Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a20dbb5e-4a93-35ea-9168-80bc471cf901.roa
File: a20dbb5e-4a93-35ea-9168-80bc471cf901.roa (raw, json)
Hash identifier: VXvJpt+nTki4bHK7P3Vg3DCWeSh0XGv0XVf54FBDwi4=
Subject key identifier: 50:1C:95:D6:FE:E1:21:A8:1F:B1:AC:41:BB:80:E5:0F:78:0E:39:F4
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848159FED45B37E93A156743300
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a20dbb5e-4a93-35ea-9168-80bc471cf901.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 3491
IP address blocks: 206.161.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ed:45:b3:7e:93:a1:56:74:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=421274de-45f2-4ca2-96fb-728cf195e490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:31:e5:1d:53:47:10:3f:d8:48:15:cb:c6:
ab:37:67:a5:d6:a9:ab:e8:ae:20:a8:82:83:fa:c4:
ba:4a:af:77:51:a4:26:5e:74:de:80:3a:a5:10:a6:
17:fe:e1:57:c9:b1:f1:6c:e3:a2:a5:40:88:ff:09:
eb:25:94:b6:68:72:3b:7f:53:e5:94:89:56:69:6f:
7b:2c:a3:c8:02:bb:97:3b:1f:2c:51:d3:c6:56:7a:
25:e6:89:aa:a7:dc:10:e9:f0:ea:b1:d2:72:72:8c:
b3:c8:42:97:ce:f3:0e:4d:03:05:bf:f0:fe:f5:13:
40:6d:6f:22:d2:74:e9:5d:b2:7c:45:8f:3d:d7:ff:
b4:81:22:47:9b:4f:30:48:63:ba:09:a1:c3:d6:0d:
74:ea:cc:44:48:8e:65:0e:0c:65:b9:07:d6:98:a5:
c2:fa:9b:0d:ba:67:d5:ab:01:0e:ee:86:f9:27:1a:
b4:4c:55:2f:c1:c5:03:8b:d1:d8:d9:58:22:12:29:
6b:02:9f:02:5e:5c:f8:24:61:50:20:46:7f:6d:7f:
99:d9:4b:2d:8d:79:76:5e:d1:ff:4c:02:27:0b:c9:
69:e4:17:fc:cc:91:c7:2e:be:3e:9d:c1:8c:33:f6:
d1:0c:f6:89:5b:0d:6e:e1:ff:cb:ff:ac:98:c4:90:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:95:D6:FE:E1:21:A8:1F:B1:AC:41:BB:80:E5:0F:78:0E:39:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a20dbb5e-4a93-35ea-9168-80bc471cf901.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
206.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:4f:1e:8b:15:81:b9:91:b3:aa:80:d9:42:83:77:ca:08:67:
b5:be:04:d7:af:6f:49:f3:97:32:09:4e:ae:76:c8:ef:30:1b:
49:70:60:4d:f9:30:38:2b:8e:04:d4:bc:87:3a:22:c2:49:91:
ec:1f:4f:de:ca:21:47:83:8e:ee:61:77:7d:99:f3:95:5c:2f:
2c:5b:18:52:3e:22:cf:88:cd:c8:6f:94:a3:a9:e3:0c:b6:8c:
32:61:ac:9f:92:c6:33:0f:2d:ab:b2:97:f8:12:47:44:51:3d:
dc:fa:b1:be:17:a5:71:74:2e:bc:2f:85:36:b6:ed:49:09:c9:
9f:b8:01:3b:6c:1e:0a:6f:91:52:03:bb:9e:26:e9:55:38:3a:
6f:d7:34:e0:f0:78:45:ab:85:cb:a5:fd:2e:01:ff:5c:73:06:
23:63:c1:54:22:78:c3:16:c7:ba:56:bd:91:65:c2:17:52:89:
71:52:10:85:a1:39:1b:14:da:f3:4e:5d:84:be:c0:ef:7c:19:
1e:9b:18:4a:1e:af:cd:7a:85:96:c8:98:62:5e:14:fc:42:23:
29:00:59:64:d7:9a:7a:a7:09:11:4a:ec:ec:4f:1b:38:fe:cc:
c5:c2:ed:a6:d7:de:70:3e:5e:66:bc:4f:82:f0:f1:0e:b4:e8:
e2:d7:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:13 2025 by rpki-client