Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/585d4a39-5934-3024-8706-f6af69baec72.roa
File: 585d4a39-5934-3024-8706-f6af69baec72.roa (raw, json)
Hash identifier: 6Bkhq5It7xJrJSPFGQprS1hR7JJQd02ZYPgPxAE188I=
Subject key identifier: 00:5B:0C:AA:8F:CB:70:17:06:C1:31:78:05:67:90:05:54:7F:FE:C7
Certificate issuer: /CN=ac04797e-f41e-4575-a76e-d3656d2d0da3
Certificate serial: 010D0C9F432858487755D7841295B029AE84F300
Authority key identifier: 00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/585d4a39-5934-3024-8706-f6af69baec72.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 16509
IP address blocks: 206.252.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d7:84:12:95:b0:29:ae:84:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac04797e-f41e-4575-a76e-d3656d2d0da3
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=c4b499af-be4d-4b33-8752-8a45025d3798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:46:75:0f:e8:fa:3e:cb:43:b0:ed:1b:a0:
f9:d5:31:91:0b:29:e9:4f:5c:e2:ae:22:25:f1:f3:
63:a5:ab:ac:a8:a8:96:cb:6b:c5:54:92:30:10:b0:
28:21:3b:13:83:0e:0a:51:bf:e8:cc:77:ff:f0:84:
ca:a3:0c:fc:11:31:92:24:7d:ff:ff:64:27:5b:15:
cf:e2:d7:85:e9:66:89:70:d1:be:0b:22:ff:54:22:
43:9b:dd:c2:ad:95:85:82:84:76:40:d5:d9:d7:4a:
d9:43:40:d0:37:3f:b8:ef:0b:8d:26:14:d8:eb:22:
dc:79:c2:b4:7b:de:34:66:cb:95:fc:d1:50:c4:70:
52:ea:bd:65:b4:12:78:7b:e1:f5:d1:6b:fa:8f:2f:
f9:2a:0c:17:7d:92:c8:70:f2:08:86:ea:bb:0d:89:
95:91:a5:2d:7b:3e:b5:74:8b:1e:7c:25:0a:f8:ec:
78:cd:3a:a8:12:1e:a5:66:a4:32:92:35:5c:d0:37:
bc:4d:9b:6f:74:8f:93:58:1d:f1:93:55:69:12:f0:
58:96:ce:19:34:cb:ec:a9:8f:c3:4b:84:5f:da:50:
f2:01:7a:72:68:92:78:e0:a4:18:43:65:57:f9:60:
a8:af:93:60:ad:63:2b:4e:00:43:97:12:93:0c:49:
5b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:0C:AA:8F:CB:70:17:06:C1:31:78:05:67:90:05:54:7F:FE:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/585d4a39-5934-3024-8706-f6af69baec72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl
X509v3 Authority Key Identifier:
keyid:00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.252.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:2a:13:9f:2c:81:c4:d8:db:94:3e:e6:15:b7:40:f4:f0:fd:
70:b2:28:f0:b6:f9:95:06:67:a6:1b:e0:e4:e8:2b:38:e7:4f:
7c:d1:4f:37:af:17:b3:72:e1:eb:0a:49:e1:ba:ec:e9:a8:06:
e2:33:a1:08:45:bc:53:ec:ee:4d:c0:4d:f9:52:54:24:85:1a:
c2:6b:17:3c:7a:1b:a8:a2:d7:3d:83:ea:c9:41:f0:5e:88:46:
a0:89:c9:a2:4b:f7:3f:04:00:0c:48:47:90:06:80:ce:cd:f3:
86:36:36:be:ab:99:f2:d1:3a:3a:56:1e:f7:da:bf:bb:41:13:
57:82:d7:f8:05:c8:2e:22:b8:47:56:b4:da:00:55:6e:35:73:
67:1b:2b:0f:b3:99:f6:8c:db:61:cc:42:ac:af:d0:d8:c2:7a:
de:50:3f:c5:d1:29:af:f2:a6:96:95:3c:ab:f3:85:77:40:c4:
41:29:c6:db:f7:70:7f:2b:34:02:3e:df:9d:85:de:a1:e8:97:
c6:08:b8:f6:a8:bf:88:ad:09:ac:cf:11:41:5a:19:55:88:7f:
3d:8e:dd:fe:df:d6:78:79:6e:a1:a2:56:88:ca:11:f1:0e:cd:
26:dd:a7:05:50:3f:3f:7e:61:e6:b8:d9:a5:53:51:fa:bd:e0:
1c:21:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:51 2025 by rpki-client