Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa
File: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (raw, json)
Hash identifier: gNs9MUBNJSgWP6i3ISPCvzxHg5Ns35DtWze20Pu3cz4=
Subject key identifier: DB:2F:23:EC:A7:38:5C:18:C5:5C:BC:11:B9:F9:CF:06:01:71:C6:A9
Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Certificate serial: 010D0C9F432858482A8FE176C41623F1A5945100
Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 0
IP address blocks: 206.108.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e1:76:c4:16:23:f1:a5:94:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=d9cdbe6d-7b85-4f97-a2e0-4f244ec59fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:25:b9:bd:d9:9e:45:d1:58:6c:d0:72:14:
c4:89:44:dd:be:8b:94:26:89:24:5e:4f:63:6f:4f:
d9:1e:27:09:bd:2c:7d:a4:cd:16:55:04:e1:bd:c4:
e1:6e:74:20:2a:36:0c:7f:ce:f2:65:78:5d:10:a4:
ac:3b:11:65:62:e8:21:14:86:3e:2b:fa:a2:6b:c0:
2b:10:ff:33:a6:7c:94:39:71:58:77:c1:35:76:03:
80:41:71:2d:fd:48:60:00:5d:cd:3c:c0:6d:65:20:
a5:8c:d1:c4:48:8e:f5:7a:ff:27:01:a1:21:85:4c:
20:99:90:63:80:81:ea:7f:3f:c2:db:44:7f:cd:10:
d6:7f:fc:b7:6c:12:83:c2:37:7a:73:82:cd:37:e6:
2c:fc:0d:84:2d:6c:52:ad:7b:38:a9:6f:29:d7:f6:
79:eb:8c:38:bf:d7:43:fe:a6:a9:4e:c7:6e:69:6e:
82:35:62:90:53:46:a7:b0:81:6c:d3:a2:e1:26:a0:
0a:93:e2:18:58:0a:79:a2:e2:a2:bc:dd:0d:6a:4c:
ab:a5:21:23:73:2a:14:a9:c9:16:41:18:53:d7:12:
f5:7e:53:5d:3f:4d:29:f2:17:81:a8:69:be:88:a3:
70:d1:c0:83:e5:c1:ca:b1:01:0d:33:27:83:6c:d1:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2F:23:EC:A7:38:5C:18:C5:5C:BC:11:B9:F9:CF:06:01:71:C6:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl
X509v3 Authority Key Identifier:
keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
sbgp-ipAddrBlock: critical
IPv4:
206.108.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:53:1b:0f:1b:73:6f:64:41:28:5e:d9:2c:6a:98:c1:dc:10:
dc:c2:4e:4f:62:b4:48:66:0f:40:81:7a:79:b2:bd:77:75:4e:
ef:62:b1:9f:a9:0e:c2:f0:33:50:44:6d:f6:ca:94:43:58:b8:
f6:43:d7:90:b9:82:b8:37:74:f4:2e:9e:84:2b:02:37:a7:97:
8a:b0:14:3e:a4:80:05:78:fe:09:42:c0:84:35:0e:a3:c3:e2:
8e:47:76:3c:fb:b9:46:31:71:8a:1d:34:0c:a8:f4:4f:91:d2:
8a:02:27:11:86:08:38:5d:56:20:53:96:59:54:61:51:bc:11:
87:13:26:aa:dc:e2:0f:02:fd:ea:5d:56:57:69:e1:b8:64:8f:
31:a7:d3:f2:7d:76:df:2d:5f:56:c1:f2:f4:9a:17:c5:d0:53:
72:01:35:24:38:41:8d:4d:7c:8d:b8:d0:b2:b6:04:fe:47:fa:
ea:82:89:01:fa:7f:1e:65:33:3c:bc:cf:e1:63:7f:b1:bc:4d:
1a:04:bb:78:86:6c:ce:81:e9:94:d9:f4:e7:cc:d3:27:d5:e4:
77:20:cf:a4:6d:a3:9b:b7:74:55:97:8c:1e:3b:b9:7a:72:b1:
64:7e:68:5c:e7:bc:c1:5d:23:ef:73:e8:56:1a:8c:1e:14:a6:
c0:4e:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:53 2025 by rpki-client