Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa
File: 24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa (raw, json)
Hash identifier: MLiPxDf1zS346QdBZlbz/7d7RaksPqu2zXY+N/5BTJ4=
Subject key identifier: 77:1D:DD:29:B8:EB:92:F1:AC:20:F7:8C:02:33:0F:EB:EC:40:D4:10
Certificate issuer: /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial: 010D0C9F4328584819CFD32216356B4AE51E9F00
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 206.108.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:d3:22:16:35:6b:4a:e5:1e:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=4ce65891-80f4-418f-be4e-a6e4ffed8adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d5:08:fb:22:77:19:41:22:21:91:45:9b:4c:
58:79:c2:7d:3d:79:c6:16:b3:be:e9:91:db:4c:98:
56:8c:e0:fd:55:c6:22:ea:46:95:c2:c9:24:fa:ee:
02:47:9b:56:db:59:63:83:cf:4f:66:60:14:a1:46:
7a:b1:35:9e:ac:a9:66:1d:32:7f:1b:08:10:1c:48:
2c:04:41:16:51:fe:80:31:f0:11:65:a8:68:72:e2:
6e:3b:2a:50:03:81:cd:2e:35:8a:e6:76:04:b7:f8:
ac:a7:3d:38:a9:0d:2f:da:71:9e:20:e4:99:f1:bd:
86:e9:21:29:a4:76:a1:6e:2f:17:1e:0c:57:94:16:
01:38:81:56:9a:56:67:ac:4a:81:f4:3a:a6:d3:dc:
51:d1:4d:11:05:03:a8:ff:7f:54:77:93:6e:4f:a2:
4b:66:02:a9:7a:fb:e8:be:1f:80:5c:78:77:79:02:
f2:c1:12:7e:8d:e8:bd:03:96:3a:c5:63:3a:98:f9:
8f:da:81:63:dc:c8:07:1e:2d:85:48:83:44:20:83:
5b:9a:09:08:52:51:af:75:1b:c9:8b:01:47:5e:06:
28:07:4c:a8:a9:49:05:8c:fb:47:49:f4:cd:eb:22:
fc:d3:de:37:f6:f3:a4:8f:39:31:3a:ac:76:43:44:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1D:DD:29:B8:EB:92:F1:AC:20:F7:8C:02:33:0F:EB:EC:40:D4:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/24c3b433-394d-3c4d-baa1-18b5816f7d6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
X509v3 Authority Key Identifier:
keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
sbgp-ipAddrBlock: critical
IPv4:
206.108.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:42:3a:cd:e2:3c:8c:1c:2c:38:5d:ce:40:ad:2d:d1:22:7b:
b8:f2:50:4d:46:0c:23:34:f2:23:01:9e:96:18:41:39:fa:b1:
34:e5:6e:55:8f:48:80:d3:40:e1:94:eb:49:cc:8f:61:f8:68:
6b:aa:db:0b:26:da:f7:76:18:82:8f:e3:8d:63:81:b2:32:1d:
53:b8:66:ea:c4:38:7d:8e:dc:45:7c:95:f1:dc:be:47:d3:af:
b1:40:08:9a:67:80:62:51:3c:2a:82:a7:b2:78:99:44:e4:ea:
1e:15:e8:72:c9:1e:fc:14:26:dc:30:08:64:23:50:f7:51:5b:
3c:3c:ea:9d:ed:8a:10:c6:14:03:ae:cc:81:85:22:5a:d7:eb:
b2:7f:b6:b7:b6:b6:af:9d:bc:fd:da:32:ec:0d:8c:2c:f3:bd:
dc:9c:2a:59:64:00:2d:2e:31:5a:db:80:7b:31:f6:ac:42:78:
f9:02:9f:53:0e:86:42:98:25:08:67:3a:6d:58:e7:61:ed:aa:
bd:1a:8a:87:a0:45:1c:cf:44:94:8e:eb:28:f5:42:bd:6b:95:
a5:b8:04:2f:5f:87:4f:1d:02:f8:a3:8e:be:91:bf:2e:ca:e0:
31:6a:ed:33:b7:89:a9:d2:b0:88:92:99:6a:5c:91:33:31:5d:
69:db:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:35 2025 by rpki-client