Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/96365c9c-1730-3d3b-bf6e-3f7bc887cdad.roa
File: 96365c9c-1730-3d3b-bf6e-3f7bc887cdad.roa (raw, json)
Hash identifier: NEORxGd3IEJKtt0zC7qnEjQVRL6gALZ+JRDTi9ArpSE=
Subject key identifier: 45:88:7F:0A:4A:73:05:43:7B:F3:FE:75:CA:00:FA:98:E0:C7:F9:76
Certificate issuer: /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial: 010D0C9F4328584827C5354F565D319CD3923F00
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/96365c9c-1730-3d3b-bf6e-3f7bc887cdad.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 0
IP address blocks: 206.53.172.0/24 maxlen: 24
2606:a980:0:5::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:35:4f:56:5d:31:9c:d3:92:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=e7515db4-2618-409b-9a46-465630b2bb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:e4:dd:d5:1a:e8:76:50:51:76:30:2e:ea:
90:f5:c9:87:ed:7f:1e:bf:f4:2e:14:67:47:b5:6a:
14:a5:67:c7:73:0d:9a:4a:53:1e:9a:36:5a:fc:e7:
9e:4d:48:5c:1e:0d:c7:f8:74:f7:1d:b6:ea:b8:d2:
29:f8:83:fa:c6:39:b1:2d:1c:10:5b:0b:e6:df:3f:
a2:62:7d:5b:4b:d6:5c:f6:f4:a4:0d:73:e7:4e:1c:
eb:2c:9d:da:1b:4b:e5:4e:6d:ea:74:da:e4:55:7a:
dd:09:5f:15:0d:e0:ae:7e:88:e6:50:43:d3:79:66:
50:3b:99:75:73:9c:63:c7:dd:39:26:bf:c6:c4:98:
e6:0f:ce:04:21:9d:bc:bc:b3:fa:47:b7:d5:a1:95:
0e:09:50:f4:71:9c:de:97:ce:b8:48:9c:81:c0:7d:
e2:3c:9b:2c:5f:d1:9a:3e:58:9c:9c:11:a3:8d:79:
58:9f:76:57:6d:0e:84:93:66:4a:d3:31:e6:93:80:
1c:01:92:c2:2c:93:e3:4b:c1:ff:83:7e:2c:d4:d7:
be:a5:85:08:e9:e9:97:bd:c8:78:a3:fb:7f:f4:5e:
15:c3:d3:6b:53:29:75:8a:c2:ea:84:69:f9:7f:ba:
2f:76:be:13:93:b4:e1:a1:01:b7:e6:20:65:f6:78:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:88:7F:0A:4A:73:05:43:7B:F3:FE:75:CA:00:FA:98:E0:C7:F9:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/96365c9c-1730-3d3b-bf6e-3f7bc887cdad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
X509v3 Authority Key Identifier:
keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
sbgp-ipAddrBlock: critical
IPv4:
206.53.172.0/24
IPv6:
2606:a980:0:5::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:62:a5:14:26:b3:0a:75:e7:09:e6:b5:cc:a4:98:2e:5a:8e:
ec:4b:6f:4c:d5:bd:22:be:9d:4b:50:f4:c5:f5:2b:a5:fd:d9:
55:7d:8f:04:16:c9:f8:30:42:07:63:b5:24:cc:03:38:f3:34:
d3:20:25:1f:ec:5d:6b:cc:b1:e8:32:ed:95:15:a0:2e:a8:a1:
d8:32:d2:3a:8a:ad:77:71:96:ee:4e:74:b8:b5:5f:42:e9:58:
25:e3:18:91:ff:71:4a:09:66:20:ef:72:b2:db:67:45:59:9e:
6a:e8:03:ec:ca:aa:82:5a:30:03:9e:92:11:74:61:a4:0a:5e:
eb:fc:9b:1f:ce:af:17:a9:37:5d:03:8c:73:30:4c:bd:58:c7:
b2:19:42:57:a2:da:fa:42:9e:85:9a:81:3e:e8:73:00:ac:61:
5d:43:00:ee:a2:2d:a5:08:43:aa:ef:30:03:e5:f5:da:a0:2d:
f6:db:58:38:f4:ab:63:8f:e7:28:23:4b:6b:15:34:84:b9:e2:
a0:9c:1a:de:2d:10:42:51:c7:92:09:f9:08:f5:e9:57:d1:2f:
a0:87:19:79:86:79:64:ab:ae:fa:85:51:e3:ff:1b:1a:4f:c6:
42:98:4a:e1:63:e4:b7:1e:1b:f5:4e:99:cb:fe:fd:34:76:4a:
99:b6:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:19 2025 by rpki-client