Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa
File: 0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa (raw, json)
Hash identifier: lDNdNeVVzyWlFY8GXNs3wO3aaymrn0NhwpOH+vnR4Ps=
Subject key identifier: C0:9B:89:39:B7:8C:78:53:DF:50:AA:F4:FB:76:1E:BD:28:DA:8C:8E
Certificate issuer: /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial: 010D0C9F4328584827C5356B7FADDBDE93269080
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 0
IP address blocks: 206.53.174.0/24 maxlen: 24
2606:a980:0:7::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:35:6b:7f:ad:db:de:93:26:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=2d364fe0-c8c1-4947-9a50-229931d630f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:b1:72:74:6f:3a:6b:c1:7c:7d:4b:98:89:
aa:ff:07:e5:7e:05:c5:f0:84:78:d0:96:25:51:ac:
7e:c8:63:8e:6f:25:67:58:e0:c8:f3:81:46:35:8b:
bb:79:1e:7e:81:bf:d9:8e:e0:b8:7b:3e:2d:bc:e4:
a0:73:a8:d0:b8:f7:7c:06:67:01:9d:51:e9:51:01:
a8:bc:c6:35:bf:74:13:62:f4:79:a9:76:fa:5c:20:
8a:88:4b:fa:ed:91:42:07:63:b8:a0:d3:7c:e1:13:
d6:6e:0c:7f:06:d6:f1:38:a1:61:73:1a:23:99:86:
37:00:da:c0:63:34:bc:9a:4f:69:97:66:13:53:1c:
68:f3:09:a4:de:9b:58:49:82:30:10:d5:37:20:24:
dd:2f:ed:93:75:15:96:95:5c:76:46:08:57:c6:bf:
cc:8b:ea:c7:6f:34:56:f9:f1:90:93:df:77:fa:bb:
20:2e:b3:b8:4c:17:a0:f7:a0:12:c3:48:3a:0d:98:
1b:1a:72:e0:0c:35:24:3b:69:c8:7a:ca:9f:47:ad:
33:8d:e0:31:26:dd:dd:d0:e4:00:86:dd:0a:5d:4f:
9d:d3:da:f9:74:61:48:49:63:c0:b4:09:8b:e7:76:
ec:3c:03:0a:b5:26:6a:4c:bb:be:33:cc:22:1f:25:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9B:89:39:B7:8C:78:53:DF:50:AA:F4:FB:76:1E:BD:28:DA:8C:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
X509v3 Authority Key Identifier:
keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
sbgp-ipAddrBlock: critical
IPv4:
206.53.174.0/24
IPv6:
2606:a980:0:7::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:cb:4a:b0:c9:9b:44:b5:26:3a:e4:87:6f:9a:e9:ff:8e:80:
38:8c:ef:7c:3b:60:c4:74:9a:fe:e1:79:0f:fe:3d:12:16:93:
0c:d7:4a:bf:41:ee:6b:d7:39:d3:11:68:55:4d:90:d8:eb:09:
d0:d4:ae:a4:54:7a:1e:80:22:45:9d:59:10:7b:fa:3b:4a:d5:
84:6a:ed:9e:47:49:ce:c8:a3:42:6c:de:e5:f3:dd:d2:e0:8f:
fa:4d:38:d4:ef:a7:7c:68:88:2a:70:92:f5:55:d3:ad:b2:26:
aa:1c:af:af:68:0e:bc:0b:12:9c:bc:ae:e6:67:82:5e:b1:eb:
c0:72:50:86:f3:e1:38:4e:5c:6d:15:a0:e7:59:59:53:97:8b:
ab:ce:64:c6:0a:cb:58:ba:cf:a7:6c:97:fc:40:0d:49:c0:19:
20:84:56:e3:55:c2:6f:4d:13:f1:b0:c0:b1:bf:5e:36:27:c3:
bc:dc:77:f8:f9:a9:a5:40:82:e0:42:3f:79:15:2d:16:98:b3:
c6:36:89:f2:d6:2e:d3:ea:1e:a2:de:50:ff:fd:7c:ff:6b:33:
12:50:77:a4:6d:a6:63:d1:53:a0:8c:02:34:60:1a:75:b3:ba:
af:71:a2:39:cd:93:6e:c7:68:c5:3f:54:96:35:55:83:45:43:
00:1f:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:18 2025 by rpki-client