Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/096ed644-dc92-3c18-ab10-0f2f45957b18.roa
File: 096ed644-dc92-3c18-ab10-0f2f45957b18.roa (raw, json)
Hash identifier: gTjIF9fu9qVYJNxvJaYPQqQq+lQlPr7ZYEaeNXdurtg=
Subject key identifier: C9:A5:38:06:71:F3:C1:B9:EC:A0:4D:C8:EB:D7:E6:8F:96:16:1F:06
Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6
Certificate serial: 010D0C9F4328584855D596E9982336B4EB218180
Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/096ed644-dc92-3c18-ab10-0f2f45957b18.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 22851
IP address blocks: 206.176.20.0/23 maxlen: 24
206.176.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:96:e9:98:23:36:b4:eb:21:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=a87da5f9-18b1-4e61-9997-f8a21d449914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:77:97:48:e3:3e:cd:3f:7b:29:b7:c5:a7:b9:
75:99:53:01:ed:4e:6e:93:1f:0a:89:75:53:4f:5c:
a7:b9:c9:34:f3:db:59:75:26:56:85:ca:99:80:dc:
ce:c8:c3:66:1a:63:db:88:ef:a0:61:05:af:2e:96:
4b:42:37:9f:a8:8e:74:49:7e:43:30:f3:08:59:64:
b0:7b:fe:9e:cc:48:fd:13:73:d0:62:2b:69:ee:0e:
43:b5:a2:fa:74:57:39:27:7f:6b:53:bd:04:02:a3:
e2:aa:fa:0a:27:4d:60:e2:c7:2f:1b:a6:ee:e4:48:
b0:d3:5b:26:41:ad:a6:0f:45:e3:59:cc:04:ce:57:
23:b0:15:2e:6b:44:22:ee:38:07:54:c3:51:8d:3a:
d5:e9:8f:1d:38:16:74:62:62:a7:04:7a:5b:c5:56:
40:1b:92:dc:55:28:57:fe:dc:2c:35:9a:b3:d9:3a:
92:1e:a7:9e:92:eb:86:d3:89:52:06:e1:7a:01:8c:
aa:54:e6:b5:82:a4:41:a5:02:5b:c8:48:98:08:e8:
dd:cd:75:6d:a9:a5:d4:7b:8e:c8:8b:d2:f2:d2:13:
3b:80:cc:01:c7:ab:84:0c:26:0c:46:00:36:d6:ed:
df:39:73:a8:9f:f1:87:90:14:e9:94:82:6a:8d:95:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A5:38:06:71:F3:C1:B9:EC:A0:4D:C8:EB:D7:E6:8F:96:16:1F:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/096ed644-dc92-3c18-ab10-0f2f45957b18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl
X509v3 Authority Key Identifier:
keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer
sbgp-ipAddrBlock: critical
IPv4:
206.176.20.0/23
206.176.54.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:af:b7:32:f7:4a:1c:64:15:b0:f7:96:9a:79:18:d9:30:49:
74:07:4e:96:9c:58:9f:73:83:52:4e:21:3d:6b:2e:ef:bd:c9:
cc:d8:7b:6d:69:88:43:3e:29:ce:1e:9f:35:5e:a7:7a:80:d3:
26:95:07:ae:01:67:63:77:74:3a:a6:35:42:21:54:8f:ca:21:
a4:c9:7e:fc:7c:22:4c:ee:bb:35:ba:02:a4:af:4a:68:dd:f0:
13:d6:9a:bd:35:48:ac:e1:76:34:a3:e4:4e:e5:23:ab:5d:f0:
0e:d2:d5:6a:f0:ee:5b:e7:cd:43:fd:5a:ca:93:ca:a6:cc:a8:
9e:fa:25:6f:c4:41:a9:7c:a2:b6:9d:a2:45:61:89:04:0b:5a:
3d:ca:41:b7:71:7d:15:93:b3:60:ba:62:65:08:4a:9a:23:98:
65:a7:cb:dc:4c:67:14:db:ae:c1:69:c9:72:70:29:04:20:01:
99:16:57:74:73:97:62:86:65:eb:8b:75:57:7f:85:16:05:22:
fa:da:5e:49:9c:f1:2b:47:59:05:c3:76:c9:e6:97:24:4d:c6:
3c:d5:55:66:7d:5d:8e:20:09:29:0b:30:4d:ae:3f:03:cd:22:
c9:ca:1d:6d:ea:e1:ae:24:49:6b:95:10:d3:d5:68:fa:62:ff:
ab:e8:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:35 2025 by rpki-client