Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
File: b08285ee-0972-329c-81d0-7964b995c67b.roa (raw, json)
Hash identifier: XK+RPhA6iHBvR01PofjFmKq7XAAiRD8wG2O+cGUjxrw=
Subject key identifier: 6A:4B:CA:F0:22:80:DC:A8:FA:14:92:4F:6C:5F:A6:F2:55:B7:2B:4B
Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Certificate serial: 010D0C9F43285848424ADCEA17350DF21ECD5660
Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 376
IP address blocks: 206.167.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:dc:ea:17:35:0d:f2:1e:cd:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=7f3b3bbc-ee9c-4444-b33e-c08cf5573686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3e:c3:83:fe:18:dd:d1:d4:0d:c1:e5:b3:ca:
05:31:a6:82:7e:dd:5c:d7:3c:dd:f9:72:b6:86:74:
9e:00:02:66:9e:b6:01:93:a7:ee:ed:9d:9c:59:48:
08:17:24:bd:43:d1:82:12:81:81:c0:17:4d:d1:e8:
9b:d4:61:fe:6c:f2:78:fd:6c:20:7c:ad:e6:e5:b9:
07:29:8a:17:fd:e6:c5:fc:c9:97:c3:ce:ad:a1:78:
4d:b8:3e:f7:9d:2a:76:c3:5c:0d:d1:fb:4b:e5:9a:
60:89:e9:e9:5a:6e:89:3a:8f:53:a5:1b:a2:73:e9:
6c:56:c4:df:12:75:56:c9:54:a4:f4:23:8e:91:71:
74:9f:c0:5f:0a:4b:bc:dc:3d:05:b2:ca:4b:11:a4:
a0:f8:1d:ce:d5:94:da:4a:62:08:41:83:32:b0:7b:
10:75:4f:d9:fc:18:9b:32:ef:dc:8a:3a:5a:d3:4c:
95:f1:96:83:74:76:0b:02:5d:b7:27:df:c2:59:19:
ea:02:39:13:8c:9e:fc:36:7e:ab:41:7a:3e:6c:9e:
af:64:cb:1a:e0:5d:9b:5b:3e:8b:8e:73:b7:7c:3c:
3c:ee:a5:6a:4a:13:ce:a2:eb:95:34:2d:52:26:6e:
63:ac:f2:28:0d:ee:01:f2:d7:b8:46:cb:76:47:c5:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4B:CA:F0:22:80:DC:A8:FA:14:92:4F:6C:5F:A6:F2:55:B7:2B:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/b08285ee-0972-329c-81d0-7964b995c67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
X509v3 Authority Key Identifier:
keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:e8:c0:32:3c:87:13:82:c4:30:0f:a9:13:87:b9:65:da:90:
fb:94:cf:49:6f:2f:9b:c3:5b:49:57:35:01:e9:ee:6c:d1:e9:
fe:33:0b:e5:01:9e:c2:c4:d9:98:ef:b1:26:7a:64:44:26:a2:
84:01:12:c4:e7:12:1d:fa:bd:06:f8:c8:d4:85:d3:e1:96:15:
7f:02:01:24:93:ca:90:bb:2e:c9:23:27:7c:7a:4d:36:a3:62:
16:52:41:c8:c1:f1:ba:1f:49:55:c6:c3:65:b9:d9:75:9a:48:
e4:45:e8:a7:6d:80:a3:dc:4e:bc:26:0a:49:01:60:dd:20:36:
16:59:6a:0f:d9:db:a8:d3:e0:8b:18:63:6c:68:64:7d:2f:1d:
06:66:09:8a:ec:27:02:fe:3b:93:2b:88:33:08:a3:40:4a:bd:
b9:76:7c:fd:eb:a6:fd:37:59:7f:a4:db:7c:11:ff:55:65:f7:
93:31:df:d1:ea:25:55:0e:18:33:3d:7a:e5:4e:a3:97:4a:bf:
d4:80:ef:41:6a:a9:a2:93:ad:e0:66:92:6a:0f:57:af:95:f3:
63:2e:d6:48:16:2e:9d:d0:47:8b:3e:dd:6f:5a:dd:7a:a7:2e:
f0:d2:0c:75:1d:1f:68:9c:44:e5:23:73:91:70:bb:56:05:e5:
cd:53:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:17:25 2025 by rpki-client