Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/2427250f-9572-3c12-a905-8148cbe1c196.roa
File: 2427250f-9572-3c12-a905-8148cbe1c196.roa (raw, json)
Hash identifier: d4rAFyyByaq4gYXAdom/4YyHJhK+DOhA+PDKL6T3O/M=
Subject key identifier: 20:6A:05:5F:67:5C:B9:46:2B:69:32:A2:0C:CA:8E:94:B6:44:9E:DD
Certificate issuer: /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial: 010D0C9F43285847FF4A7CB7FC55F3632D924E80
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/2427250f-9572-3c12-a905-8148cbe1c196.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 32590
IP address blocks: 205.196.6.0/24 maxlen: 24
208.64.200.0/22 maxlen: 24
208.78.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7c:b7:fc:55:f3:63:2d:92:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=167bb5ed-131c-42aa-a53f-e62ebaeaa9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:a9:16:ba:fd:85:f0:be:7f:73:a4:c7:c5:
de:a0:18:9d:0c:18:14:f0:f0:fc:c3:9a:19:11:d4:
c6:2c:22:ed:13:ce:23:26:1a:a8:0c:be:91:8f:fa:
26:7d:c2:8d:7e:16:1f:3e:da:27:6a:c3:e5:57:64:
7a:3b:ee:a4:10:62:e3:67:0c:03:0f:2a:31:c7:2f:
15:99:1d:d0:b1:42:4c:f9:01:79:e8:9a:95:11:de:
b7:23:35:0b:23:4a:80:ae:c2:91:80:ec:a7:aa:2e:
ee:a3:92:36:c5:52:1d:c7:e6:92:dc:85:6e:e0:a4:
65:89:a9:e9:e5:fd:3d:89:9b:4d:55:02:12:8b:9d:
03:f8:55:5c:f0:dd:a9:d8:7e:aa:aa:34:93:92:31:
f6:ce:0c:e5:ab:49:ac:35:fa:3e:4e:9d:2d:78:89:
e6:5c:4f:6a:36:df:34:89:62:e5:de:34:c2:f1:3a:
5c:f9:e4:c3:06:49:b0:de:0a:32:b7:67:e3:93:46:
b4:01:75:c2:13:bb:a8:c1:00:cc:4b:3c:ea:52:d8:
f6:1f:5f:8c:0f:6c:02:fe:06:70:e1:4c:d9:6e:aa:
b9:7f:ca:2e:38:a3:22:af:9d:80:87:d9:4d:0c:9e:
99:93:43:21:98:3b:41:f5:03:0d:f1:90:a7:33:a6:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:05:5F:67:5C:B9:46:2B:69:32:A2:0C:CA:8E:94:B6:44:9E:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/2427250f-9572-3c12-a905-8148cbe1c196.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
X509v3 Authority Key Identifier:
keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
sbgp-ipAddrBlock: critical
IPv4:
205.196.6.0/24
208.64.200.0/22
208.78.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cb:6c:52:a9:e6:ff:d5:ee:6a:e1:30:c6:07:38:73:61:a5:88:
6e:9d:8a:4e:f4:f6:b0:ff:7e:fa:5a:44:87:e7:8c:be:99:53:
3d:4b:44:2b:aa:f4:3f:f5:27:55:48:0d:75:2d:2f:3b:c2:27:
7a:f9:91:b2:59:14:df:83:3b:17:9d:99:18:07:23:9e:4a:be:
37:b9:c9:50:0a:fe:31:72:43:78:34:4a:2b:66:cf:73:11:0d:
69:ee:bc:52:49:f3:c5:b2:74:95:b0:9e:8a:bd:1d:ea:0d:29:
c9:88:3e:77:37:74:e0:da:43:a6:e9:25:19:fb:5f:08:2d:14:
5f:cf:d0:58:dc:b3:4b:6e:fd:89:7f:97:f3:9a:24:ea:84:18:
7b:04:ac:ae:69:62:d4:a6:8c:0b:b7:30:3c:e8:ac:88:fb:93:
6c:ae:7b:c4:1b:78:80:bd:f4:32:63:63:e4:c1:3e:eb:54:4f:
86:cd:9c:8e:90:a1:f8:3a:e5:44:1c:1d:f6:dc:cc:47:4a:35:
7f:eb:2b:f4:70:dd:ae:8b:a7:90:07:bb:52:84:dc:3d:9a:4b:
df:e1:07:0e:23:60:e4:f8:a7:62:55:25:77:ae:c8:79:d7:45:
a0:d6:0b:40:00:23:59:d9:0c:9f:9d:38:7c:83:b7:13:be:4f:
7b:08:b3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:34:09 2025 by rpki-client