Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/f0937929-7f6c-3f3d-bfa9-25a9c538dc01.roa
File: f0937929-7f6c-3f3d-bfa9-25a9c538dc01.roa (raw, json)
Hash identifier: hopDL+1opjwxZiOo9rpL+N/ulAqW0h7dJpBXIE/60Rk=
Subject key identifier: 88:E9:1F:35:66:7D:BC:EC:52:AD:97:D0:DD:AF:8B:AC:B1:D8:5A:CB
Certificate issuer: /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
Certificate serial: 010D0C9F432858486695C859C4B2004AF2FB5E80
Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/f0937929-7f6c-3f3d-bfa9-25a9c538dc01.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 2914
IP address blocks: 206.168.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c8:59:c4:b2:00:4a:f2:fb:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=0d6cbcd2-96bd-411c-9737-bc4eb7e86ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:28:ad:cc:c4:51:2b:b0:1e:a3:60:e7:43:
d6:71:96:6f:b8:7b:61:5a:af:95:78:6b:69:bd:80:
e8:f6:b5:47:99:a6:99:dd:86:f5:d2:a7:73:17:2e:
2e:3a:87:0d:a3:58:d1:a2:70:91:74:bc:a1:7f:b5:
9d:9e:27:45:16:5a:da:79:ec:a3:f7:62:f8:65:ff:
68:c4:8a:5e:ce:05:58:de:58:68:b4:f6:d2:7f:be:
23:1a:f9:c1:14:95:d5:33:b9:4d:27:f2:c7:1b:81:
0d:d0:6b:31:6c:75:12:17:7c:d6:a1:45:b2:ab:08:
50:04:ee:ac:9d:eb:24:5f:38:19:48:f2:01:b0:82:
ff:59:90:b0:d4:5d:cb:42:56:b3:8c:48:b0:f7:05:
1e:06:06:46:e9:de:10:26:fb:62:48:4f:07:b3:30:
72:ff:2d:e0:f2:20:af:3e:1b:c6:69:1a:3a:75:8d:
4b:18:33:f4:4c:67:a9:ef:c8:2c:25:99:4c:06:be:
8d:12:20:80:b7:7a:ad:0c:d5:c4:da:54:c2:6b:1c:
31:df:86:3b:57:a1:d1:d4:81:b8:02:18:19:f1:99:
77:f4:77:70:fe:eb:d7:b3:be:a2:15:8e:24:ab:de:
62:54:e1:49:7b:82:2e:cf:97:49:12:ec:f9:59:9b:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E9:1F:35:66:7D:BC:EC:52:AD:97:D0:DD:AF:8B:AC:B1:D8:5A:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/f0937929-7f6c-3f3d-bfa9-25a9c538dc01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl
X509v3 Authority Key Identifier:
keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:a8:ec:fc:ff:da:27:67:73:a6:b1:bc:fa:ac:11:0c:46:54:
f5:59:7b:84:2b:38:71:f5:ae:17:5a:14:4a:a4:e4:67:ae:2d:
c0:6c:3d:c9:96:e0:66:13:1d:f9:83:f8:0a:b3:4b:07:95:73:
69:c2:cf:2f:68:f1:fc:75:96:91:3a:92:ad:cf:b6:01:e7:e2:
81:b0:bb:cc:ac:d5:fd:63:73:90:33:cb:48:f3:c2:1b:e5:65:
d9:12:42:dd:bf:00:e0:c7:7a:80:23:ad:47:5c:19:3c:67:09:
c9:88:90:e8:ea:b3:94:4b:c4:50:90:3b:34:bb:10:c6:98:3e:
7c:93:af:70:b1:6e:7a:6d:f6:90:78:45:94:a5:6b:6f:a4:3c:
4c:99:78:24:16:01:27:1f:d6:cd:5c:0e:9a:76:79:0e:f3:26:
6c:c5:9e:90:ca:9d:a9:92:63:ab:54:56:4c:57:42:8e:6f:d0:
4c:59:bc:e2:93:95:13:09:7b:29:0d:22:f7:1c:c5:17:0e:44:
3e:38:86:ee:12:2d:38:9f:88:d0:61:a4:85:39:cf:d5:bc:60:
eb:e6:46:70:f3:57:9c:22:54:0d:63:08:c7:2b:13:73:30:2f:
51:b5:0f:7e:5b:9c:b4:7e:6e:81:66:0a:e5:cb:07:0c:42:85:
3e:7e:d0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:11 2025 by rpki-client