Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
File: 6b20c6c8-b544-3233-9c89-ea3eead2913d.roa (raw, json)
Hash identifier: rz8h/e/0nLGDbG9u8mxhVbTOMZfJI1tmzvggABu2jYU=
Subject key identifier: CA:39:3B:14:A8:30:CB:86:75:F7:C0:4C:C4:3E:FE:0A:B0:4C:26:01
Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial: 010D0C9F43285848143A80A2B5B222AAB1543B00
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 18914
IP address blocks: 204.8.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:80:a2:b5:b2:22:aa:b1:54:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=7f4e3de1-1b62-4754-be9c-701fd240c9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:cb:38:bd:33:40:f1:be:bc:30:36:45:73:
c5:9b:93:c6:58:41:79:e1:87:d1:ca:46:fe:f7:35:
2d:ef:c8:b6:c1:a0:fc:98:1d:1f:d6:2f:fd:ad:e9:
64:d2:45:21:1a:4b:fa:8c:5d:5a:73:14:dc:03:aa:
a9:da:98:ed:b1:a0:72:1f:3a:41:5b:2c:6e:79:fb:
e0:f4:d4:e2:5f:a0:1a:99:e4:4e:6e:6b:fd:90:0b:
e4:4f:14:35:fe:fa:8e:97:c1:c9:8c:5e:e8:ed:5e:
88:41:e8:82:88:cd:69:8c:d6:c4:79:14:3e:88:23:
d4:3a:d0:e1:bf:ce:4b:47:7b:84:8a:6d:ed:96:86:
06:87:ab:01:58:f3:11:ff:80:10:32:32:a0:c4:26:
80:62:67:cf:5f:42:4a:46:14:41:7b:88:78:e1:27:
4f:b2:15:28:a4:48:a7:bc:47:5d:a2:92:de:65:54:
a4:08:f0:f0:07:1c:08:24:57:07:94:98:ca:45:74:
fc:f8:69:12:6d:43:bb:22:57:34:57:d7:f5:69:f1:
92:ce:ed:c0:c2:ed:2f:59:1e:d7:d6:a8:77:92:b9:
e3:6e:e9:6e:ed:24:e8:3e:2d:a8:83:ae:05:a8:3d:
97:5c:78:d4:15:81:d3:d6:c2:60:b0:c0:e2:60:6a:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:39:3B:14:A8:30:CB:86:75:F7:C0:4C:C4:3E:FE:0A:B0:4C:26:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
X509v3 Authority Key Identifier:
keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:a4:38:c2:5d:d9:b8:e0:79:73:a6:39:e2:d4:b8:92:1a:cc:
f9:90:42:88:ef:92:25:e0:6d:02:6a:3f:c2:3d:3c:86:06:33:
ef:f9:1c:cc:b1:82:7c:11:ee:94:ac:a8:9e:30:7b:27:0e:ce:
95:94:f1:6b:7d:02:e5:90:d2:2b:b3:5a:9a:62:73:b6:35:fb:
73:fb:96:60:16:90:3c:5c:f1:5d:f8:3d:50:6a:99:59:60:32:
e2:11:9a:12:08:25:f7:b5:31:9d:4c:30:ea:6a:e0:ea:0d:6a:
78:36:f5:c4:4f:80:92:00:55:27:2c:ca:41:86:f8:58:b6:98:
67:f9:5d:5f:db:06:0c:65:35:27:bf:69:80:7d:aa:22:5d:9f:
3b:c9:56:e5:11:12:e0:ea:b6:71:41:94:f4:29:d1:74:3c:04:
15:10:79:f7:c8:d0:45:e6:55:96:8f:e9:f6:61:4f:fc:0f:22:
07:85:03:55:ff:e0:d7:13:81:ef:ab:45:1c:2e:3b:51:9b:2b:
ea:3c:84:f4:ba:fd:89:23:1e:5a:3d:22:9b:f5:73:ff:93:bf:
b7:8c:4a:d1:6a:af:39:74:99:44:93:f7:f2:63:c8:4e:90:9d:
3a:ea:d9:6f:45:6f:3c:4f:45:63:f9:3d:2e:5d:5a:d1:10:a3:
1a:d1:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:51:20 2025 by rpki-client