Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa
File: b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa (raw, json)
Hash identifier: 7+02GfC0Tj/9PRCv6ZMvNN+UqQaT/x9EqyF741zYgyg=
Subject key identifier: B2:72:4C:6E:3A:8F:1C:B1:E4:99:86:2F:91:34:98:3D:AE:7B:9B:28
Certificate issuer: /CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Certificate serial: 010D0C9F43285847FC7F97349C5AC8AE16FE93A0
Authority key identifier: A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 60171
IP address blocks: 206.168.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:97:34:9c:5a:c8:ae:16:fe:93:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=4af179d6-a354-4b6f-ab24-9c4347a9da2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:28:dc:35:c5:12:df:dc:7d:52:3e:1a:f9:
6b:b3:15:a7:1b:dd:f0:d5:2a:ee:4a:d9:1d:4e:b1:
f5:0f:f6:37:44:0e:63:f3:37:46:e6:93:5e:7e:5d:
22:52:4d:57:a8:37:dc:c2:e7:0e:cc:50:33:4d:9c:
0a:bd:e9:46:e6:ed:97:9a:97:85:27:79:0a:de:4e:
3e:47:38:e2:15:99:ae:f1:ea:95:08:6b:77:14:12:
89:e8:17:e3:76:69:e2:d7:01:35:ba:b5:67:aa:c2:
b5:74:10:34:f8:4f:18:74:05:88:80:a2:cb:06:76:
8d:a6:69:b1:80:20:59:37:d6:df:9d:d8:d8:a8:09:
20:79:25:69:e5:0e:31:99:bf:b0:2f:5f:dd:db:ff:
22:13:c3:d8:ec:3c:d2:42:c3:eb:18:60:99:0e:06:
e0:25:60:4c:40:12:a9:23:b5:a4:47:75:96:30:fc:
90:e6:f1:21:69:6e:80:07:06:11:33:ad:08:54:37:
ba:aa:e6:58:f2:bc:9b:88:4b:2f:71:48:37:64:e4:
57:de:9c:c9:b7:d4:d3:06:49:4a:16:7d:c6:a1:2b:
f8:6a:18:7b:79:fe:18:b0:3b:ee:b9:fa:20:bd:64:
a4:f6:85:7c:2b:7b:4c:5b:fc:df:bf:bf:93:b4:b7:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:72:4C:6E:3A:8F:1C:B1:E4:99:86:2F:91:34:98:3D:AE:7B:9B:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/b31ca52e-0d07-3edf-a7cc-9cb900a3fb03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.crl
X509v3 Authority Key Identifier:
keyid:A0:0B:C0:59:A2:CE:5C:2B:20:7A:E2:90:8B:CA:DA:4E:04:82:F5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bf6aa2-7b7f-46b4-bdf2-dd4d075e266f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:4a:f2:e2:8d:05:73:5a:65:5a:1e:ca:20:7a:0b:05:44:74:
a3:06:23:71:fe:8b:e5:1c:07:e1:7e:1b:90:73:9d:30:b7:0a:
96:44:ea:98:46:cf:97:3d:50:55:5d:bb:5e:51:0b:d4:b8:1b:
20:5f:fd:6c:ff:f7:2e:21:eb:1d:a2:31:96:09:43:23:fc:d9:
e5:3c:71:ad:fd:49:66:e3:5c:fd:eb:0f:d2:ad:4f:08:61:f4:
06:43:47:d9:98:6d:1e:c2:ac:42:0c:63:a7:ab:7c:5b:b7:b0:
de:5c:a5:49:6c:4e:9b:74:09:a6:3f:78:df:00:42:a8:51:27:
70:ab:1b:4c:c7:21:df:6b:81:2e:3e:b6:35:21:cb:67:39:e7:
35:15:c2:3e:ba:5a:71:06:32:fc:b7:9b:b5:47:bf:3f:f3:af:
79:db:ff:6f:f0:7a:a6:25:97:0c:02:26:9f:40:a9:88:81:76:
83:44:ba:6e:dd:35:c7:cf:1a:d2:26:46:25:b8:1b:b3:ec:21:
6a:9b:81:93:2b:7d:c2:6e:88:52:62:3b:b6:2a:67:af:7f:9e:
c9:c0:0e:64:8b:48:8c:e9:fc:22:c2:f9:2a:5b:75:0e:9d:eb:
98:76:06:cf:c5:f9:75:43:7d:8c:c6:d2:5b:63:6b:ec:5e:9c:
19:1e:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:37 2025 by rpki-client