Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/fce02999-ce72-39f7-957b-223a3adf7b3b.roa
File: fce02999-ce72-39f7-957b-223a3adf7b3b.roa (raw, json)
Hash identifier: eH6BjN8sLYk0smQA7h2pUPsSTYJRl30kM74nN5EL0vc=
Subject key identifier: A9:2C:AD:2F:AF:6F:C9:66:B9:B4:4A:00:F9:77:AA:BC:A7:22:48:ED
Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial: 010D0C9F43285848748B21F749C9D68944F40EC0
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/fce02999-ce72-39f7-957b-223a3adf7b3b.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 48254
IP address blocks: 206.130.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:21:f7:49:c9:d6:89:44:f4:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=63a13eec-139c-413a-872a-874bad31df1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:87:b1:13:8e:6b:c8:f7:e8:e6:f6:08:c0:
b4:a7:dd:34:0f:7f:31:cd:7d:ac:be:18:21:ba:5b:
64:00:76:0e:67:41:9b:ab:c4:15:52:4b:c5:a0:26:
16:b5:62:c5:c0:2e:e7:62:39:e0:8c:01:17:e7:9b:
be:d1:f2:66:af:d5:0f:3c:07:cc:ec:58:ca:6c:f3:
69:76:65:11:2d:01:e4:b4:ee:15:aa:33:da:e0:1f:
6e:d4:34:ff:5a:2e:6d:0e:fa:80:3e:47:fb:6c:a0:
09:37:3f:2c:1a:5a:6e:97:74:bd:b8:af:c2:77:4b:
59:e2:29:5f:80:6e:61:5f:7f:c9:96:0d:fb:73:85:
eb:bf:b8:a2:b4:cf:db:20:2f:b1:1b:1b:7e:b3:7e:
60:db:81:14:0b:a0:36:99:0e:b3:f5:7e:0b:a6:16:
f4:52:2f:28:a4:77:1f:6b:e4:fc:4a:1b:4e:b8:da:
e6:1c:90:1a:00:ae:80:02:40:fd:52:20:82:63:4f:
eb:5a:73:df:11:5c:f0:c9:aa:c9:71:69:bb:6b:5e:
5c:bc:d3:e2:2c:d3:8e:f6:fd:bf:69:35:f6:b0:2d:
7d:01:e2:55:49:b9:71:1f:6f:ca:86:51:a7:41:74:
d6:0f:f5:11:d2:1f:57:88:f6:46:44:1e:83:0f:73:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:AD:2F:AF:6F:C9:66:B9:B4:4A:00:F9:77:AA:BC:A7:22:48:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/fce02999-ce72-39f7-957b-223a3adf7b3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
X509v3 Authority Key Identifier:
keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
sbgp-ipAddrBlock: critical
IPv4:
206.130.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:70:9e:63:77:4c:08:49:88:12:4b:2b:de:f3:86:3f:c9:e6:
1f:51:f8:17:56:48:62:62:05:3a:de:65:19:09:af:7f:ce:ee:
19:5e:ee:49:e7:ed:b8:40:31:92:36:25:15:7a:b1:9e:e0:4a:
82:b2:b0:e7:79:25:05:34:1d:1e:c5:e6:e4:51:33:7c:6a:43:
04:f2:d6:f2:fb:48:a1:16:a4:df:e9:d4:84:d9:50:be:78:62:
0a:6c:66:d2:ea:32:b8:5b:02:14:95:99:48:08:b6:8d:47:a5:
a1:85:f9:19:a3:cb:f7:82:e9:15:5b:39:de:e6:69:bc:18:be:
c3:29:59:13:11:14:1f:51:fa:36:a1:7e:b8:36:5f:3c:a2:76:
92:ea:e1:f8:39:ec:25:99:86:4f:c4:ce:a0:33:2b:92:e8:c0:
00:41:de:00:a5:29:7c:d4:7d:4b:95:18:35:8c:66:94:20:e4:
fe:0b:ec:e1:3d:59:b3:d0:e9:6e:17:1a:39:ff:a1:70:95:b4:
eb:8a:f6:36:0c:d5:14:a7:8b:80:8a:a2:9c:d3:fc:2f:74:24:
44:48:90:cd:eb:b8:49:fd:eb:17:4f:fa:af:f3:87:bc:28:f2:
87:59:07:a7:c1:21:a0:ac:ff:04:8d:a4:b8:ae:d4:4f:37:30:
12:69:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:53:06 2025 by rpki-client