Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7d6bd850-7cae-3d0e-a6fe-8e4114ebb12d.roa
File: 7d6bd850-7cae-3d0e-a6fe-8e4114ebb12d.roa (raw, json)
Hash identifier: 8pLcBBUfjvPGQWFxet4b81W5TQFhA5c6Za/vfAS+KGY=
Subject key identifier: 36:D2:A8:8A:A0:12:05:1D:51:F3:2E:D6:A8:DB:73:D6:02:81:F5:1E
Certificate issuer: /CN=7572dc10-0f90-44cf-ad9d-a07f934047c2
Certificate serial: 010D0C9F43285848100A7F0C918F0EA01B0A7200
Authority key identifier: C1:68:53:EB:8B:92:E4:61:7F:25:BA:97:53:4E:16:1C:86:6E:E8:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7d6bd850-7cae-3d0e-a6fe-8e4114ebb12d.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 55222
IP address blocks: 206.28.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7f:0c:91:8f:0e:a0:1b:0a:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7572dc10-0f90-44cf-ad9d-a07f934047c2
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=e1596ea5-60a0-4f1f-a30c-bf0206018b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:47:60:f6:86:0e:48:c6:cf:c3:e8:2c:a0:
c9:07:ee:b4:28:1c:70:f7:d8:77:46:6e:d7:b5:00:
6f:e5:42:8f:a4:10:69:28:85:7b:e4:42:c2:7c:ab:
3b:5e:b5:fd:65:42:02:1b:41:12:de:bd:75:81:07:
36:84:0a:b9:15:79:58:cb:cd:cb:55:4f:a2:a4:a3:
8a:b4:8b:4c:0b:7b:91:34:b0:08:5a:29:34:a4:91:
4e:8a:5f:d7:5d:19:b5:21:00:b7:29:51:c1:6a:f9:
f9:08:81:1a:6d:54:b4:cd:f7:6f:40:71:95:e9:ca:
46:90:25:00:b6:78:92:63:15:94:99:b3:6d:92:25:
61:84:77:c0:74:e8:73:9f:a1:ba:88:27:38:65:3c:
91:c0:b5:ca:73:de:2c:9b:f1:b6:58:f1:e0:e6:4d:
7c:a2:55:86:12:97:d6:5b:76:14:a7:f2:d3:ac:f6:
97:c0:f7:02:a5:ad:ed:19:4c:7c:5b:de:bc:88:b5:
0e:ea:00:2d:92:43:b0:62:6e:e5:98:ef:8d:10:56:
84:24:70:e2:de:71:ec:5e:69:b9:14:5e:ec:43:32:
27:31:92:25:25:dc:7a:f9:29:96:30:0f:e4:83:e9:
8a:7e:35:f0:e8:6a:5e:fc:c7:2c:62:5d:ec:c4:34:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D2:A8:8A:A0:12:05:1D:51:F3:2E:D6:A8:DB:73:D6:02:81:F5:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7d6bd850-7cae-3d0e-a6fe-8e4114ebb12d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2/7572dc10-0f90-44cf-ad9d-a07f934047c2.crl
X509v3 Authority Key Identifier:
keyid:C1:68:53:EB:8B:92:E4:61:7F:25:BA:97:53:4E:16:1C:86:6E:E8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7572dc10-0f90-44cf-ad9d-a07f934047c2.cer
sbgp-ipAddrBlock: critical
IPv4:
206.28.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:de:cc:27:7a:ae:da:60:46:8b:3f:e2:34:f6:e8:f9:41:59:
e8:79:73:38:e2:84:fd:c4:5d:bd:c1:5b:27:a1:f2:e0:54:d2:
b0:58:cd:25:f7:5a:58:fa:05:05:67:f1:a3:a1:17:92:f7:27:
d1:4f:93:c5:1e:c9:67:cc:66:63:6c:e4:f0:cf:3c:d4:77:cf:
bf:a4:c2:bf:69:23:8b:ca:11:76:f3:31:56:90:c2:71:d3:ff:
d0:7a:32:f9:3a:53:77:a5:bf:ed:69:b9:db:05:04:c3:4d:a6:
d7:dd:31:1a:20:43:0a:8b:0d:c9:60:f8:6f:fb:5a:22:fd:32:
a0:75:7c:97:17:f8:80:4a:62:14:1d:60:d6:24:3a:15:ad:ca:
dc:13:f5:c8:7a:b3:13:18:0d:b6:cf:e1:85:63:5e:53:ef:5e:
63:34:d3:34:a8:4a:b6:dc:04:8c:f8:99:13:3c:d6:25:57:a5:
41:88:dc:64:f4:c0:27:02:4b:75:57:06:18:1b:1f:3c:95:a9:
c6:bf:de:09:d3:bb:52:29:11:92:38:ec:af:d3:1c:95:c8:a3:
73:14:6f:b7:43:bc:32:65:56:3a:5b:0b:9d:f3:68:dd:7a:a6:
cc:f1:d1:3d:01:73:b4:5e:6d:69:f3:97:09:23:26:15:fe:8e:
44:4a:3f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:25 2025 by rpki-client