Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa
File: 1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa (raw, json)
Hash identifier: +47ZyhZ5XTMQTnBTjEU902Rbd8eLWoUtJIws+g8uoKE=
Subject key identifier: EE:BD:20:24:A2:6F:08:45:2E:3B:24:53:73:2C:D2:1D:9A:41:8A:E9
Certificate issuer: /CN=cb079463-85da-4da7-b699-7f92f9faff04
Certificate serial: 010D0C9F43285848530AF2C456611905A79B5480
Authority key identifier: 90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 25956
IP address blocks: 205.166.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:f2:c4:56:61:19:05:a7:9b:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb079463-85da-4da7-b699-7f92f9faff04
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=af7dd689-4ac2-4867-91f6-fcb11d367095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:b8:78:63:31:03:70:7a:3a:2c:e2:8b:ac:
a0:6c:d4:b8:f0:65:b0:a4:99:5c:ba:5b:fc:56:1c:
e8:ed:ae:6b:6f:80:65:e0:8f:9a:d7:35:ee:30:b9:
f0:19:a3:a5:da:80:1e:b1:7b:ab:96:76:8e:9f:07:
d6:80:0e:7b:30:cb:c7:66:25:44:2a:63:8e:42:6e:
81:57:f9:4b:bd:74:b0:b8:ce:e6:7b:11:29:77:35:
44:72:b5:bd:99:33:6b:96:90:82:db:82:da:bf:cb:
93:37:6d:ff:ac:a2:a0:66:14:5c:c5:32:07:eb:35:
77:c9:09:cc:59:15:a9:d3:19:62:8c:39:c4:9e:b0:
a4:a6:7c:9f:50:64:ab:b9:ae:7f:44:33:b9:55:11:
96:5a:df:ae:10:45:53:63:f6:85:50:49:5f:c4:4a:
e3:83:ef:e5:77:3d:29:54:b5:6b:db:f7:e9:12:17:
9b:de:72:e0:e0:f3:ee:35:32:c3:bc:46:65:02:b9:
ba:a6:54:e3:80:d8:75:6b:6e:5d:1a:d1:72:f6:d2:
a5:d4:59:3a:9e:0f:57:e8:47:28:77:3a:2e:60:78:
7c:2a:db:5c:a6:23:6b:9c:b1:10:83:4a:92:39:ec:
52:7a:cb:be:21:9c:40:d0:f2:7d:42:8c:ae:df:a6:
6d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BD:20:24:A2:6F:08:45:2E:3B:24:53:73:2C:D2:1D:9A:41:8A:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/1ac33f1a-75fc-3467-8f36-1064e3e2098b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04/cb079463-85da-4da7-b699-7f92f9faff04.crl
X509v3 Authority Key Identifier:
keyid:90:19:F1:21:95:02:6C:A1:2B:92:FF:1C:49:51:AC:D2:F8:7D:97:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb079463-85da-4da7-b699-7f92f9faff04.cer
sbgp-ipAddrBlock: critical
IPv4:
205.166.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:42:f6:cc:97:03:61:eb:d9:eb:83:44:c4:a6:bc:5d:86:35:
26:15:35:94:c3:83:e8:57:05:a2:fd:9b:c2:65:8e:95:aa:de:
ad:b6:2e:13:f2:b1:bb:07:5e:e8:18:59:08:57:4b:43:b7:fe:
ae:83:9b:50:53:6f:03:f1:54:38:24:a2:49:d3:fb:83:26:6f:
2a:ce:0d:bd:30:0d:50:51:5c:a5:18:67:bf:10:83:9e:d1:71:
01:37:9b:7d:4e:52:37:00:d1:3c:5b:07:88:67:0b:32:72:f0:
2d:66:8f:17:8c:be:05:a9:69:73:7c:01:de:c1:0a:09:10:3c:
78:19:aa:16:3d:09:85:a5:ed:f1:10:11:5d:69:bc:8f:e0:8c:
f4:8d:3a:e7:9e:01:e3:0e:8a:b6:77:64:f1:a2:1a:e9:ee:d0:
ac:1f:b7:8f:4c:fa:04:39:94:94:8b:5a:07:23:ca:da:97:5f:
cc:9e:6e:0c:80:88:14:17:f0:a6:56:1e:d0:c1:dd:dd:f0:3f:
44:4d:ec:fc:b3:09:6e:94:bc:ab:c2:5a:52:e1:13:6e:01:95:
02:92:30:b2:38:d0:93:b4:b8:f7:de:7b:1e:ce:ea:08:49:b9:
d3:2b:c3:77:cb:7b:be:ca:6a:55:14:7a:16:4d:89:9f:ea:99:
9a:28:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:53:42 2025 by rpki-client