Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b86a6c18-5711-3657-9135-226408a922bc.roa
File: b86a6c18-5711-3657-9135-226408a922bc.roa (raw, json)
Hash identifier: SexLpe3T3JcGCE2duN9TEOn2HaFk2Rxw7t4nLQvl4Lk=
Subject key identifier: F1:27:A5:61:B2:6E:AC:F9:78:BB:80:89:88:DC:20:98:C7:1D:88:B4
Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial: 010D0C9F43285848222FDBC0910FA557C0577140
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b86a6c18-5711-3657-9135-226408a922bc.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 1273
IP address blocks: 206.97.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:db:c0:91:0f:a5:57:c0:57:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=ff0a5dd0-2b5f-4d55-b14d-709a085e7770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:8b:03:58:1d:b1:59:ed:06:a3:c2:05:58:
c8:e8:de:4f:a6:e9:43:7f:7c:b7:68:c9:a4:2d:93:
14:64:e7:a6:b9:f3:cf:48:70:37:84:7c:85:96:4e:
fb:b2:cf:cf:23:c4:10:14:ca:4e:89:f5:e2:b0:44:
04:51:e2:0c:2f:bf:1e:79:a6:a9:a3:31:eb:66:fb:
6f:6e:58:e7:e7:8e:c5:db:d1:a9:0f:0a:79:18:7a:
73:1d:5b:d8:83:53:53:61:b2:e6:9f:39:c8:20:0b:
6a:a1:f9:6e:92:83:bc:f5:ca:de:36:74:18:59:1e:
ba:14:a5:70:37:cc:eb:75:6e:c6:23:cf:4c:15:6b:
93:60:89:9b:65:66:98:5d:6b:3c:90:f5:b3:1c:78:
7a:05:fe:cd:58:d9:f2:2f:05:2a:bd:96:de:e8:04:
8c:19:09:2d:77:c5:ea:ad:4a:76:cc:f0:0d:df:11:
e7:c7:ba:3d:63:c3:5b:1c:44:cc:f4:56:13:47:cf:
a6:16:d4:af:2b:e1:00:87:5f:01:58:56:b4:a8:f2:
bd:37:4d:39:dd:49:e8:6a:47:4c:a7:e1:cc:41:42:
0d:80:67:39:ff:d6:58:8b:95:50:12:a3:87:20:cf:
05:45:8d:86:c1:92:2a:be:7c:a5:78:46:02:1f:d8:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:A5:61:B2:6E:AC:F9:78:BB:80:89:88:DC:20:98:C7:1D:88:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/b86a6c18-5711-3657-9135-226408a922bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
X509v3 Authority Key Identifier:
keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
sbgp-ipAddrBlock: critical
IPv4:
206.97.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:97:1b:6b:2d:47:c5:1b:42:64:4f:fd:90:69:fb:ba:d1:08:
46:3a:2f:20:3e:0b:d5:82:12:06:1e:70:c4:4c:fe:b3:2b:bd:
a9:ca:39:9f:95:a5:9f:1d:bf:16:2e:db:a5:0e:91:5f:9c:59:
a9:ed:c9:83:36:1c:3d:e8:78:2e:fc:d6:d6:7b:d7:2e:aa:30:
62:2d:d7:7c:d6:23:fb:f7:3d:be:d1:4a:ca:75:cd:4b:41:c1:
90:44:76:7d:ff:16:27:39:01:99:28:e0:37:8f:5d:59:90:88:
c6:f5:fb:47:45:01:4f:96:11:a3:ee:fa:dc:25:03:d4:43:cf:
52:28:ae:d2:67:65:08:1c:35:73:46:08:38:86:14:81:90:4e:
8f:39:3b:44:f4:58:66:4b:26:06:53:c7:b6:6e:93:ca:c6:e0:
68:20:97:5d:58:31:ff:a7:34:6f:e0:21:f7:42:75:79:0f:7c:
01:c6:9d:39:fd:b7:c6:0a:09:51:ca:b3:5e:7d:8b:a6:c7:b6:
96:e1:85:a7:cb:bf:f5:73:86:fc:cb:89:eb:fb:08:7c:a4:21:
46:96:8e:1f:a3:1a:c7:5d:06:4a:fb:aa:eb:1f:88:22:ba:fb:
fc:ff:94:59:e1:a2:d0:cc:7f:b1:9a:85:d7:70:d7:53:11:3b:
b0:a2:39:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:18 2025 by rpki-client