Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa
File: 4674c542-a229-3daa-8f2c-4c5ff78cf657.roa (raw, json)
Hash identifier: DD6LhRjC6L50+sLzKyPvIfeDA8+jSpoMOUcpzVY03I0=
Subject key identifier: C3:9A:69:36:10:C3:45:C5:FE:81:84:4F:3E:4B:B9:E1:D3:B1:FF:48
Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial: 010D0C9F43285848222FD201D607C64359846780
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 1273
IP address blocks: 206.128.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d2:01:d6:07:c6:43:59:84:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=1edc7440-b379-4676-bd91-0aae3874b856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:36:e6:89:59:93:86:1f:cf:28:35:7b:cc:
d6:b9:a0:52:d2:51:51:fd:bc:d5:ab:9f:20:55:61:
99:44:d6:4b:89:e2:3c:57:8d:8b:4b:2f:1d:f6:b7:
4d:c0:46:83:dd:a9:e8:10:37:3b:12:34:25:7e:2c:
5b:66:a1:6b:54:03:63:84:75:2d:04:10:68:9e:5e:
97:d7:73:ab:19:8c:09:fe:49:41:02:1e:00:e7:86:
d2:2f:f9:6b:c5:fa:9c:e3:bb:cf:42:99:20:38:f3:
3a:fb:3c:4d:70:67:7c:5a:7c:be:8f:08:21:40:5f:
2a:a4:2d:d4:a8:5c:38:a0:52:4a:46:a8:a8:d4:a5:
50:05:dc:7d:ce:39:d3:18:25:c1:83:31:99:b9:bd:
ff:f3:bb:8f:1d:13:aa:82:f1:e5:bd:4b:7f:30:fc:
dd:50:30:41:ed:a1:63:13:1d:ef:55:f9:a4:83:23:
71:9b:30:2a:8d:5b:ad:51:df:6f:86:c1:e7:95:e5:
00:74:2c:90:f4:74:0c:23:0d:ee:fb:27:a1:d6:d6:
b7:3b:17:86:50:b7:62:30:4f:c1:2c:8c:5c:0a:7d:
42:f9:ad:80:16:ea:0f:b7:28:53:65:6e:1a:8c:83:
53:22:ab:21:98:85:19:8d:a3:92:94:9c:cd:33:7c:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9A:69:36:10:C3:45:C5:FE:81:84:4F:3E:4B:B9:E1:D3:B1:FF:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
X509v3 Authority Key Identifier:
keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
sbgp-ipAddrBlock: critical
IPv4:
206.128.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:6c:b8:eb:ee:d3:96:fa:30:5e:1f:66:56:46:a2:ee:e7:3a:
94:26:c8:76:44:85:65:3d:88:4a:50:b7:fa:96:bd:a2:eb:f7:
bf:93:b8:b7:84:12:5d:7c:6b:71:cb:66:5e:e1:9f:d0:76:88:
e6:bb:05:ee:a4:06:70:14:c6:7a:24:e5:e2:be:c7:b1:df:55:
95:86:4b:80:69:f1:91:2d:9e:5c:0b:48:a2:95:17:e6:e1:fb:
a0:48:37:b6:4a:7d:87:34:9f:03:b1:be:70:b2:d6:ec:b0:a2:
8c:78:93:3c:57:04:1f:53:11:72:10:e7:7c:7d:83:72:09:99:
01:47:7d:51:25:61:5c:dc:ce:d5:1f:70:21:07:7b:37:84:2c:
29:91:89:34:e4:b4:f1:56:da:87:8a:da:1f:c4:b2:a4:fe:8e:
33:13:8c:fa:fa:8a:5c:b5:59:d2:d1:1e:3b:b6:3f:7a:b1:3b:
cf:d1:9f:72:79:9a:e4:90:ce:c6:cf:6c:12:88:9a:b9:75:36:
aa:d6:61:10:ff:99:ae:0d:d2:17:de:21:68:49:6a:02:aa:e8:
e9:cb:0d:de:a5:a1:f9:0e:20:d2:4c:c5:cc:50:88:35:d6:5f:
b2:a2:8e:1d:e3:b0:f9:38:e6:b1:e6:c1:21:51:82:b7:d6:30:
bf:35:45:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:12:32 2025 by rpki-client