Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa
File: 01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa (raw, json)
Hash identifier: X+VuAjZKRHftByG7AVtq5+itxnMu9nWrIo9dFNuX26A=
Subject key identifier: C4:2D:33:9A:17:E6:21:84:2C:D6:CC:11:E6:62:D4:6E:93:D8:56:90
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F432858484AAADEEEE0F10F679B586D40
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 22066
IP address blocks: 205.213.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:de:ee:e0:f1:0f:67:9b:58:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=7016f50c-5a56-48fb-80c9-431b62a34e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:ef:91:b7:fb:a7:96:a6:be:23:97:71:8d:
d2:0f:4b:30:48:64:25:47:8e:36:7b:6d:4e:bc:57:
c0:df:f4:13:b3:ff:08:59:5c:a6:b8:be:77:1c:a4:
7f:b2:b1:eb:a9:f5:be:3b:08:96:23:22:fa:24:3d:
93:1f:94:cd:63:91:40:92:bb:17:fb:f6:b2:d4:ad:
ea:93:cf:b9:74:66:f8:57:0d:6a:bc:6b:2f:7e:86:
5d:89:1c:74:3d:4a:ad:82:c9:75:bb:28:43:ba:69:
b9:b0:c1:5a:2c:97:1c:6d:73:4c:e9:3c:2b:90:da:
a7:86:54:2c:5a:f3:1f:1f:38:cc:9b:3d:29:2c:85:
17:07:83:f7:29:f9:9f:df:aa:6b:9a:0f:f1:57:3e:
6d:b0:1f:f9:1b:5e:f5:0a:a7:dd:69:22:90:b2:fe:
54:92:90:e5:dd:45:7c:1e:6b:8c:73:20:07:84:7e:
5f:f2:7a:bc:0c:43:06:4d:00:cf:39:f2:a3:d5:3c:
42:96:9b:fc:6b:b2:d0:f7:6e:2c:7c:7d:80:86:38:
dd:03:27:fb:a2:9f:1d:75:7c:09:a1:f1:ca:d7:d9:
98:c8:d3:b7:a5:2a:18:1b:20:1d:56:c8:dc:45:ef:
49:fb:bd:07:dc:40:d4:1d:0c:70:f2:5d:ac:c0:54:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:33:9A:17:E6:21:84:2C:D6:CC:11:E6:62:D4:6E:93:D8:56:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/01d87b93-f8a0-3de8-b5c6-6febae5c2ad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
205.213.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:e9:fc:94:19:68:d9:94:6d:8e:d9:f0:68:8d:3c:83:b3:31:
8a:fc:92:61:9d:f9:d7:06:34:c9:b4:04:6c:d7:09:7f:57:5c:
3f:72:d6:66:da:94:a4:b3:de:84:e3:e9:c6:69:33:db:a5:2a:
bc:e8:21:76:21:1e:9c:d5:79:95:e2:4e:ea:7c:16:ed:65:ac:
95:ae:1b:54:91:71:47:81:98:c5:22:5c:90:c7:63:8e:80:18:
f0:91:f4:03:aa:f2:c1:2a:d7:b6:a4:62:0e:4b:9d:9a:1c:c8:
dd:e5:33:5c:b5:2d:b7:34:75:3c:44:ec:2c:53:f5:e8:61:5f:
ed:60:8e:9a:55:1c:d5:48:63:b6:51:83:7d:8b:7a:bf:c1:c5:
e8:6d:c6:70:dd:74:89:71:4e:81:c4:fe:12:75:20:90:01:e4:
2d:dc:54:04:f7:6b:1a:65:10:59:3f:da:cb:77:3c:d7:81:6c:
ab:03:a1:99:e0:87:3a:80:cc:a5:7f:0d:a5:95:e1:63:41:f3:
ca:56:38:93:28:0f:08:7e:25:20:f8:1e:dc:23:75:0e:f6:e6:
8d:98:1f:09:e2:0f:90:9d:6e:1f:77:1c:03:8b:f3:35:e2:6e:
d0:3f:f5:16:b1:e8:c2:57:e9:4a:34:29:01:79:30:c3:ba:42:
32:5f:27:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:24 2025 by rpki-client