Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/689a175c-8139-38d7-8a6f-600b40ae21e3.roa
File: 689a175c-8139-38d7-8a6f-600b40ae21e3.roa (raw, json)
Hash identifier: aVCh7JkG8xXxY59FhuIMCMc/9YoclzmEMJezgzy2iu4=
Subject key identifier: E0:A6:40:16:A5:C8:AF:DE:31:B7:32:3C:36:2D:75:03:54:FA:48:E9
Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial: 010D0C9F43285848100A966D60F4DFC475339800
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/689a175c-8139-38d7-8a6f-600b40ae21e3.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 8014
IP address blocks: 204.236.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:96:6d:60:f4:df:c4:75:33:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=04a7d65f-25a5-4266-be22-0dd323f08a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:b9:9f:4d:56:43:53:7e:66:35:49:f9:da:
27:3b:95:9a:f9:e3:e9:13:4c:c0:e6:23:1d:26:ec:
4a:34:eb:d0:1f:fe:de:3c:c8:e1:71:08:16:17:0b:
8b:76:97:67:e5:ce:3d:9c:ac:6c:13:a4:0b:66:aa:
55:c8:95:40:f0:87:92:b8:0f:00:c7:63:38:ae:6c:
fc:ed:30:72:e6:a8:45:df:85:8c:3b:38:62:4a:f4:
2d:bd:9d:37:ec:fa:60:06:02:50:0d:95:e0:f7:6c:
ec:6a:12:0a:12:46:57:a5:ea:f5:6e:91:2a:8b:01:
a6:e5:c7:1a:82:86:fa:7d:8a:0d:84:99:00:f1:c4:
1a:fd:38:cc:03:62:31:99:4d:b0:cd:88:8b:f7:9c:
48:ce:c9:54:75:c5:e1:46:94:dc:57:94:f4:0f:7d:
c4:f7:bf:a2:9a:56:41:21:0b:03:ce:cb:dd:67:af:
dc:ed:a1:10:c4:f4:d0:be:8f:99:cc:bb:23:9d:ee:
58:9b:8a:5e:47:57:b1:58:97:56:5d:3a:e5:34:35:
b8:15:93:76:c2:13:49:fc:57:09:fd:29:88:61:6a:
3b:98:02:cf:79:f1:21:5a:73:ed:e5:3a:fb:6d:0a:
bd:3c:d3:ab:d1:63:b4:58:81:7b:2d:21:03:9d:c0:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A6:40:16:A5:C8:AF:DE:31:B7:32:3C:36:2D:75:03:54:FA:48:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/689a175c-8139-38d7-8a6f-600b40ae21e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
X509v3 Authority Key Identifier:
keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
sbgp-ipAddrBlock: critical
IPv4:
204.236.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:fe:76:d1:4d:24:af:ce:9d:06:6b:9f:04:91:9c:6b:29:1c:
a9:e4:0c:80:3e:05:b4:79:dc:74:76:0b:48:63:0c:51:8d:5f:
74:83:ef:8c:11:6b:12:2d:2c:46:54:03:5a:b4:58:f1:88:3c:
61:8b:3b:ad:f7:28:c1:e6:8b:29:94:48:26:35:91:1f:cf:2c:
9d:27:93:cd:57:66:62:65:83:44:62:ae:35:74:a3:07:7a:a0:
60:ae:77:ef:d3:5c:6c:59:9d:77:6c:ef:23:c8:e3:82:7f:26:
74:79:2d:4f:c9:2b:cf:73:cc:11:7f:49:c2:cf:4b:69:93:d7:
b5:f9:32:b1:c5:b4:fc:a5:18:02:26:05:76:08:08:07:83:c3:
25:f9:0e:99:27:15:40:95:13:78:6d:48:9f:e7:33:bf:fc:12:
0b:e2:ea:2e:48:53:fb:05:94:ab:95:bc:78:f5:f1:62:14:1a:
b7:6f:2b:af:cd:f2:9a:a3:e4:34:02:be:ec:42:c8:6d:6b:4f:
b1:db:7b:54:c8:a5:dc:da:42:84:09:d3:60:86:71:15:9f:c6:
14:77:4b:e8:3a:7a:ce:fb:f2:eb:b3:d6:ba:32:bf:24:cc:86:
02:87:84:9d:46:0d:6b:07:db:78:89:40:80:87:59:60:55:92:
4e:de:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 06:23:10 2025 by rpki-client