Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/27cbd8e3-96ac-3b23-9e6d-1ee7f29532ca.roa
File: 27cbd8e3-96ac-3b23-9e6d-1ee7f29532ca.roa (raw, json)
Hash identifier: NSDVynUxB16ikVT0s98RDMI0Ww202DHGj+T9qHmR00A=
Subject key identifier: A4:B5:B4:A6:CA:CC:AC:D9:1B:7C:BD:B8:B5:DA:BC:F3:FB:78:0C:9B
Certificate issuer: /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial: 010D0C9F43285848530AF0DFB2A4BCAED8FA03E0
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/27cbd8e3-96ac-3b23-9e6d-1ee7f29532ca.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 203963
IP address blocks: 206.168.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f0:df:b2:a4:bc:ae:d8:fa:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=b0523e51-7699-4dff-af2c-9d5a76e30147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:29:cb:db:a6:3a:df:13:1a:ed:86:f5:d6:e4:
47:bb:74:29:7a:c0:ec:47:ae:70:56:cc:94:26:1c:
ba:0a:f0:3e:74:77:82:59:df:2c:52:09:ed:36:97:
ac:74:c2:54:1c:f9:e5:88:d7:4d:14:d0:20:43:b1:
22:7a:8b:5b:6d:7e:20:a8:dc:d5:f0:df:0f:fb:c4:
3f:eb:96:81:b2:e6:21:6f:9a:a3:42:8a:66:40:11:
81:19:60:60:a8:e4:d3:c9:24:0e:8b:38:c4:c7:db:
ba:54:68:ac:51:8a:cc:a5:86:f9:55:5c:9e:1a:d2:
9b:08:62:0b:61:87:f6:4f:b9:5c:e6:0b:6c:09:2a:
7e:88:cb:1d:6c:1b:60:ae:d0:1c:be:b7:2a:09:81:
3f:13:81:43:eb:9e:09:8f:b6:a2:61:6f:f2:e3:a0:
9e:62:6e:37:7a:1b:21:c0:23:f1:5a:7a:63:81:b1:
da:e5:f0:3c:eb:fc:a9:fb:47:a7:70:88:aa:d4:28:
ef:05:7a:c0:4a:7f:d9:c6:ac:60:51:0e:6b:ad:61:
bb:0b:fb:9a:22:fe:3b:fa:31:1f:db:1d:7c:61:d1:
90:c1:18:e2:9c:7f:b1:56:3e:71:54:c2:21:70:dd:
ee:6e:8e:fa:11:9a:df:aa:0b:63:20:2f:d5:03:96:
73:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B5:B4:A6:CA:CC:AC:D9:1B:7C:BD:B8:B5:DA:BC:F3:FB:78:0C:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/27cbd8e3-96ac-3b23-9e6d-1ee7f29532ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl
X509v3 Authority Key Identifier:
keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:bb:d5:78:b3:0c:92:45:5d:15:6d:a0:69:08:32:e3:d3:6b:
87:50:5e:c7:ce:ba:90:52:cd:fd:1c:6c:0a:36:8c:b9:78:e2:
c3:6a:b9:4d:f7:ff:09:84:bc:03:56:87:14:7e:6e:69:81:36:
c6:3d:50:1c:70:b4:10:2d:a9:2d:52:de:6d:2c:39:43:b1:0d:
38:aa:6e:7c:51:11:ff:6e:d0:d7:58:74:fe:97:a6:d4:fd:3f:
9d:46:24:35:d6:0c:99:2d:76:cf:ba:fb:00:b2:e2:8d:07:36:
c6:90:92:b0:ae:93:9f:e3:dd:b8:55:ae:0f:cb:79:8f:83:6c:
28:6c:f4:d4:ca:22:e7:17:b1:2f:03:18:3a:4b:34:0d:9f:36:
e7:24:82:d7:64:6c:94:df:7d:a9:30:cb:23:85:27:be:15:f2:
39:11:5c:8a:e7:2b:36:04:3a:63:5b:ec:13:8a:d4:76:c7:5d:
23:40:e0:2e:78:bf:2e:7a:84:16:41:b1:6f:66:f2:da:6a:48:
f9:1d:45:a7:96:b4:76:bc:bb:99:86:71:8f:1a:49:6e:ff:0c:
8b:f6:f5:ff:b3:b8:2f:1f:26:32:80:3c:63:d1:a6:2c:77:db:
bf:93:21:cb:d5:33:ea:c7:88:17:90:41:9c:7c:d8:ec:2d:e8:
b7:a5:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:20:31 2025 by rpki-client