Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/513b70a1-3c50-3168-a6a9-58b6b68249ef.roa
File: 513b70a1-3c50-3168-a6a9-58b6b68249ef.roa (raw, json)
Hash identifier: gjXEV8BF5vEqAJQOb0NuJq0ENPcO8pNnr4RVgp6PqK0=
Subject key identifier: 05:86:3B:0D:CF:C8:C3:D0:69:E1:9F:18:08:93:21:32:D7:DB:A3:E1
Certificate issuer: /CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
Certificate serial: 010D0C9F432858489340A40DC731CFD2238A5500
Authority key identifier: ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/513b70a1-3c50-3168-a6a9-58b6b68249ef.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 46634
IP address blocks: 206.220.200.0/23 maxlen: 23
206.220.200.0/24 maxlen: 24
206.220.201.0/24 maxlen: 24
206.220.202.0/24 maxlen: 24
206.220.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a4:0d:c7:31:cf:d2:23:8a:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=0c1c86da-a8be-4617-8f3a-2216cbb4da6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:ae:ef:c2:db:db:aa:cf:7e:d1:eb:cf:8d:
25:f6:cf:5c:86:a7:f7:bc:2b:73:a1:e8:6d:ef:54:
bd:c1:e0:6a:fc:c7:48:ba:05:9b:41:ef:c5:43:d5:
56:b6:70:19:b0:82:8a:54:a8:7c:60:58:56:e6:2b:
4e:82:98:a6:aa:26:37:13:b9:9d:a4:32:5e:cb:d9:
c9:ee:49:1f:10:83:a8:d9:f2:05:be:ca:3e:c0:45:
de:0b:e9:3f:68:68:c4:06:d2:34:11:71:f4:d1:ae:
a8:d8:69:6e:59:26:c0:8e:70:c4:f8:fd:29:10:bc:
c7:35:53:7a:7a:e3:1a:90:26:49:ed:ee:b6:47:1c:
80:22:dc:08:4b:ff:b9:45:6a:2e:22:4f:5e:c0:8b:
80:51:11:49:c2:6f:34:3f:e2:58:eb:07:0b:03:44:
7e:b8:a9:ec:77:ff:de:d8:57:a7:08:53:ca:78:a9:
df:34:08:6a:52:23:7a:c7:38:78:96:bd:1e:10:1a:
ec:5d:fe:61:21:7a:81:b1:c9:e2:67:5a:d9:29:c6:
2c:46:9f:b9:e4:07:51:0f:c9:7d:c6:ba:bd:9a:94:
2e:b7:51:9b:24:7a:81:9b:af:7d:a1:43:1d:ce:5a:
ff:f1:bf:27:5d:6c:ad:84:e7:2e:59:e5:8d:83:91:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:3B:0D:CF:C8:C3:D0:69:E1:9F:18:08:93:21:32:D7:DB:A3:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/513b70a1-3c50-3168-a6a9-58b6b68249ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl
X509v3 Authority Key Identifier:
keyid:ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
sbgp-ipAddrBlock: critical
IPv4:
206.220.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:8b:aa:88:be:e3:07:4d:9b:c6:43:1e:30:ad:09:ed:21:9b:
1d:11:6b:8f:46:40:e3:21:07:80:64:fe:84:72:13:b2:6c:96:
d7:d2:95:ca:24:f0:c7:d9:58:4e:54:27:d9:2c:90:21:5b:f9:
0d:a2:ef:3f:70:40:a8:93:49:fc:28:f9:32:16:ee:3b:9f:e0:
6b:b0:9b:8d:43:44:a2:4e:d1:8e:e9:8b:36:a1:91:32:3d:3d:
b0:1b:61:1a:07:f7:b4:75:bd:50:04:d9:dd:f1:1d:bf:1d:b2:
01:c7:a9:48:33:e2:3e:74:7c:33:12:36:c9:eb:a6:89:be:7d:
50:41:1e:7d:4c:db:1a:51:c5:cb:73:27:4b:33:c7:e1:77:4e:
92:57:f3:69:47:fb:af:8f:ac:dd:95:65:12:f4:a6:49:3b:64:
0f:d6:33:49:32:49:8a:2b:07:07:b7:54:b4:1d:44:4f:84:38:
cd:4c:72:83:c8:d1:83:04:ea:c2:a9:a4:e7:19:af:19:34:d6:
f5:f6:ee:3b:62:c0:1f:c1:46:6f:66:c9:76:ec:3b:87:91:c0:
85:b2:55:ca:91:88:b1:89:9c:25:ff:68:13:e6:6e:f0:0a:1a:
5a:6e:c8:2d:57:a2:14:45:2d:55:56:47:f4:ca:82:10:fb:23:
d0:56:48:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:41:12 2025 by rpki-client