Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/c78bccb7-aa67-36b0-b486-2629fba09248.roa
File: c78bccb7-aa67-36b0-b486-2629fba09248.roa (raw, json)
Hash identifier: Xt8l0HohPXJ2CDNugFeIqwi78aAgNdTOT+7SYjhxdbo=
Subject key identifier: 15:1C:2A:87:4C:49:E2:16:5F:2D:50:4E:A2:71:BD:63:15:75:12:FC
Certificate issuer: /CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
Certificate serial: 010D0C9F4328584869606C47B9018ECBBB4CE080
Authority key identifier: 77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/c78bccb7-aa67-36b0-b486-2629fba09248.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 0
IP address blocks: 206.108.255.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6c:47:b9:01:8e:cb:bb:4c:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=72ab9b5c-b768-4d54-ad09-43d2d8a18edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:dc:0e:51:d4:05:52:c3:81:ad:bc:91:c2:
c3:6e:57:9c:aa:4d:7f:9d:d6:0d:f1:21:71:7a:82:
58:07:71:63:a9:d9:b5:cd:be:5f:c3:3e:fb:8d:c2:
bf:50:0e:24:8e:42:d1:a3:ca:a8:26:1a:63:7d:27:
12:59:49:a9:16:d3:dc:83:f8:56:0b:29:37:eb:b7:
54:ee:83:0b:e3:d8:df:a0:48:2f:56:02:49:68:25:
02:6f:d8:e2:5c:a2:1a:6b:c2:d2:22:ea:32:4b:07:
69:64:7c:90:c7:19:48:e2:ec:aa:b7:f9:fb:a7:9f:
6b:46:f4:74:3e:06:e0:89:9a:48:b4:56:54:59:dc:
92:a6:c5:c6:46:81:f2:c7:cb:87:7a:12:f9:82:a2:
59:ad:08:cf:18:69:b4:f3:9d:8d:b5:54:97:89:71:
03:e4:40:c8:8b:97:da:44:ab:94:38:a1:76:d3:ff:
43:03:33:8b:ba:df:84:f9:12:49:b4:f8:25:3a:4c:
95:35:cf:92:76:24:44:a9:78:ac:e7:df:0d:98:b7:
dd:95:3f:de:3c:d8:ce:50:a1:db:d7:90:6f:fe:87:
ed:e8:e0:6c:32:7f:3e:18:e8:44:9f:f0:e0:90:89:
c6:41:49:44:86:b5:b2:9d:c9:ed:b6:97:9a:93:9c:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:2A:87:4C:49:E2:16:5F:2D:50:4E:A2:71:BD:63:15:75:12:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/c78bccb7-aa67-36b0-b486-2629fba09248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl
X509v3 Authority Key Identifier:
keyid:77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
sbgp-ipAddrBlock: critical
IPv4:
206.108.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:3d:40:c6:3c:c7:52:91:ce:91:c2:93:58:bc:b2:ef:ac:2d:
6e:91:05:c1:e6:c0:01:83:a2:63:67:a7:bf:e1:d8:9c:a0:83:
55:21:db:51:92:08:4c:d4:28:b3:0f:ac:e3:42:e0:14:d1:af:
82:31:4f:26:b7:2c:1e:8a:4b:1c:73:b4:ba:67:78:5b:74:a1:
9b:ca:92:92:eb:6c:2c:64:2c:67:39:f8:88:96:ef:5b:b3:cc:
dd:5f:d5:88:95:df:8e:5b:79:0c:a8:20:46:e3:81:ea:31:35:
4a:40:e5:1d:64:88:3a:0a:14:61:0c:2b:5d:f8:2a:4d:a8:f8:
6c:04:12:92:97:c2:f8:32:6e:5e:fd:bc:d9:b2:9e:34:af:e1:
6a:b1:56:4b:3a:dc:34:83:af:12:c7:1d:c5:f7:6a:d0:b1:2c:
ef:8b:39:8c:b4:d8:9d:d8:53:e3:5e:76:ea:9f:a6:f7:57:51:
9f:c3:db:37:2e:7d:68:a0:5d:1c:91:7e:0d:98:42:8c:5a:a8:
2b:7e:b0:8a:25:71:7e:e4:ce:78:72:23:7d:a5:1d:43:b3:e8:
8f:e3:34:5b:0f:90:77:3b:4b:9b:ea:e0:fc:ec:a7:b2:2f:cc:
0b:ce:85:86:a8:70:cc:a4:81:79:5c:68:f8:11:da:94:b6:c4:
a2:7d:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:24 2025 by rpki-client