44:ad:b2:ce:19:9d:b1:a1:6f:
8d:87:d0:fb:27:dc:5d:36:ef:b4:94:f2:ac:72:35:
ab:3f:b8:22:af:10:42:10:e8:59:3e:01:3b:b4:4a:
2a:d4:d3:6c:85:7f:cf:6a:e8:8a:a5:5e:3c:cf:8b:
25:1f:8e:4d:fe:65:e9:7d:3e:c6:d9:6e:74:6a:89:
a0:c9:d5:2b:4f:f0:4d:1a:2b:bb:37:b8:d7:49:27:
28:f7:2c:6c:52:92:30:bb:7b:e4:ea:cf:af:de:9d:
01:f8:4d:a6:07:9b:77:78:45:06:20:79:fd:0b:b8:
8f:cb:ba:6c:d3:57:dc:ad:84:e2:8f:40:e3:26:95:
a0:29:55:4f:1b:6d:42:20:ce:5d:6e:60:29:24:dd:
7e:46:42:c9:53:05:25:68:96:9e:d6:9e:19:36:8b:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B1:93:BA:A0:9D:9C:8D:72:2E:CF:37:6A:05:9E:7A:BD:0F:61:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl
X509v3 Authority Key Identifier:
keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
sbgp-ipAddrBlock: critical
IPv4:
204.25.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:34:f7:60:4d:76:27:6f:bb:5d:be:07:5e:20:df:8a:92:09:
2d:bb:aa:21:17:53:34:c2:8b:aa:86:72:11:aa:3c:4e:f9:8e:
d5:90:18:35:63:5b:c5:8b:33:bc:49:79:04:86:1c:57:a5:8a:
d6:cd:50:96:ac:ae:a6:3a:72:da:65:fb:a2:51:16:2e:3a:df:
b0:bf:7d:08:cc:8f:9b:d1:3a:15:e7:f3:3f:46:b1:cf:e4:7e:
3b:62:b1:3b:a4:66:cc:f2:a0:31:36:a0:8d:72:48:7b:7c:64:
a3:e8:45:c5:3b:eb:d8:92:60:f2:66:41:bc:18:05:e1:4f:9d:
6c:fd:74:f2:db:24:77:75:c6:d7:dc:f9:48:ed:ad:6f:b3:97:
79:74:ae:1b:92:8b:20:00:cb:f7:30:da:c3:21:41:ce:a7:80:
59:d3:30:22:63:1b:59:c5:b2:10:c2:3c:d6:69:0b:ce:cb:c5:
c8:3c:e1:3d:bf:48:18:a8:31:ad:e8:20:e2:28:dc:38:59:33:
d5:92:eb:81:f1:a9:5a:82:22:cd:58:17:7a:58:64:f3:67:00:
27:64:cb:58:ba:fb:a4:19:9b:3c:c0:9b:21:e2:09:3b:2e:40:
da:4d:6b:b2:54:71:f0:6d:2c:54:34:89:9d:f6:58:ce:76:bd:
87:54:cf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:05:21 2025 by rpki-client