Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d581617d-68e9-3f35-b308-d4522b50a633.roa
File: d581617d-68e9-3f35-b308-d4522b50a633.roa (raw, json)
Hash identifier: llTw8a6K2tWm2rF5EOdA5sn8Ef4PFtU6yff8GN4oEcE=
Subject key identifier: EE:A3:E5:61:E5:9A:94:8E:10:CE:5F:A3:57:B6:6E:0E:15:D1:D9:CC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848100A90A5F78F5DFB8469E5F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d581617d-68e9-3f35-b308-d4522b50a633.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 0
IP address blocks: 206.66.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:90:a5:f7:8f:5d:fb:84:69:e5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=2ccad5b9-7a6f-4500-8a35-8ce318569697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:86:71:8e:85:02:e4:01:61:cc:c4:69:7e:
ab:4f:2f:91:4c:d0:20:de:d0:60:a0:ba:98:be:ea:
06:b9:16:8b:8d:30:3e:d1:6c:fc:d0:bb:3b:21:5b:
c0:3b:f8:1b:92:ef:58:8c:83:d2:37:5d:a7:04:fd:
4a:09:c1:75:ba:48:07:50:43:b6:ec:ca:91:d2:4f:
26:c7:6b:f2:54:a2:95:b6:63:6d:1a:e0:d0:81:29:
5b:9f:18:11:09:3d:ee:ff:0a:59:05:c8:52:c4:5a:
57:db:ba:83:e9:e2:1f:47:b8:1c:19:4d:4f:e7:61:
80:28:d7:69:40:13:20:93:c7:bc:75:49:d3:eb:bc:
e1:6d:c0:3b:60:35:d9:ca:5a:40:3f:a7:7f:8a:a4:
d0:aa:68:c1:3e:ee:0b:56:00:a0:b1:6f:cf:5a:97:
1c:d7:f2:72:2d:ec:67:aa:50:03:c6:6d:e5:95:b1:
d8:94:d7:59:ef:87:3f:e2:96:42:b0:ae:06:59:29:
a0:75:91:9f:b3:8a:82:54:04:ed:b7:0c:e5:a5:1e:
00:f2:df:25:06:61:15:f5:a9:d7:b8:23:9b:27:42:
65:03:b0:07:5e:12:62:82:69:29:ec:c2:3a:96:59:
ed:a7:2a:fd:dc:24:f1:69:ec:a0:3d:01:53:64:bd:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:E5:61:E5:9A:94:8E:10:CE:5F:A3:57:B6:6E:0E:15:D1:D9:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d581617d-68e9-3f35-b308-d4522b50a633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
206.66.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:ca:95:65:c3:35:71:89:e8:e6:e4:2b:38:61:62:c5:4c:7a:
94:2b:8e:47:33:a5:8e:a8:82:41:61:45:b4:a4:cb:41:7d:89:
4d:dc:52:65:e9:85:29:24:69:46:0c:93:d8:16:fe:92:07:04:
53:aa:5b:ae:59:36:c9:52:2e:0e:f2:c1:70:9f:10:2b:fc:14:
ab:e2:09:63:cf:8b:b9:db:28:fc:26:f2:e9:40:16:39:43:71:
db:e9:6d:3c:8f:b8:53:e2:18:96:9c:d0:3e:3d:c9:72:32:08:
7b:82:5b:0f:72:36:53:3c:46:a0:d7:fb:9d:24:01:0f:ff:39:
bc:f2:40:ee:d6:c4:b1:7b:17:30:fb:c2:96:99:6a:3e:d2:18:
0b:6b:14:5c:c9:34:32:3f:47:33:be:1e:de:14:1a:5d:4c:92:
05:ea:79:18:59:f3:5b:2e:ce:1a:87:5c:ba:e8:7b:05:3d:1f:
26:22:a5:9a:3d:04:c9:07:dd:2d:fe:b6:18:0f:c6:a9:17:e2:
29:77:63:92:88:07:e0:d7:ac:96:56:ef:27:51:77:2f:bb:e4:
95:8e:b0:a6:95:f4:66:7e:a1:a8:66:fa:a8:85:a9:15:ca:0b:
94:b3:1e:aa:a7:71:e0:c8:a6:91:32:b7:85:6b:e8:ae:e0:6c:
86:57:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:22 2025 by rpki-client