Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa
File: a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa (raw, json)
Hash identifier: mnN819hnuhbJPXvmzla3hKyX1or2lipNOU9Q/xQ6s24=
Subject key identifier: ED:79:50:6A:EA:74:0C:7F:3B:75:0A:15:6A:4D:C7:B9:76:C1:CD:40
Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6
Certificate serial: 010D0C9F4328584851A5777E54F6B4339C84F800
Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 33189
IP address blocks: 206.71.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:77:7e:54:f6:b4:33:9c:84:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=056016a8-db46-4228-9791-92d1f52a889e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d8:85:0a:dd:7c:90:4f:a2:da:e0:b2:63:84:
09:f7:ee:ed:2c:39:c6:19:e8:4f:3c:8f:3c:59:d2:
23:7b:ed:0e:de:a4:d3:b4:a3:bc:9b:c4:eb:26:c0:
e1:62:b7:c0:c2:cc:9f:b9:57:9d:e5:f2:b3:57:6a:
d6:58:16:a2:bf:f1:6d:1c:34:c8:57:60:75:0a:41:
3c:e8:51:b8:66:c2:05:9e:a1:a4:49:bb:b3:66:e4:
7a:70:f4:96:f7:ef:6b:ea:ea:5e:2d:78:be:ce:91:
a4:81:eb:f5:f4:09:22:99:32:8c:2b:f4:25:cf:0f:
32:52:77:79:da:ca:60:27:3a:7c:e0:05:02:12:85:
56:e7:e6:f3:e8:4b:9d:2d:0d:4a:f6:99:29:0e:04:
3f:4a:f1:b0:a1:c3:eb:25:55:7b:8d:e4:73:cd:3c:
12:f4:76:b0:2e:79:3d:43:83:31:0e:44:b0:e1:46:
67:85:c3:4f:b0:4e:91:eb:bc:7a:fa:c2:63:31:66:
59:25:0e:42:06:68:74:78:07:81:0a:82:65:53:d9:
1d:99:3d:92:70:f0:8f:21:16:b7:6e:63:a4:52:f8:
0c:33:18:6b:99:1d:38:33:e2:43:14:82:2f:2f:7b:
48:9c:3a:a9:97:91:46:8c:fa:62:50:69:62:3e:30:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:50:6A:EA:74:0C:7F:3B:75:0A:15:6A:4D:C7:B9:76:C1:CD:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/a95ab48a-9ff9-3d91-87e9-0efe82cdfa77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl
X509v3 Authority Key Identifier:
keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer
sbgp-ipAddrBlock: critical
IPv4:
206.71.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:af:ba:a7:7c:0e:13:28:db:b7:b0:49:6b:94:16:3e:3b:e5:
bb:6e:f8:32:39:f4:a4:54:3a:c2:66:1e:d4:fa:a8:83:f1:fc:
79:ab:26:3b:ad:ee:b3:df:f1:4d:61:41:44:40:26:28:a8:65:
52:a9:26:21:fc:99:51:38:cf:c7:d8:4e:82:87:aa:92:71:15:
a3:bb:83:cb:95:2f:a9:e0:b9:7b:01:45:42:8a:fc:fa:4f:64:
45:c3:8e:52:a2:07:64:87:90:84:71:2b:00:71:97:ef:63:7b:
87:1a:27:29:d9:81:33:70:6b:7b:7a:1b:df:8e:f2:aa:5c:c5:
05:31:03:85:ad:a2:31:50:0d:10:6f:bc:f0:ac:e2:9c:87:8f:
7e:83:b7:fc:ef:60:ce:eb:75:58:58:13:b9:2e:9b:cf:5a:09:
ed:98:22:e3:32:94:64:20:36:d7:d7:50:3a:f5:ef:e5:5e:ef:
83:3c:44:80:5e:75:88:4d:85:c4:52:de:03:e1:3e:07:b9:c8:
aa:7f:d5:4d:32:5d:2b:ce:b0:e6:b2:ae:97:9b:d1:b3:de:2d:
81:dd:1d:fd:9c:74:76:d4:a1:e4:d1:6d:37:9f:aa:9e:50:7e:
8d:48:2d:3d:9b:91:89:76:a3:70:15:26:dd:8a:fb:28:22:d1:
a4:8c:40:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:30 2025 by rpki-client