Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa
File: 658f8956-451b-3b57-883e-5ede69e83e94.roa (raw, json)
Hash identifier: NE/PphCX8WXDEBY6gZe9nRozUWiagl9Wvhn354zsHYg=
Subject key identifier: 46:84:FE:11:73:D5:FD:11:56:C0:89:04:57:F9:C3:AA:F6:B3:D4:AB
Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Certificate serial: 010D0C9F4328584819CFD345D97F77E597A22880
Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 3737
IP address blocks: 204.186.0.0/16 maxlen: 24
209.50.128.0/19 maxlen: 24
209.173.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d3:45:d9:7f:77:e5:97:a2:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=eed5e0b1-c1c1-446a-843b-54f31fa73326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:52:0e:ac:97:4d:50:0f:d4:03:a3:60:bf:
c0:8f:26:c1:1d:b1:ad:3d:d3:fa:74:64:c6:45:3e:
0f:92:f7:3a:32:44:2c:7e:aa:6b:24:ac:db:9d:03:
ed:17:75:04:9e:28:6f:49:bd:b3:a0:3a:88:c5:ef:
71:1f:93:56:b6:46:d1:f5:60:e7:c2:86:7e:6a:0d:
65:f1:4f:04:e5:2b:30:df:ea:3d:47:78:1f:4b:82:
2f:a3:07:fe:ff:5f:39:5a:b0:22:77:e6:d6:87:04:
25:b5:86:25:ff:6a:fc:c2:25:29:0d:99:3b:13:44:
ec:87:24:00:39:99:36:b2:e2:85:0d:74:9d:6b:2e:
0f:ea:83:c1:4f:bd:df:7a:8a:4d:3c:de:92:b2:40:
b4:69:18:10:0d:f3:77:67:da:38:c1:75:c1:8b:ed:
2d:ee:c8:97:6c:9e:66:1a:10:92:b7:d0:93:5a:fe:
97:db:c7:8f:9d:52:1a:e8:64:67:66:76:bc:1c:ff:
4e:08:3b:bd:2b:21:40:1a:c6:46:c7:14:12:0d:9e:
ef:bc:f4:1a:ef:5e:36:08:50:2e:a0:5c:ef:b4:2c:
7f:e0:c7:e7:7a:e9:76:0e:6e:75:9f:5e:fc:4d:85:
9e:f8:c9:67:28:4c:48:4b:9e:52:e3:b6:29:6a:e7:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:84:FE:11:73:D5:FD:11:56:C0:89:04:57:F9:C3:AA:F6:B3:D4:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/658f8956-451b-3b57-883e-5ede69e83e94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl
X509v3 Authority Key Identifier:
keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer
sbgp-ipAddrBlock: critical
IPv4:
204.186.0.0/16
209.50.128.0/19
209.173.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:d6:1d:0f:e1:50:19:66:97:59:2f:52:af:9e:26:cf:52:21:
36:ff:dc:dd:d5:21:5b:75:88:24:85:cc:73:cd:61:80:44:77:
06:95:98:83:d6:f3:4c:58:94:81:3f:fc:6d:c4:49:e3:42:7b:
80:8c:62:54:5e:49:d5:c6:54:05:bd:1f:d3:b9:9b:95:53:56:
74:55:de:91:cb:78:63:d4:31:93:5e:d5:83:fa:5b:ec:90:b6:
25:c0:64:41:ee:ef:a4:3d:eb:5d:b1:53:51:22:96:ac:ba:b0:
1e:d0:b0:74:ba:7e:4d:ae:60:0d:60:52:04:5d:8a:96:86:88:
ce:99:4d:7f:4f:1f:be:59:c4:02:4d:bf:21:82:7d:e6:cc:72:
ad:a4:9b:3f:44:08:60:51:56:70:44:19:20:a1:24:3c:88:b9:
24:87:00:c6:8e:bd:70:c8:f7:37:26:59:ae:ff:d9:3a:61:c7:
67:aa:72:a7:21:74:88:c4:7c:27:a5:b2:f7:4e:73:28:09:0c:
0f:4a:3c:32:e5:4b:fd:a3:b4:f9:7e:dd:01:d3:52:8c:a5:d6:
08:33:ad:c8:88:8e:5d:a4:98:37:c8:da:1c:0e:fa:52:f6:92:
1d:cc:41:fb:79:9f:6d:29:0c:f6:35:96:77:e8:55:1d:98:cc:
99:69:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:35:33 2025 by rpki-client