Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9c836c-81d9-346a-9556-aada3f6910e7.roa
File: 2d9c836c-81d9-346a-9556-aada3f6910e7.roa (raw, json)
Hash identifier: mwEk9wE6GXVUB9V5OubCXYrci4X4xHCXP2luKhvA0+A=
Subject key identifier: BC:51:06:45:BC:02:65:CE:1B:2D:A9:2E:D5:48:59:6C:6F:78:0E:5C
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848222FE8B04A0609051EF9FF00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9c836c-81d9-346a-9556-aada3f6910e7.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 64267
IP address blocks: 206.206.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e8:b0:4a:06:09:05:1e:f9:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=014fd404-ecd4-41d7-80bd-1f8d49fea656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:dd:d4:a9:56:29:61:ce:95:82:70:32:bc:
61:e5:63:10:4d:d6:d1:5d:2c:5f:76:0a:db:35:3a:
03:56:da:07:98:71:a5:bd:c7:9a:36:d0:12:e7:2c:
bf:94:47:94:23:63:9a:58:e7:9f:00:c9:69:1d:68:
05:82:54:77:c8:e6:b2:d3:fb:9f:8f:70:b2:06:1d:
b0:ff:67:49:4f:24:8a:2d:67:26:ac:f4:64:1d:f7:
8f:45:cb:a1:59:93:d2:8a:4a:b2:eb:5b:0e:93:1d:
d3:ab:42:59:f5:83:d2:11:e2:d7:38:f9:a1:7b:cb:
5d:6f:c1:ee:1e:ef:ac:79:df:48:00:8d:ce:03:2d:
0f:dc:4b:12:63:ef:86:e4:ff:80:5d:06:72:2b:0b:
2f:3e:db:e7:d0:ff:86:bf:10:fe:84:5c:98:43:cc:
ee:7a:08:b1:07:55:07:cf:56:a7:8e:8b:46:f8:79:
53:d6:cb:5f:07:02:8c:5c:7d:ab:fb:78:9e:c7:f2:
e4:4c:e0:db:c9:12:09:30:d0:b7:a5:ba:21:e1:eb:
05:6c:1f:59:73:35:35:dd:7d:5e:cb:42:1b:d1:76:
bc:fc:15:7c:71:96:32:a8:db:8d:47:5c:98:63:02:
d4:6b:bd:15:b7:03:06:e2:28:55:fd:e0:a6:04:29:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:51:06:45:BC:02:65:CE:1B:2D:A9:2E:D5:48:59:6C:6F:78:0E:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9c836c-81d9-346a-9556-aada3f6910e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
206.206.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:65:69:78:a4:a8:eb:12:6b:14:ac:8c:d7:75:cd:33:7a:6f:
d4:d1:99:a0:3b:41:f4:51:a1:7f:9d:99:cd:45:61:ba:ec:56:
34:8e:bf:23:ee:28:df:84:45:c4:67:48:4b:a6:bd:96:b9:52:
bc:0a:fc:70:56:fd:99:21:2e:c4:fb:e8:ad:05:cd:45:0b:6c:
c5:7f:a6:6a:25:e7:96:cb:c9:e3:e2:4f:18:ff:54:34:78:e2:
dc:9b:4f:cc:b9:45:b6:75:50:9d:2e:ac:f7:6c:75:ca:c6:68:
fb:73:03:b6:da:de:9e:1b:ee:d6:49:0f:72:05:71:09:57:aa:
8c:63:10:18:99:29:98:4e:58:60:1f:0b:20:8f:0c:a0:c0:d3:
10:eb:4d:d3:0c:4e:51:36:46:95:34:05:72:3f:53:ca:a2:ff:
0e:eb:bb:ec:df:e2:19:14:73:6e:40:24:b0:fa:bc:6c:ab:ff:
6d:ce:11:85:1c:27:99:0c:62:eb:9f:ce:01:2b:86:3b:ca:db:
34:93:66:a1:11:0d:96:9e:6d:76:1d:ae:80:47:50:81:01:f0:
96:ce:c8:3c:b3:21:f4:fa:e4:f4:5a:f9:26:98:d7:f6:b0:a2:
94:c2:d1:3c:a3:de:47:9c:9a:8b:50:d7:9e:7c:86:51:8e:8a:
15:61:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:32:56 2025 by rpki-client