Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/19e28212-f9cf-35b4-afe0-f612864b1660.roa
File: 19e28212-f9cf-35b4-afe0-f612864b1660.roa (raw, json)
Hash identifier: L3fJIktLLGr24KiDEJVXtCBBQXKk7r00Cz9kTtIb/IU=
Subject key identifier: 4E:1A:7A:D3:AA:D2:F7:81:3A:F4:C8:3E:5E:91:2E:01:AE:47:61:8A
Certificate issuer: /CN=92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2
Certificate serial: 010D0C9F43285848100A7E9C5DB9C5983F5F9E40
Authority key identifier: 11:F0:BB:48:66:EF:CD:56:DD:93:34:E2:22:56:D9:2D:D4:BF:F1:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/19e28212-f9cf-35b4-afe0-f612864b1660.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 0
IP address blocks: 206.80.239.0/24 maxlen: 24
206.83.15.0/24 maxlen: 24
206.130.15.0/24 maxlen: 24
2001:504:37::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7e:9c:5d:b9:c5:98:3f:5f:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=8ecde4e8-3fe2-414b-9704-9f8c0c89c31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:11:a6:f5:75:ab:b6:23:1e:fb:f5:e3:b3:74:
03:9b:d2:f9:7f:2b:56:e2:7f:83:f3:01:92:48:87:
9d:4c:18:d7:97:ec:88:0f:07:6a:7c:d8:41:ae:5c:
04:58:8a:17:45:a7:05:a5:b9:10:34:43:27:4c:df:
13:e0:55:90:98:9e:96:04:1a:88:51:71:53:db:aa:
ee:20:1c:36:84:5e:c4:74:32:d6:bd:f2:74:f2:1a:
d7:c3:2a:60:28:75:75:fd:b1:95:2e:95:db:c0:2b:
6c:dc:60:d9:07:74:5d:12:d5:fe:73:44:81:74:5f:
d2:d1:11:b6:b8:86:4b:c9:72:42:8d:c3:12:ff:48:
18:b5:08:7c:53:9a:54:f3:29:4f:4c:b5:f3:29:b7:
47:f3:1d:a7:5d:c2:93:95:b2:f5:50:f3:70:76:7b:
4c:13:4c:00:0c:ca:ae:52:10:5a:d0:a1:84:2a:0e:
31:07:8d:86:21:65:e3:a5:69:15:95:ad:1a:71:e4:
71:ab:35:e9:fc:cc:63:df:0f:d9:02:f6:68:c2:d4:
a1:31:e2:83:26:de:4c:b4:8c:86:2f:50:dc:27:5f:
78:c3:14:09:5a:0e:31:eb:9b:a9:f5:b0:4f:87:8b:
e7:00:df:db:ee:5f:b8:61:69:ec:bc:ed:ec:d9:aa:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1A:7A:D3:AA:D2:F7:81:3A:F4:C8:3E:5E:91:2E:01:AE:47:61:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/19e28212-f9cf-35b4-afe0-f612864b1660.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.crl
X509v3 Authority Key Identifier:
keyid:11:F0:BB:48:66:EF:CD:56:DD:93:34:E2:22:56:D9:2D:D4:BF:F1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/92c4f250-b68b-4bb5-86e4-c0fdf43f4cd2.cer
sbgp-ipAddrBlock: critical
IPv4:
206.80.239.0/24
206.83.15.0/24
206.130.15.0/24
IPv6:
2001:504:37::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:de:8f:01:a5:d1:a0:08:ee:4a:d1:c4:e5:79:fe:3f:88:40:
f0:e4:8a:47:7d:e0:cb:75:99:42:23:06:c9:9a:42:f5:c3:81:
8c:4a:ba:6f:e9:d6:31:e7:c8:48:fc:8b:be:79:4a:ba:68:9e:
6a:fb:b3:70:58:2c:ec:c0:b5:84:51:75:d5:07:64:27:6c:db:
d9:9f:93:5c:a3:6e:48:68:cd:4a:87:1d:3e:d0:3c:b7:72:f4:
98:d3:fe:e2:07:0f:ad:ff:fe:0e:9f:1d:90:b4:8b:38:bd:d3:
66:83:be:f5:85:49:f2:79:e2:e8:bc:27:fe:73:3f:4e:6c:7a:
ff:13:ed:f2:f9:7b:cc:ea:6a:8f:a8:5f:fa:0a:21:7a:dc:10:
7e:dc:d8:fc:b9:53:6b:82:6e:30:36:a8:b6:62:a7:55:60:5b:
d1:3b:54:95:63:90:b6:73:c3:cd:d0:d6:e5:d5:99:f6:73:a2:
2f:ae:95:39:6b:26:8d:11:6a:45:a7:17:d4:41:01:75:bd:c9:
7e:d4:8f:87:77:d9:5a:8b:71:fe:4f:25:d0:d3:e3:f7:45:9f:
8c:4f:23:0d:26:62:27:92:01:da:f7:d2:8a:b6:16:24:23:91:
37:68:99:14:44:ad:0e:38:b2:8d:dc:9d:ab:7a:a1:00:1f:c3:
dc:20:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:12 2025 by rpki-client