Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
File: a211ca82-981c-32d0-8241-ba4946736b50.roa (raw, json)
Hash identifier: zmxZvIQXVx5LjqvkUSEXdVLzZxwDwU/4ktZZvPbe+Vc=
Subject key identifier: 89:98:C1:C6:A7:B5:00:25:73:92:C3:FD:EA:0C:C6:12:7B:C9:8B:E2
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848159FECE0D68882444ACB543C
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 53345
IP address blocks: 205.252.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ec:e0:d6:88:82:44:4a:cb:54:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=590615b0-22d1-46d9-89c6-b67c3fb79bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:ed:5f:37:22:b6:93:95:6d:cf:d6:d2:d4:
4c:47:c5:dd:74:ed:86:7a:80:a9:e6:08:90:3a:c7:
1c:cb:44:32:62:bf:27:5f:11:1a:3c:00:bc:f1:f9:
50:b8:2b:97:45:fb:ad:a4:8b:62:3b:54:a9:56:6d:
62:40:07:6c:d8:9d:fd:da:76:ef:19:54:d5:7e:d2:
bc:d3:b2:cc:b1:9f:1e:b4:c9:f5:39:8d:a0:28:23:
49:a4:4e:17:ae:6d:66:48:83:df:13:2d:b9:56:8b:
1f:83:db:e6:58:bf:91:c5:53:03:9b:d1:86:7e:73:
27:ef:0c:62:b7:f8:ea:4b:29:68:bb:5f:b7:b2:c9:
8b:96:01:31:f8:49:71:5c:5d:65:06:de:fc:b3:fb:
60:37:d8:c1:79:b5:bb:91:7d:dc:42:8c:5e:04:42:
96:fa:59:57:33:db:b7:fe:a8:94:c4:7e:da:3d:25:
9b:05:98:ba:d6:6f:42:ab:56:53:58:0e:06:78:21:
e9:ff:26:ef:9e:d2:33:99:8f:50:b2:da:c1:d4:c9:
cb:98:bd:e0:39:06:ee:22:1d:09:f9:d6:1e:f1:73:
d8:8d:76:4b:df:b5:e7:58:8e:29:25:d4:38:cb:e1:
22:b4:fe:07:c2:2c:7e:6f:26:65:88:4d:56:a7:69:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:C1:C6:A7:B5:00:25:73:92:C3:FD:EA:0C:C6:12:7B:C9:8B:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a211ca82-981c-32d0-8241-ba4946736b50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.252.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:df:c8:7c:ac:97:f4:d8:60:40:7a:c6:0c:5b:30:4d:a6:b0:
bf:bc:74:03:49:53:5f:50:bc:56:a2:ed:59:22:2e:02:41:6a:
73:6b:77:29:62:8c:d3:63:0c:62:e5:cd:9a:42:c4:2d:6b:dc:
6c:71:0d:08:c9:ee:f1:ad:4a:9d:06:bd:8b:1b:dc:b0:3a:78:
e8:a4:53:d1:5f:13:c2:57:31:b0:e2:ac:c8:07:ee:a0:02:65:
e6:f7:05:64:8b:7a:24:09:a0:0e:4a:fd:df:dc:4b:b7:5c:f3:
f1:18:d0:42:6c:9e:16:c4:30:8f:95:fc:38:85:8a:8d:6e:f3:
45:d9:f5:b8:f9:fa:82:82:24:b6:32:3b:e1:d0:a1:39:27:f6:
2e:94:c1:10:23:3d:33:15:fc:d9:cd:fb:73:0d:0e:5b:b0:07:
0b:08:35:35:47:2b:e6:aa:d7:89:52:8f:d5:d8:35:d3:2c:62:
ba:e5:76:a5:d4:f0:dd:3b:67:be:3b:aa:a9:59:c7:48:4a:5f:
23:c1:a9:f9:78:eb:d2:5b:8a:39:e0:a4:ac:7f:f4:a9:74:6a:
9a:a6:e1:c4:46:4d:bd:48:65:cf:c2:52:04:d5:26:2d:57:03:
cf:c2:da:56:67:81:5c:8f:fb:8d:6e:80:ce:f6:3d:6d:a7:5b:
4a:fc:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:59 2025 by rpki-client