Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dd57c202-e1c7-37cf-abac-38faeee3e44d.roa
File: dd57c202-e1c7-37cf-abac-38faeee3e44d.roa (raw, json)
Hash identifier: EHO8Q1oeG3dlT6ANPz1TlMfrv+5w8BuVQIfDnxVtlGk=
Subject key identifier: 58:B6:88:3A:A9:13:93:AF:FD:86:4E:2D:06:67:17:6B:90:3F:C8:20
Certificate issuer: /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial: 010D0C9F4328584838855923F45DFBB3DD947540
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dd57c202-e1c7-37cf-abac-38faeee3e44d.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 23188
IP address blocks: 206.83.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:59:23:f4:5d:fb:b3:dd:94:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=4d5c6350-1366-4a8b-aa99-a9d2474abade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:b5:b7:57:5d:90:06:bb:57:c5:67:06:37:
a9:e3:bc:01:bd:2d:1e:17:56:e3:9d:a5:dd:08:de:
75:46:03:c7:ef:5d:26:76:22:bc:e1:1f:96:d3:c9:
c5:8e:9c:90:b2:11:28:6e:b9:d4:6f:d8:0f:7f:86:
b4:b3:fc:cf:7d:15:fd:4e:52:93:07:c6:21:fc:ac:
28:a4:1c:39:d7:6a:96:64:27:e8:7e:81:d0:80:81:
b8:1d:25:70:a2:16:a3:51:e6:c4:a9:c5:fd:79:8e:
c6:9a:67:40:e1:dc:1b:14:10:90:13:78:89:c3:69:
26:ba:aa:fb:c2:ad:46:f3:27:4f:cb:7b:97:f1:26:
4d:44:a8:1e:9e:a1:30:98:39:12:1b:d3:b3:a9:0c:
71:75:fd:01:ac:4b:74:e7:66:e6:cc:ab:49:f3:c7:
8d:6e:89:34:e7:8f:eb:49:98:28:e0:ff:4b:1c:0f:
c0:1d:ab:3e:78:e4:c3:ad:e3:dd:7c:0f:4a:ce:fc:
03:a0:9b:b3:75:52:03:40:4d:2e:ad:0d:19:f3:ac:
82:78:0f:5b:50:3a:3e:4b:27:ed:ec:a4:40:42:69:
c8:70:7b:46:69:a3:26:65:95:9c:28:67:07:8a:ad:
ba:9a:fd:1d:77:25:2a:19:04:6e:70:fa:73:4d:47:
65:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:88:3A:A9:13:93:AF:FD:86:4E:2D:06:67:17:6B:90:3F:C8:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/dd57c202-e1c7-37cf-abac-38faeee3e44d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
X509v3 Authority Key Identifier:
keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
sbgp-ipAddrBlock: critical
IPv4:
206.83.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:b1:10:c5:09:ca:43:b1:f7:55:20:f5:35:11:56:8d:12:76:
42:a9:0f:91:2c:2d:2e:12:63:a1:13:fa:5c:6d:ac:fd:bd:19:
2e:5e:db:10:40:16:69:3a:8a:bc:4b:a5:7c:18:55:c8:ac:de:
e5:e2:52:ab:50:f1:c2:ad:e2:91:17:d0:f2:c7:00:e8:98:fd:
e7:d7:7f:85:e4:5f:0e:03:37:58:2b:77:f0:93:63:d9:b7:23:
af:85:4a:e5:29:96:2e:90:cd:6a:bb:5f:fc:21:85:f2:0b:03:
49:7d:ce:12:82:33:52:68:2c:c5:c5:ff:92:ff:2e:85:4e:6c:
28:30:d1:e1:10:40:43:7a:11:1d:92:d5:0d:e4:35:57:9c:5f:
ec:a4:42:f2:32:07:e2:84:05:c0:44:20:58:a8:0c:86:3c:de:
46:53:a4:8c:96:d9:cd:80:f4:91:68:0f:00:cb:ca:98:c6:a7:
e4:e0:fd:f5:ef:00:44:20:3b:d5:ad:59:09:97:d3:be:9e:a2:
ec:5a:70:60:35:7c:19:99:30:1d:18:94:42:80:9c:06:80:b4:
c6:35:9e:15:1b:c8:c9:df:f4:93:66:64:0e:72:9e:2b:c1:c8:
31:11:81:d5:cd:5c:6b:d4:37:6c:50:e1:83:d5:21:3b:20:14:
4a:5d:0e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:05:38 2025 by rpki-client