Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e6a071dc-b670-3e25-a2cd-a46452f685d1.roa
File: e6a071dc-b670-3e25-a2cd-a46452f685d1.roa (raw, json)
Hash identifier: jz8QzAo5shlVcLe/1jugRanioFmu4Ls0YNnQIlG3Azk=
Subject key identifier: D0:C2:F7:EA:34:75:47:46:95:28:FB:DF:70:E8:E1:2A:5D:55:5C:A3
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858480EA502BFA52F2798441DF720
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e6a071dc-b670-3e25-a2cd-a46452f685d1.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 4058
IP address blocks: 206.54.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:02:bf:a5:2f:27:98:44:1d:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=8d9aee6c-3c6e-4dbd-9019-0680fda9a076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4f:1f:5e:7a:4d:14:a9:c4:61:d6:92:b0:7f:
fe:1d:64:af:25:e8:70:24:92:c6:3c:4e:53:4f:81:
9f:fb:0f:88:11:91:2f:6e:8f:ed:77:d7:87:32:3e:
a0:00:14:c6:ed:80:e3:fd:db:98:a2:db:90:37:bc:
bc:a3:09:3e:0f:22:7f:63:ab:78:d8:de:74:0f:86:
33:81:da:a7:1b:98:31:a3:7a:f0:a8:5c:0f:74:b4:
3f:bf:a9:63:5f:87:1c:7a:d0:2c:f8:60:75:9b:74:
c9:1f:77:eb:53:87:a5:0f:6c:c9:39:99:84:07:ee:
46:c0:a5:b2:c3:f2:b2:4a:b9:f4:2c:95:ee:c6:b1:
53:47:2c:50:bf:1f:75:3b:80:cf:27:a3:6e:4a:6c:
91:93:cb:45:ca:ad:42:e4:8f:80:f8:0b:4c:0e:d6:
62:ec:13:9f:bc:df:1c:f6:2d:6a:75:8d:d9:a9:2e:
54:f6:9a:0c:f2:3d:1b:0e:d4:b2:3d:2c:0e:d6:af:
70:4f:b3:68:38:3d:e4:99:29:63:f5:5a:6f:90:3a:
a4:56:48:65:b7:e0:4b:d8:01:a2:4a:84:a6:b5:e2:
c3:1d:72:c1:fa:c8:7e:d0:23:c5:78:af:6e:15:b2:
23:27:1d:84:50:a8:48:67:a3:d3:14:05:78:8a:91:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:F7:EA:34:75:47:46:95:28:FB:DF:70:E8:E1:2A:5D:55:5C:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e6a071dc-b670-3e25-a2cd-a46452f685d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.54.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:ea:6a:a7:b4:b2:e7:d5:17:da:67:ad:aa:8c:e9:2c:48:0a:
8a:a1:22:eb:1a:64:40:e5:12:dd:d1:f2:c3:28:92:e6:b3:fb:
52:97:2a:b4:b5:96:35:69:f7:b7:e1:8d:45:a0:74:27:88:61:
66:a9:46:25:81:96:b1:e9:7a:87:ea:dc:0b:01:1d:55:d6:e3:
d7:6b:8c:be:02:ca:1c:8f:2b:89:2c:d0:8a:e5:e6:6e:43:40:
85:05:64:cc:3c:ee:60:89:ef:a9:6d:78:0e:db:c0:15:20:27:
46:b9:0f:a6:1e:0c:70:ae:7e:8a:01:95:4b:49:95:c5:82:5f:
a7:38:5f:93:af:d5:d2:62:71:98:05:40:2a:bd:f2:a4:7c:63:
67:aa:66:4e:e7:18:2b:ef:d8:46:e3:7e:d7:d8:bc:a7:6e:a2:
0e:ff:1e:1a:52:54:b0:7d:68:17:17:fb:c0:5a:69:22:3f:f2:
13:89:2a:c8:d5:21:b0:dd:f2:a8:6a:d2:7f:b8:ff:ed:d9:6e:
ca:3d:39:3b:c1:cd:3a:66:b5:23:c9:b2:18:f3:5a:e9:44:b9:
72:9d:43:01:fb:f8:47:aa:15:c7:54:5d:db:95:fc:32:3e:1e:
d3:08:8e:56:2e:c2:ae:2f:66:bc:17:9f:ca:4c:76:40:5d:ff:
03:e7:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:15 2025 by rpki-client