Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/9c10fe10-f356-36fa-a51d-2e8ef173f54d.roa
File: 9c10fe10-f356-36fa-a51d-2e8ef173f54d.roa (raw, json)
Hash identifier: N3ukcywrjlGab4IteWpe1SUwgflCMMIvKz4bZPeTLh4=
Subject key identifier: E1:61:08:BC:AA:A6:4C:0A:07:CD:39:08:AB:F9:8F:EC:FF:4A:7F:6B
Certificate issuer: /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
Certificate serial: 010D0C9F432858484EDAC397E846C791991EA100
Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/9c10fe10-f356-36fa-a51d-2e8ef173f54d.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 10310
IP address blocks: 206.222.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:c3:97:e8:46:c7:91:99:1e:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=c0bb69ef-6eb8-4f29-ba0e-5ea94f47096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f7:78:05:19:0c:02:c5:44:3e:4d:9c:71:67:
a6:68:ec:ac:a3:4a:08:db:88:2f:70:2a:4b:b4:ec:
1f:fa:95:da:15:c1:ce:3b:a0:73:76:44:f9:e1:12:
6d:77:cf:52:f3:8d:51:8c:d1:39:98:dc:20:c4:cb:
97:95:37:28:82:2b:55:0f:fa:7d:e6:62:4c:14:9e:
7a:c1:bf:01:c9:98:65:5b:83:39:ba:ec:21:64:3e:
5a:8c:2a:1c:28:07:bf:56:85:30:e7:e5:a9:5b:ae:
73:93:3c:14:57:b1:bc:3f:d8:4b:4c:3e:dc:08:35:
7a:d3:d2:cd:15:c4:a4:d1:ca:b6:50:13:f4:7a:86:
44:b3:c8:74:1c:28:8a:c1:aa:3d:85:7a:df:98:27:
dd:de:83:e7:ed:b7:43:9f:cf:62:3a:c8:d3:de:0b:
6e:3a:16:0a:da:c5:d5:bb:df:07:8c:85:3c:2f:51:
1a:ab:32:b7:d9:75:a1:eb:c7:e3:7c:4d:8e:f2:a0:
2b:f4:05:84:25:8a:fc:07:65:54:63:02:18:4d:fc:
84:0b:5a:15:a2:22:49:78:3c:53:90:88:46:65:80:
7d:3b:b0:82:c0:e6:56:5a:ba:74:de:6d:4a:2e:c4:
9b:1d:1f:75:ae:f6:26:23:64:99:a7:67:c4:f6:98:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:61:08:BC:AA:A6:4C:0A:07:CD:39:08:AB:F9:8F:EC:FF:4A:7F:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/9c10fe10-f356-36fa-a51d-2e8ef173f54d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl
X509v3 Authority Key Identifier:
keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
sbgp-ipAddrBlock: critical
IPv4:
206.222.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b6:96:8c:65:90:59:f8:c7:1d:d5:02:03:97:7b:38:66:4e:
3c:da:52:ac:7c:d4:73:5b:30:de:c1:46:46:02:bb:b2:84:14:
37:9b:f2:64:f2:cf:31:a1:f0:98:e4:61:d2:cc:c2:13:54:d5:
a8:6d:25:8b:e0:6a:a1:74:21:f8:59:2e:a7:21:e5:64:65:a7:
19:b3:50:9e:8f:ff:5b:68:f9:dd:cc:2e:c3:17:42:8d:80:88:
7a:1f:9c:92:d3:66:df:b9:01:1f:3d:9c:1f:b0:9f:09:33:10:
98:90:e8:c5:41:02:6d:c3:08:6c:ad:5f:5c:1b:f2:aa:65:31:
80:ae:8a:85:0a:8c:7f:20:db:9f:1a:49:de:ad:5c:e1:1d:fd:
cf:4d:21:8a:bf:34:66:e9:3e:95:a8:f8:c9:45:cf:fe:ef:e0:
79:28:35:d0:53:bc:85:2d:8f:cb:a0:2f:75:7e:8c:b0:9a:d4:
ce:ff:b8:a9:bf:43:79:36:25:94:d0:26:fc:db:a0:fb:71:58:
7c:2c:31:60:45:cf:8b:77:70:0d:95:3b:38:03:69:65:5c:b2:
b0:8c:81:4e:b4:3b:47:22:e3:94:9b:7f:9b:22:3b:8f:76:4d:
53:ba:09:03:46:e6:5f:81:6c:69:bb:f9:10:a9:3d:32:c9:97:
49:23:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:40:33 2025 by rpki-client