Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/c60df32e-02e7-3492-b504-59d4ffb6325c.roa
File: c60df32e-02e7-3492-b504-59d4ffb6325c.roa (raw, json)
Hash identifier: HsrmiclYUl4wViGLJLkng9WJdFyjPElQ/PR6USXMLYc=
Subject key identifier: 2D:11:55:0D:42:D3:F9:36:61:60:97:9A:4E:93:33:46:F6:14:98:D6
Certificate issuer: /CN=cb079463-85da-4da7-b699-7f92f9faff04
Certificate serial: 010D0C9F43285848530AF2D2F6F9ECF31A5BCAD0
Authority key identifier: 90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/c60df32e-02e7-3492-b504-59d4ffb6325c.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 19337
IP address blocks: 205.166.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f2:d2:f6:f9:ec:f3:1a:5b:ca:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb079463-85da-4da7-b699-7f92f9faff04
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=95e85c17-ecf9-4e94-9b90-e9f401b95605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a7:cd:ec:7d:77:bf:ea:24:fb:0f:ff:8c:6a:
86:f3:08:e5:25:64:67:12:21:ad:00:2b:70:bd:85:
2e:89:8c:d7:41:35:5f:2e:e8:b0:14:a7:c7:46:e5:
09:c4:e3:d9:9b:ee:24:c3:3d:71:be:06:63:73:0e:
c7:99:d0:37:4f:25:6c:74:c1:8c:9c:60:28:e9:e5:
02:92:8b:aa:54:14:72:47:4f:66:5c:bd:4b:7d:c2:
50:be:be:6a:9e:34:d2:92:41:0c:ab:11:4e:4f:bc:
04:f7:43:02:18:d2:88:fc:76:1d:74:c6:f0:3b:f7:
e6:df:16:28:8e:de:99:03:d1:44:ab:5d:af:28:1e:
6b:58:06:76:ad:43:3a:25:0e:29:1d:7e:b9:10:6e:
46:3f:c4:3d:c4:7a:f0:7f:c6:bc:8a:c7:7f:5e:78:
19:86:2a:25:39:78:e3:02:45:fb:4b:1e:59:29:db:
53:30:fe:0c:04:31:ca:97:01:af:cb:37:df:bd:7a:
46:a7:f7:da:05:aa:0d:57:9b:0e:a7:69:3f:03:54:
bf:8d:b9:3e:de:46:30:92:0c:76:8d:35:24:68:92:
e5:7f:bd:fe:7c:70:db:01:70:8a:1e:b9:1e:56:8d:
3e:5f:6a:cb:02:74:a6:34:e5:ec:ef:e2:7a:7d:3a:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:11:55:0D:42:D3:F9:36:61:60:97:9A:4E:93:33:46:F6:14:98:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/c60df32e-02e7-3492-b504-59d4ffb6325c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl
X509v3 Authority Key Identifier:
keyid:90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
sbgp-ipAddrBlock: critical
IPv4:
205.166.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:8d:42:7d:75:49:bb:b3:c9:6f:45:a7:25:85:e8:43:6b:79:
6f:eb:47:5e:de:49:a9:a5:14:3c:97:40:40:08:a7:1d:27:8c:
2d:7b:16:fe:71:40:fe:b8:64:7c:ba:28:4e:52:c2:36:df:87:
89:57:93:1b:09:96:b7:12:28:1d:98:6a:df:6e:30:fc:1c:93:
46:58:36:bd:58:94:55:fc:cc:0b:11:a0:2c:c5:fc:e2:2a:1a:
70:09:bc:d6:c2:0a:18:68:b7:a0:6d:af:07:32:a1:f0:0d:f2:
e5:af:03:9a:64:d9:5d:74:d5:3c:c2:ff:68:28:4f:df:25:cf:
f4:24:b6:1f:e8:77:09:0a:5a:cb:89:32:27:a6:bf:37:09:45:
10:af:f0:ed:a7:2a:80:12:12:b1:e5:72:62:6c:e2:2f:2b:e7:
5a:ad:5e:ef:f5:0a:13:11:e6:9a:c0:e4:3d:9d:e9:cf:63:99:
bb:5f:02:55:49:99:53:10:92:ff:c1:21:13:e9:37:59:2c:a5:
a8:a2:ca:c1:2b:a9:e8:af:06:19:29:3d:39:98:cf:46:51:c8:
45:91:e5:20:cd:41:f7:6b:f2:2a:a1:98:74:c5:83:0f:f1:de:
30:38:15:55:d2:1c:d2:c2:24:c5:5a:b8:32:f2:b0:cd:fa:97:
63:e7:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:38:16 2025 by rpki-client