Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa
File: 20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa (raw, json)
Hash identifier: Wq5Z8rgb9xG7ksZCrG5rJ1nAQglgZQStbATXk2H5ozo=
Subject key identifier: B4:4D:DF:A6:79:69:18:D6:62:82:C1:86:99:F1:8D:64:40:F4:16:65
Certificate issuer: /CN=4215bba6-51b0-41f8-9185-dda3367a8df5
Certificate serial: 010D0C9F4328584867FAEA8A2239ED8ABA1AAE80
Authority key identifier: 24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 11071
IP address blocks: 206.81.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:ea:8a:22:39:ed:8a:ba:1a:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4215bba6-51b0-41f8-9185-dda3367a8df5
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=d422d68b-e5eb-4e04-a4c3-2730fb6eb1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:2b:d3:a2:ff:f0:c2:cc:67:78:67:5c:d9:
73:c9:fb:d7:a9:63:95:25:30:9c:57:ad:40:8a:c9:
c9:c0:dc:2d:dc:3e:13:39:04:17:88:20:2b:19:62:
9f:b3:d2:9a:1e:78:50:40:55:4b:32:58:fc:a3:f6:
7b:ff:a6:e4:56:69:d8:d3:fd:ae:64:05:b4:dd:70:
54:fe:98:d5:d9:0c:00:cc:18:11:bd:59:1c:16:0d:
05:fc:df:63:0f:e4:06:d4:0f:3b:17:7c:57:2a:d8:
43:e5:59:3f:14:ad:14:4f:cf:bf:6e:42:69:56:f6:
18:01:8c:39:d1:fd:7b:95:a6:40:5d:ac:28:61:83:
85:1b:68:e9:53:59:59:69:70:b2:d8:97:48:3e:fb:
46:9d:01:95:78:87:72:f2:1b:9c:69:88:a8:f9:a3:
0f:34:cb:45:51:17:ac:6d:13:a2:7c:eb:1c:5b:6b:
d9:20:d7:89:78:d8:4c:0e:01:9a:43:19:f4:2a:79:
9a:05:a5:a7:7d:dd:80:ce:2f:6a:72:b3:dd:72:8f:
e9:30:10:47:c3:72:72:33:2a:58:0d:0e:3a:3f:a2:
24:4a:3a:93:48:06:8c:92:f8:06:0e:93:31:f9:dc:
2c:3a:8d:62:e7:d2:fd:06:aa:19:d7:60:b2:16:c0:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:DF:A6:79:69:18:D6:62:82:C1:86:99:F1:8D:64:40:F4:16:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/20a6cdfc-5c18-3cd8-b147-07a75c9f86bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5/4215bba6-51b0-41f8-9185-dda3367a8df5.crl
X509v3 Authority Key Identifier:
keyid:24:C8:C3:14:4D:D8:66:CE:23:E6:39:48:AB:CA:C4:45:62:CF:31:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4215bba6-51b0-41f8-9185-dda3367a8df5.cer
sbgp-ipAddrBlock: critical
IPv4:
206.81.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:c2:f1:38:7c:9d:dd:6a:f4:5c:b2:01:e0:0e:16:f2:71:0c:
99:8b:b5:61:ce:b9:db:ca:a0:d8:33:d4:68:00:f2:10:a9:28:
41:38:e2:e0:34:72:f6:32:2c:bd:39:0f:d2:7a:e4:a7:08:cd:
9e:d1:a3:15:2a:ad:d8:4b:a4:88:74:bc:12:9a:64:6b:54:48:
ab:b8:87:54:bf:08:dd:13:be:d8:c1:51:a5:b7:64:cc:e2:27:
f4:9c:0d:1f:e3:da:4d:da:bd:90:ca:89:8d:25:b5:dd:88:a8:
dc:5f:b1:1c:36:01:88:6c:69:e9:85:55:fd:a6:fc:4b:d5:b2:
6e:e8:ba:1a:17:ce:84:39:68:69:82:ac:fa:ce:90:81:75:53:
d5:99:80:62:7b:57:1b:43:87:eb:aa:32:56:d3:c8:9f:ed:b8:
54:8a:b5:69:1b:cf:60:a1:04:08:b2:23:e7:c8:f0:a8:a9:03:
8e:8d:5d:32:42:c6:ed:46:81:ef:fc:fd:4a:93:4c:56:da:9b:
ce:e3:d2:0b:bc:af:7c:a3:32:0a:8f:7d:6c:e9:ba:05:4d:e8:
d9:ad:64:32:b1:26:ad:06:2e:bb:c7:be:0d:d0:0b:a8:0e:44:
3c:24:c8:4c:df:dd:dd:1f:30:54:12:35:6f:9d:8c:ee:f5:42:
7e:13:d3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:31:59 2025 by rpki-client