Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d1fae880-b285-35f6-8ff7-129faa08b072.roa
File: d1fae880-b285-35f6-8ff7-129faa08b072.roa (raw, json)
Hash identifier: eyzSLdQnnUCVzBUI2H2t0mdWWK9l0iWVkjvKjMpYsW4=
Subject key identifier: 97:65:1A:CE:31:95:98:10:B2:18:65:29:69:A9:84:11:ED:94:61:E9
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584804DFBBC5C47CA16CC3E3CF00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d1fae880-b285-35f6-8ff7-129faa08b072.roa
Signing time: Wed 27 Nov 2024 14:00:52 +0000
ROA not before: Wed 27 Nov 2024 14:00:52 +0000
ROA not after: Tue 25 Feb 2025 14:00:52 +0000
asID: 0
IP address blocks: 206.72.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:04:df:bb:c5:c4:7c:a1:6c:c3:e3:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Nov 27 14:00:52 2024 GMT
Not After : Feb 25 14:00:52 2025 GMT
Subject: CN=5cf12157-2ee5-4516-8d2a-0feec7394c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:6d:ee:73:b5:87:1f:2f:61:f1:7a:ca:28:
96:36:04:f6:af:b9:c4:a0:93:82:a0:e7:75:b3:01:
8f:ec:f1:ef:92:cf:a2:ba:47:62:39:60:0e:b8:f5:
17:26:c0:30:b9:e6:ea:86:34:95:b4:67:14:13:d2:
20:9f:92:0e:82:92:f3:5c:22:f9:70:f2:54:46:cf:
ea:6f:f3:fa:84:5a:a4:c4:77:c9:cc:93:a0:35:dd:
e5:4e:f2:05:98:bb:57:af:e4:cf:92:b9:6e:92:85:
35:bc:5e:69:6a:25:47:6c:65:56:45:f9:f6:bb:95:
1a:7b:19:96:86:25:3e:8b:65:36:d6:0b:1e:91:83:
e2:3f:80:68:dc:55:fa:87:f2:45:69:8c:bc:af:84:
b1:5d:cc:fa:ac:34:6f:42:c6:d8:7d:7b:d1:bc:49:
c2:cc:62:45:ff:88:9f:55:6a:b9:92:fc:3e:b4:ff:
03:3f:90:40:7d:66:22:51:ac:64:eb:7b:5a:ae:41:
da:08:80:68:f0:75:3d:73:a5:cc:c8:54:72:da:57:
73:3e:dc:60:10:09:ef:65:9e:4a:d5:25:9a:8c:b8:
c6:36:42:cf:39:4d:ea:b4:37:7f:8d:a5:8f:8a:1d:
8b:20:68:0e:db:0d:c5:2b:2e:39:e3:9d:2d:fe:84:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:1A:CE:31:95:98:10:B2:18:65:29:69:A9:84:11:ED:94:61:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d1fae880-b285-35f6-8ff7-129faa08b072.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
206.72.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:03:a9:38:a2:df:4b:18:0b:19:a4:31:7d:f2:d0:01:f9:33:
20:85:19:3b:a7:06:05:7c:00:36:ca:6a:bc:7d:35:d7:c6:01:
fe:f8:7d:0e:52:ca:89:25:93:0c:0f:50:b3:94:a5:e7:c3:f3:
21:12:2f:5c:ce:f5:ca:4b:0b:c0:56:ac:3b:70:cd:d4:39:e9:
08:f0:79:42:3b:ec:73:3a:47:ef:c1:d5:f1:55:f2:bc:a9:9a:
cc:b9:9d:7f:da:69:96:9b:7f:ea:42:f0:83:5e:8c:89:5c:94:
06:4f:32:e9:bf:d9:e3:a3:a8:a0:d5:c6:46:b5:93:a6:da:bb:
80:fc:e2:3b:1e:8b:de:b6:62:6b:66:8d:15:8a:c9:cf:a4:11:
db:7b:8c:ef:64:a0:bd:e4:3d:27:db:5e:4e:fc:3f:5c:af:6a:
10:b7:b6:30:ba:c9:fb:b8:db:e5:18:1a:47:e6:58:12:2f:c5:
93:95:60:d1:ef:06:b7:56:f7:c8:00:dd:27:db:31:6e:90:41:
72:12:dd:50:38:18:ab:97:68:c2:de:8b:51:c9:2b:57:9b:fe:
a1:2b:af:79:62:8c:d3:f5:54:6e:c3:ff:71:87:c1:c8:6b:54:
e9:f3:28:d3:d1:23:a8:87:37:3f:fd:3d:c5:c0:d0:19:25:d9:
4a:50:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:14 2025 by rpki-client