Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/8d2b4036-50c7-3b92-8783-15727eaa6402.roa
File: 8d2b4036-50c7-3b92-8783-15727eaa6402.roa (raw, json)
Hash identifier: DesTCcYmq0Tdbdfmv5Q59mGltcVl3Hd6e1yLu6VK9U0=
Subject key identifier: F9:9C:03:37:C6:60:F9:2E:A8:20:B2:43:92:5A:06:BC:BE:19:26:9F
Certificate issuer: /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Certificate serial: 010D0C9F43285848811B11E8BF18F2E371416BA0
Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/8d2b4036-50c7-3b92-8783-15727eaa6402.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 11766
IP address blocks: 206.127.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:11:e8:bf:18:f2:e3:71:41:6b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=5b23da9a-02d0-4eec-af50-281c16383e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6e:bf:b4:28:ba:b1:4b:ec:41:1c:85:5d:e0:
45:dc:26:49:ec:17:a6:7a:01:e7:ad:fe:34:89:db:
ab:d0:0f:03:cc:8d:2f:c8:1d:95:be:be:15:bd:15:
a7:9a:08:3a:ed:52:4c:39:69:00:f3:c5:cf:14:5c:
d4:0e:7a:db:15:b1:64:fc:a1:8a:ab:9a:a2:05:91:
59:ea:a3:db:36:ae:ca:e6:eb:d7:77:2f:f3:da:da:
73:68:c8:0a:75:2f:93:b7:80:13:7b:7b:8e:bf:a1:
c9:88:7c:cb:c4:b2:c2:56:c6:07:bd:a7:3a:f5:ef:
46:00:2c:dd:17:4c:18:d6:5b:0e:56:17:49:e8:57:
17:34:b8:09:53:4a:68:f1:7f:d7:cb:7f:bf:0f:23:
4d:53:84:13:26:ca:2d:d5:df:38:b0:51:c2:4c:99:
9a:ef:eb:c2:e1:0e:9b:f1:fd:d6:d7:d3:fc:5f:3a:
15:ee:0c:22:21:70:0c:10:49:0d:c1:07:01:1c:74:
03:fb:a8:04:d9:23:92:2f:ea:7c:a0:27:00:e5:27:
24:ae:f4:a8:60:85:fc:ff:2b:5b:3e:21:62:be:6a:
bf:e5:e6:87:a3:18:5a:01:d6:27:78:b4:70:c2:4c:
72:a9:02:0b:b9:54:79:f5:66:e6:1c:ae:0e:da:dd:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9C:03:37:C6:60:F9:2E:A8:20:B2:43:92:5A:06:BC:BE:19:26:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/8d2b4036-50c7-3b92-8783-15727eaa6402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl
X509v3 Authority Key Identifier:
keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer
sbgp-ipAddrBlock: critical
IPv4:
206.127.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:c3:04:ae:3c:20:b4:c6:19:11:f1:25:4d:c2:1a:e5:3e:d4:
2f:09:b1:44:aa:e5:67:c2:99:59:51:84:b6:e8:2e:df:1a:25:
82:c1:d5:9b:65:ca:ea:b8:22:cf:e3:01:2b:16:ef:8d:2f:b7:
53:52:5f:6e:54:b9:6d:7a:87:06:d1:0f:5e:52:bb:7a:4c:37:
4a:77:bc:55:a9:7f:7c:4f:73:a2:8b:35:22:e8:42:ab:19:c5:
1d:bd:76:05:84:ea:50:57:ba:39:7a:65:d8:19:b0:46:c7:90:
95:b9:20:05:02:3e:4a:a7:27:20:52:55:49:e9:91:28:bc:82:
8e:a7:e2:a9:ec:48:03:70:f7:00:56:46:f5:3b:93:e1:27:ae:
51:6e:45:d0:60:66:07:30:57:9c:f6:af:33:e7:25:30:3d:cd:
84:d9:a7:d8:22:f8:22:67:47:bd:4c:07:c7:45:0a:08:ca:fd:
05:7a:65:37:ae:53:30:35:79:30:0e:6a:9b:f0:91:7a:19:43:
d5:89:5a:d3:78:b1:37:9f:9a:b5:6b:ff:c3:8d:38:dc:d6:fe:
5c:62:42:51:47:3f:90:d6:41:95:50:02:8d:28:48:b1:ee:02:
e1:03:1b:3c:01:16:22:d1:f3:1a:58:cd:d8:00:c7:55:f0:23:
1f:4b:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:54:01 2025 by rpki-client