Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa
File: ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa (raw, json)
Hash identifier: CTTQGZp3ttITnQraYD5dIgY6DBEiVFcdCWcajSKHxEg=
Subject key identifier: 70:ED:81:2D:66:EF:6B:F7:18:EB:D0:C0:56:48:DD:99:65:DC:74:2F
Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial: 010D0C9F4328584871C07383A784FF5A5A234AC0
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 21559
IP address blocks: 204.77.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:73:83:a7:84:ff:5a:5a:23:4a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=97939642-04b7-4636-9117-380c7b9f66a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:41:40:c7:e4:15:32:10:e7:02:2a:10:82:
0f:27:e9:a4:4b:5c:ab:f8:e5:83:fe:c9:c5:88:1f:
72:ba:b4:b8:d4:4b:95:40:0e:bb:b3:bb:38:c1:44:
e2:38:25:96:90:f1:7b:80:9a:c4:97:ca:84:f2:fa:
56:95:3b:36:0d:c3:07:06:1a:9d:ce:cc:08:5b:a9:
44:4d:7e:76:b9:26:f8:49:d0:5c:63:ec:79:9a:10:
6a:40:22:8a:0d:05:cd:d9:ed:31:03:25:5b:da:85:
5b:87:15:c1:de:67:0a:22:b1:9a:98:f9:6f:36:fe:
e5:24:07:3a:41:33:a4:07:97:3f:1f:f7:e1:5e:10:
e7:f7:01:47:2a:d4:af:4c:34:f1:58:a0:91:5c:d3:
d0:39:57:74:06:77:1a:db:4a:8d:a9:39:0c:8b:a2:
96:77:a8:16:39:e1:a7:24:12:c8:bb:f0:27:8e:35:
50:b5:7c:b1:ce:d3:67:d5:aa:eb:22:62:dc:81:cb:
d1:a0:3f:9e:86:3c:23:84:ec:c1:79:61:e2:1e:89:
32:86:75:ed:68:d6:2c:7e:ca:91:85:84:62:24:35:
6a:f1:0d:af:4f:ce:e2:2c:7b:a8:2a:0b:69:44:25:
c3:ae:aa:0f:c9:3f:89:38:9a:af:ea:9f:01:b3:23:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:81:2D:66:EF:6B:F7:18:EB:D0:C0:56:48:DD:99:65:DC:74:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
X509v3 Authority Key Identifier:
keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
sbgp-ipAddrBlock: critical
IPv4:
204.77.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:30:e7:fe:2d:04:e9:e2:49:d2:31:5e:92:08:bc:a0:eb:f6:
21:d0:43:6b:34:1b:df:62:2b:88:73:9c:0c:00:40:d0:a7:f5:
89:ee:fe:ab:e8:d5:09:fa:00:a8:5f:5c:ca:c3:2f:a9:8d:39:
96:e3:18:ff:1c:63:3e:91:7e:99:a2:b6:e5:85:e4:a8:8a:51:
38:94:68:83:b1:b4:ef:01:dc:13:d6:ea:a0:5b:f8:e7:8d:2c:
49:b7:e9:2c:a8:5d:6c:96:30:74:c5:1d:d1:99:04:bf:37:90:
01:e1:e1:12:f4:5d:30:57:0f:15:28:1d:d1:26:2d:01:95:e3:
c0:ec:7f:22:2a:02:1f:d2:18:78:54:06:e9:3e:6e:24:2e:4c:
b0:6f:47:85:49:6f:7e:04:80:d2:a4:36:90:02:05:5a:87:45:
d1:80:c2:9f:33:d0:15:51:c9:0f:2b:e6:a6:4c:2b:e5:f3:0f:
b1:2d:68:78:e3:88:a3:70:d1:3f:df:47:14:f2:bf:1b:84:02:
14:ca:07:3a:bf:cd:49:21:d6:f6:2a:ae:fe:60:1d:91:d7:b5:
6e:f7:1c:9d:b5:ce:f7:1b:eb:52:79:0d:4d:2a:10:e2:e4:8c:
74:e6:c6:98:6a:67:0f:61:b6:51:9e:a4:df:38:d5:b3:f4:56:
ef:1a:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:47:15 2025 by rpki-client