Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4b33ca9b-2df1-3a99-911c-80efb8916482.roa
File: 4b33ca9b-2df1-3a99-911c-80efb8916482.roa (raw, json)
Hash identifier: I39OUyb6GzD+oQcLL+hfRgyRGlUe+Xy5nfvcsAuQb0U=
Subject key identifier: 7F:D5:30:B7:C8:CC:59:35:55:44:AF:7B:33:30:ED:90:1C:B6:84:C0
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858481C9A896AEBCCE5CF609D2900
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4b33ca9b-2df1-3a99-911c-80efb8916482.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 198148
IP address blocks: 206.161.216.0/21 maxlen: 24
206.161.224.0/22 maxlen: 24
206.161.228.0/22 maxlen: 24
206.161.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:89:6a:eb:cc:e5:cf:60:9d:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=d31cee02-acbc-4bc8-80e9-9ab362f60638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6e:26:f8:7c:84:07:78:b3:1b:af:7a:8a:f1:
3f:8b:c6:07:75:f0:96:fb:1b:57:d8:52:fb:f5:a5:
f4:db:c9:8c:a9:01:c5:f6:5b:c8:7e:26:31:96:ee:
e2:d3:e4:e4:16:61:4e:45:8a:43:b9:30:16:46:01:
97:92:ea:cc:82:7c:a3:0f:7c:7c:b8:d6:64:5f:4e:
ea:81:ea:73:db:2f:d2:8a:f2:6a:84:ba:23:5b:51:
c1:11:65:5c:80:4e:0b:66:6d:ca:d7:47:48:7e:95:
f2:90:9a:29:d3:ea:79:69:6f:bb:b5:ec:f2:83:25:
4b:1c:78:9b:24:dd:b8:10:d9:11:54:e6:51:e6:1b:
2c:06:e5:57:09:b6:22:af:1a:39:6c:ad:10:be:5e:
09:96:58:b8:a5:8f:9e:60:d6:c2:3b:ba:9a:c0:c2:
8b:c7:c1:d1:76:f7:75:4b:89:f2:05:72:45:ca:62:
2f:63:56:b5:17:c1:e6:ef:e2:d1:b9:d8:8f:f2:fa:
9d:cf:7a:de:d2:77:3d:98:3c:d6:ea:2c:ab:b2:f4:
f0:5e:05:37:a0:5d:40:ac:c5:4e:d1:f3:44:1a:5b:
19:d1:2b:6b:a0:0b:ec:da:13:d3:bf:bf:5d:93:a2:
3c:f2:44:5f:ad:b1:fc:0c:ac:32:c5:e0:8f:17:a8:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D5:30:B7:C8:CC:59:35:55:44:AF:7B:33:30:ED:90:1C:B6:84:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4b33ca9b-2df1-3a99-911c-80efb8916482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
206.161.216.0-206.161.235.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:f6:4d:b5:c4:7a:15:53:76:3c:da:ec:de:51:1f:1b:6f:ea:
7a:30:eb:71:a5:66:0f:ae:ce:09:32:ce:dd:05:99:3c:a7:94:
f7:a3:1b:d1:d1:4a:63:a0:98:0a:9b:13:11:20:93:9f:7a:cb:
9e:33:76:30:e7:9a:15:09:24:d1:72:7a:62:47:d0:bf:bc:be:
2e:7c:f4:0e:63:77:08:2c:09:d3:2f:4f:35:93:92:39:d7:a9:
cc:80:0d:61:19:50:18:8d:ce:be:1b:3e:c1:f9:3e:52:aa:58:
61:a0:e6:94:d8:b2:7f:f4:50:89:45:3b:fc:85:0f:74:cd:f4:
89:ac:e7:b5:42:b2:99:9e:7b:b8:aa:59:44:91:6a:93:01:a6:
a4:81:5a:81:b9:54:5f:ae:cf:ef:a3:f7:d8:63:28:3d:b7:f6:
50:b8:30:f3:52:b5:76:c2:d6:a6:12:1f:10:e7:14:fc:b1:0d:
4c:3f:40:c8:b2:0c:29:9d:9e:94:4f:b7:ba:3d:2c:99:45:f1:
68:11:e8:49:26:c5:e0:cd:25:59:f8:eb:3c:fc:ae:60:2e:ae:
5a:56:4e:05:52:b0:2e:4a:56:31:e9:67:d8:ec:2f:ea:2b:c3:
5d:2d:18:a2:4b:52:74:02:0a:4b:e6:1c:0b:22:5f:bd:81:20:
b5:d5:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:01:15 2025 by rpki-client