Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa
File: c90933a7-20d1-3f12-9f48-2849455b9cb8.roa (raw, json)
Hash identifier: KNOjckDQvx6UZwqWGaCrU2hkmLDZTwe4ixXmchgKGz8=
Subject key identifier: B0:00:32:53:FD:22:59:E7:71:71:F3:80:ED:3B:55:43:FA:35:BC:32
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F43285847FB1A331F2EA91018E88D39C0
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 5645
IP address blocks: 206.248.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:33:1f:2e:a9:10:18:e8:8d:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=a0ffbb7d-034f-4ff4-a8f4-95ab1bc57a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:ee:42:0a:40:b1:29:ae:10:7f:ea:0d:30:
7d:12:2c:0c:5e:dd:c6:07:a4:4f:8b:28:b0:25:b3:
38:50:85:5d:68:e2:47:55:6f:6e:0d:7a:3b:4e:11:
bb:c4:17:48:0d:46:c7:55:7b:43:07:72:fc:16:4f:
cb:e3:74:91:85:ad:e9:84:67:10:1e:30:01:a1:0b:
3e:d7:c2:27:9e:d0:f2:5e:05:b5:44:f9:03:50:a9:
08:2b:98:c6:de:7a:93:bc:9b:37:e9:04:cb:bb:ff:
b9:fa:e4:e6:28:a9:83:7f:ef:c7:c4:a5:76:f9:81:
01:79:a7:88:98:51:4f:74:7c:25:9b:c8:6a:ae:c8:
00:71:17:65:f4:48:9f:75:4f:8c:b4:a2:c5:89:2c:
40:03:e1:cf:fb:01:20:1d:15:a3:99:e9:f2:e0:82:
e3:bb:ce:d9:67:aa:49:fe:e5:f3:74:07:c3:c9:7b:
2f:07:63:55:c7:6b:8d:07:11:e2:a4:63:8d:4a:8a:
de:f5:39:f5:e6:8d:3f:7a:60:17:73:7b:8e:2f:5c:
94:11:d4:3a:79:d9:e1:7f:d1:42:1f:85:70:58:e5:
12:49:5a:59:09:59:11:1a:86:0f:8f:04:4b:bc:fd:
4f:1c:c2:fa:39:9e:45:f6:7c:77:63:9a:47:96:d3:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:00:32:53:FD:22:59:E7:71:71:F3:80:ED:3B:55:43:FA:35:BC:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/c90933a7-20d1-3f12-9f48-2849455b9cb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
206.248.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:94:ac:73:55:66:44:53:7c:21:42:3a:3d:ef:a6:aa:c7:08:
52:79:2e:3a:f1:07:bb:ac:10:67:fb:97:e6:42:dd:cd:c0:ca:
fa:10:6d:0d:69:50:af:6e:f6:ca:c2:6c:17:82:48:7d:cd:2d:
73:e1:66:e6:da:e2:e2:46:01:84:84:06:cc:c5:97:5a:21:d9:
e2:35:6a:89:df:6c:d3:d2:35:9f:cc:fa:9c:71:77:83:cd:43:
a9:be:a7:5a:96:c6:58:7e:ca:2f:f3:37:e6:10:22:8b:09:31:
3f:1e:d6:cf:9b:52:ea:42:e7:33:94:af:e2:22:5d:bb:6f:49:
b8:bd:96:ea:12:5e:8f:8b:a5:6a:09:65:ac:d8:e1:a7:17:b8:
d7:e4:3c:32:16:1f:85:69:f9:8c:bb:cf:b2:17:b0:f9:54:d8:
b0:fd:5e:1a:e8:db:3a:fb:0c:2a:f8:6f:a0:12:70:e8:b2:ab:
1e:ba:40:ff:8d:4b:e4:cb:90:80:7a:f9:16:a9:b2:06:45:2e:
78:cf:23:4d:10:d8:f1:87:7b:07:1f:a0:4e:1d:9b:f7:b3:2e:
f9:b3:61:96:6d:1d:81:b6:b0:f1:80:fd:b6:c0:fd:a2:e5:5b:
37:b0:ac:66:21:08:54:5c:4e:a5:af:73:3c:ae:84:48:f5:d9:
0d:b8:0e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:11:11 2025 by rpki-client