Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/a4526359-856c-344c-9a04-e0e0c6c7e8a5.roa
File: a4526359-856c-344c-9a04-e0e0c6c7e8a5.roa (raw, json)
Hash identifier: 54Wip1OmYLyLHD6wm/+OR3lqS2uLt5ecRtZAtbARCA4=
Subject key identifier: 47:90:95:42:2E:11:4E:F8:8C:E0:82:34:8B:96:55:3D:45:45:FF:56
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F432858487A2085F60B93EE2981F383C0
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/a4526359-856c-344c-9a04-e0e0c6c7e8a5.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 33211
IP address blocks: 206.41.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:85:f6:0b:93:ee:29:81:f3:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=e86ad62f-0eac-4ea3-bf79-c8cb0316cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:43:da:a6:35:3c:e5:50:71:d6:f6:c3:65:22:
4f:25:34:d5:7f:3d:66:25:93:8d:2c:b4:c8:b9:93:
f4:2c:3a:5f:6a:a9:ba:d4:65:16:eb:92:25:b2:70:
31:96:1a:12:a5:af:37:ef:8f:04:d1:01:3e:33:cc:
5d:b7:5a:13:67:bd:c7:fe:2a:38:07:90:b9:1c:b1:
d1:d4:52:2d:24:6b:b8:67:0c:2f:4a:f4:3e:e0:b2:
a1:5d:98:49:c9:60:4c:3c:7a:e7:9d:44:a5:bf:50:
4b:22:00:1d:f1:1e:1c:ae:28:33:05:33:4d:37:ba:
24:4e:0f:2a:99:4f:bf:5e:c5:1d:31:77:cb:b2:9b:
11:4e:95:0c:8f:8f:54:5c:d9:76:0a:74:92:c7:95:
62:2b:1b:95:d3:c8:0d:97:9c:c1:e8:22:c2:ad:30:
39:7e:20:1a:d4:0e:c2:34:a9:67:9d:e2:94:50:76:
16:55:44:3d:bb:fa:20:54:55:0c:e4:23:1d:3c:a1:
f3:5e:16:b8:a9:c2:a1:98:4a:58:b7:d3:a7:64:7e:
53:58:21:ff:88:cc:fb:10:6a:aa:85:9b:35:c5:1a:
0a:d8:e4:99:aa:68:d9:8d:f2:0a:81:e8:97:7b:fe:
01:d2:f1:0a:2c:ab:2f:a1:30:eb:f1:c9:17:dc:24:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:90:95:42:2E:11:4E:F8:8C:E0:82:34:8B:96:55:3D:45:45:FF:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/a4526359-856c-344c-9a04-e0e0c6c7e8a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:7e:88:b6:88:93:de:a0:1d:10:3e:bc:1e:52:31:33:aa:57:
6c:30:6a:6d:15:77:7e:6f:b7:9a:78:bc:31:6b:01:9a:cd:48:
9d:90:e2:66:69:d4:5c:20:c2:9a:8c:b1:8c:76:70:49:c1:54:
98:e9:13:e2:1c:26:c2:56:d9:85:96:93:85:bc:1c:13:9a:47:
92:8d:e7:1d:b1:1a:34:85:08:d3:95:d8:1c:39:8a:f7:81:c1:
9d:3a:7b:af:e6:d2:dc:69:b4:04:9b:d0:c5:52:3d:02:12:41:
eb:2a:28:91:19:84:28:49:b5:1d:9e:27:92:1c:bd:4f:3e:a1:
b9:71:93:b1:b3:93:c8:b0:b8:9e:8d:0c:1d:33:6d:32:e0:e7:
1e:6d:b4:c8:ed:5f:24:a8:f9:60:0a:43:0d:a0:57:19:7f:66:
f2:cb:ea:f9:41:6e:d9:3e:76:d6:e3:5d:89:a9:66:15:3c:1e:
70:67:ec:be:69:c5:ed:95:03:05:d2:99:34:64:d6:99:62:42:
b0:e0:4f:94:3d:83:25:79:95:ef:11:57:6c:6a:89:4a:52:37:
75:dc:64:3b:ca:a8:f1:54:bc:da:35:71:29:e8:cb:33:97:7c:
23:99:e4:09:e6:73:85:79:96:14:b7:42:ac:73:a5:8a:ee:6e:
0c:1c:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:40 2025 by rpki-client