Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa
File: 514b984c-cac0-3f94-a6d5-e507ad0ad953.roa (raw, json)
Hash identifier: Xm37q8VD46NWixUaqamv/s3VLES84dyyQEAiKEmSPJA=
Subject key identifier: 74:8F:22:CE:D7:9C:1F:A5:16:C1:35:1D:16:F2:15:E0:77:37:93:CA
Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial: 010D0C9F4328584979744098459CEF89712E8940
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa
Signing time: Thu 10 Apr 2025 01:00:46 +0000
ROA not before: Thu 10 Apr 2025 01:00:46 +0000
ROA not after: Wed 09 Jul 2025 01:00:46 +0000
asID: 400591
IP address blocks: 204.8.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:79:74:40:98:45:9c:ef:89:71:2e:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Validity
Not Before: Apr 10 01:00:46 2025 GMT
Not After : Jul 9 01:00:46 2025 GMT
Subject: CN=7e1f540d-f428-44c4-ad2c-143faac3d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:fa:58:98:71:d3:a5:ac:04:66:21:fd:09:
8f:b2:0c:c5:3e:c0:23:10:33:08:13:97:be:b9:72:
7d:dd:b5:16:56:f3:80:70:fd:54:4d:08:a7:fa:c9:
f9:fb:29:b2:70:0f:9f:7a:0b:95:9a:8b:fe:1a:6e:
36:cc:2f:f7:22:2f:30:df:35:96:2f:fe:e2:90:d1:
4e:c7:f8:37:17:03:94:34:af:a5:a4:ea:93:a1:53:
17:c4:8a:3a:27:1f:9b:7e:7c:f5:58:eb:12:e8:80:
4f:a1:13:11:99:f5:d8:bd:20:81:95:06:87:90:4f:
a8:6e:90:0a:76:a1:31:0e:d5:9f:cf:48:5a:10:47:
a8:4a:be:2b:26:75:b7:b5:b7:d1:6c:95:c1:ef:fd:
2b:b4:b2:5b:19:66:f0:97:a9:0b:f9:8c:04:75:5d:
2c:62:bb:75:b3:d5:53:bd:48:6b:f0:92:9d:d1:b9:
ea:78:53:c2:d5:3f:7a:fd:02:6a:06:e8:e0:83:c3:
ba:bf:e8:cf:7d:7a:d6:0a:e5:72:ba:58:8b:4c:b2:
0e:ef:e4:a9:ab:c6:ef:1e:1c:1d:e7:78:ae:a9:47:
57:37:6d:4d:cb:67:f7:17:39:e1:7e:86:52:95:fa:
70:55:52:39:a4:a5:3f:f7:02:33:4b:f8:4d:d7:f5:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8F:22:CE:D7:9C:1F:A5:16:C1:35:1D:16:F2:15:E0:77:37:93:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/514b984c-cac0-3f94-a6d5-e507ad0ad953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
X509v3 Authority Key Identifier:
keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
sbgp-ipAddrBlock: critical
IPv4:
204.8.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:c2:57:05:f9:0a:3e:bc:f5:3e:a3:d2:bb:93:15:e7:7e:c6:
bb:8e:56:90:69:4e:6e:db:c6:79:67:e2:0b:d4:ed:d4:4a:79:
9f:ec:bd:a2:69:e3:25:e6:ba:48:32:3d:16:32:5f:97:ea:cc:
c9:6f:d1:50:8d:84:27:2c:1e:22:c6:3c:d8:72:cc:a9:dc:76:
65:68:72:43:e4:83:98:d1:e6:44:d4:6a:2c:5b:51:b3:3d:1b:
97:34:ef:14:71:dd:84:8b:44:3d:1b:2b:37:a0:be:4d:e6:3f:
44:7c:47:b5:20:89:aa:5c:0c:c7:3b:98:01:6c:79:fb:79:d0:
7b:fe:8e:e2:90:28:e1:91:90:a7:cc:9a:23:6a:17:b4:1d:df:
14:a4:77:46:91:47:48:8a:b3:5b:fe:de:00:66:fc:34:4b:f4:
fe:d2:ac:a1:7d:82:88:d4:d9:4c:66:60:1c:18:22:09:43:8d:
8a:52:98:3d:d1:c0:5e:d4:e7:df:b8:bc:86:86:7e:e4:7b:ed:
62:2b:d6:1f:af:9f:b4:dc:d3:8e:5e:6c:32:f1:94:67:38:ae:
9f:94:1b:b5:b5:1c:92:8e:d7:73:f3:56:9f:8a:a4:4b:a0:eb:
3d:88:d5:51:aa:96:f5:b8:5a:d8:fb:be:16:b0:55:d7:4c:36:
03:57:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:21 2025 by rpki-client on console.sobornost.net