Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a51a9291-44f4-3bfc-a893-35a5eb20289c.roa
File: a51a9291-44f4-3bfc-a893-35a5eb20289c.roa (raw, json)
Hash identifier: zqZjAFMZ52DiyGDqup39Zr1DhZJRiNjQ9kI66B8KZWw=
Subject key identifier: 35:4F:CB:5D:4A:CE:24:08:FD:7D:26:8A:AD:96:18:5C:D7:9D:E6:4C
Certificate issuer: /CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
Certificate serial: 010D0C9F43285847FF4A4A55C54B958C032CB780
Authority key identifier: 68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a51a9291-44f4-3bfc-a893-35a5eb20289c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 32639
IP address blocks: 204.239.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:4a:55:c5:4b:95:8c:03:2c:b7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=52a899c4-307a-4c3d-b59b-05039a9f04a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f6:87:ac:2f:12:a8:d7:34:84:a3:d5:bb:5a:
8d:3d:f8:42:75:f3:6f:31:81:09:01:a4:16:5f:fc:
02:d9:97:d4:14:94:2c:84:50:18:01:6d:ba:89:59:
c0:1e:9e:a6:de:98:06:6b:b7:88:f9:35:e4:7a:80:
50:6f:c2:cc:85:d3:7a:7a:33:1f:1e:aa:d7:29:b3:
49:5c:1c:cf:73:cb:ea:e0:92:96:8e:36:4c:f1:90:
f3:1d:18:fc:b0:72:29:24:a9:db:11:28:54:9b:3c:
34:60:36:f4:ad:41:4b:1a:71:5d:89:ff:fa:8e:56:
ea:e0:5e:d9:c4:c4:95:9b:a5:8c:0c:03:9d:1a:e9:
24:19:be:a5:b4:6d:ab:84:4b:a0:ff:af:88:b2:84:
08:80:23:2a:ef:58:87:df:6a:d1:e9:af:45:28:5e:
62:b0:28:cb:62:24:b5:f9:c3:e3:5e:cf:12:df:bb:
4b:ef:b8:49:50:b9:54:c0:87:58:c8:9a:03:d0:58:
e4:bd:fd:b3:ed:60:b6:f4:b7:bd:7d:8b:cd:d7:c4:
e4:0d:8e:e5:6d:97:43:bc:8e:cf:94:5d:b5:b2:ed:
66:f1:f8:f2:c9:81:58:33:ad:89:cc:72:81:56:cb:
93:c2:12:16:04:85:a5:83:20:59:a0:cf:1a:35:30:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4F:CB:5D:4A:CE:24:08:FD:7D:26:8A:AD:96:18:5C:D7:9D:E6:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a51a9291-44f4-3bfc-a893-35a5eb20289c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl
X509v3 Authority Key Identifier:
keyid:68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
sbgp-ipAddrBlock: critical
IPv4:
204.239.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:a9:6e:45:18:29:c0:87:10:3b:b9:8e:33:9e:c7:be:26:34:
29:cc:13:a3:0e:a2:00:69:32:3f:c4:b1:db:7e:0e:71:32:8f:
95:41:bb:30:3a:66:85:b1:df:45:6e:9a:f7:58:d7:f0:11:48:
28:98:90:4b:0a:12:69:fa:f2:48:2d:9a:e7:a3:46:8c:ef:0e:
18:1d:52:f3:c8:06:9a:90:73:cb:1f:54:ec:e5:e6:4c:f1:ff:
21:56:3e:42:d6:02:9f:91:fb:8c:2f:41:56:1a:f6:09:68:65:
4a:63:95:96:73:33:65:3f:c1:64:74:f9:7b:60:59:34:67:57:
c0:85:89:dc:db:f4:32:d4:a9:96:40:ac:29:85:7f:0e:bc:78:
87:9c:6b:14:a8:3c:c4:76:33:0e:3d:64:1c:29:b4:3d:cd:d8:
68:11:04:3f:87:e7:ba:be:41:8c:20:a3:4e:79:a7:46:29:3c:
77:5d:96:3e:73:16:89:67:c1:7d:fc:91:7e:61:52:11:ed:58:
0c:cc:b6:7a:c1:1a:b0:04:2c:3b:7a:50:52:92:dc:c4:49:2d:
f2:89:b6:02:8e:6e:1d:0e:a0:44:6a:b5:06:4a:56:20:85:b3:
97:ff:b8:11:1b:9b:df:fe:ef:f6:70:29:e2:3c:1d:bb:da:1d:
49:1a:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:01 2025 by rpki-client