Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
File: 2f8b5844-754a-3987-8ab2-f733b85a8928.roa (raw, json)
Hash identifier: mIXrJd2MJqoW1aSXhCWHQbYwVLXCcIVDLfqR28ZfY9A=
Subject key identifier: 3F:0A:47:62:B6:6F:EA:FE:DD:C1:4A:2B:5F:96:AD:5C:2A:47:FB:57
Certificate issuer: /CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93
Certificate serial: 010D0C9F43285848100A88763EDEC592DE5B0F00
Authority key identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 6491
IP address blocks: 204.89.198.0/24 maxlen: 24
206.197.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:88:76:3e:de:c5:92:de:5b:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=f356aa9f-52b7-4629-acd2-3b6b933ef461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:8f:ab:b2:d3:16:d2:66:60:91:5e:5d:13:
17:a5:7a:bf:b2:12:e6:ee:91:47:1c:46:d8:d6:89:
3b:5e:b6:8d:08:dd:8b:c0:ee:6d:52:54:56:a6:23:
89:8c:9f:3d:52:60:d2:5c:7a:1a:12:f2:22:5b:1a:
54:95:ab:61:75:e4:6c:02:87:ff:60:36:b4:cf:0d:
0c:4c:59:af:a1:e7:fa:84:1a:ee:3d:39:18:7c:86:
34:77:ed:e6:d0:3c:6c:3d:43:75:c1:e2:1b:06:02:
2e:44:5f:bd:7f:27:9f:bf:c6:41:9a:d5:10:75:01:
9e:54:69:0f:ca:f0:d9:65:5d:32:7c:e8:a7:28:e5:
5a:b1:d0:7a:e2:3c:86:5c:f0:34:a9:9d:cd:a3:b5:
a9:75:d4:d2:c2:74:27:1e:a3:e6:fb:b5:6b:72:e9:
2d:af:3f:f3:ae:fb:8c:44:98:b0:d8:ca:fb:c2:a9:
d4:20:8e:4d:fe:c0:0c:70:43:41:1e:85:fa:36:ca:
3e:a4:20:6a:44:ba:21:ac:13:00:78:40:a4:37:b1:
17:b3:42:75:27:e5:e3:f8:e5:ac:28:a7:5f:f8:51:
54:02:c9:a9:72:31:4d:c0:c5:e0:99:d1:ad:85:14:
18:a6:59:ea:1f:56:b0:62:5f:3c:14:6b:8d:b7:67:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0A:47:62:B6:6F:EA:FE:DD:C1:4A:2B:5F:96:AD:5C:2A:47:FB:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.crl
X509v3 Authority Key Identifier:
keyid:1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer
sbgp-ipAddrBlock: critical
IPv4:
204.89.198.0/24
206.197.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:21:c1:3e:0a:42:c2:b2:a5:9a:1d:f8:2c:96:4a:6b:15:22:
94:82:26:bd:3b:39:8b:a9:09:d8:2c:b7:75:83:96:79:ae:ef:
77:83:c3:d4:c8:32:ea:5f:ef:92:b0:4b:ff:0f:92:c9:88:c1:
c5:82:92:bd:43:80:2a:b6:8a:0b:47:32:95:e0:81:34:9a:6b:
99:a3:6e:b4:ef:ec:16:e9:0a:73:e7:f5:6d:86:0b:4f:fc:1c:
bb:da:ea:71:94:36:ee:af:01:c1:09:83:6a:9e:6c:80:f8:67:
09:16:69:b1:c5:8e:35:1e:43:f7:fc:13:cc:a4:a4:6a:0e:91:
ea:43:41:cd:fb:e3:c9:f6:fd:37:b0:f1:a9:c6:f6:08:75:d9:
71:c3:fd:13:5e:23:c3:86:e5:19:f4:c1:10:e0:22:fd:44:7e:
85:dd:77:b4:97:80:d0:a2:31:18:f4:a3:e9:54:73:0e:f6:4d:
f3:e2:87:c8:f1:a2:e1:e8:ff:40:6f:49:56:11:57:f2:9e:e4:
f6:bf:33:3a:c9:df:bf:27:00:ec:61:0b:91:cd:a5:83:6a:0b:
d8:ec:0a:41:27:0c:30:3f:20:24:9c:58:60:f8:cf:f8:72:31:
02:f9:97:c3:77:70:ae:24:ad:2a:fd:e8:03:b5:87:81:be:97:
ed:f2:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:37:27 2025 by rpki-client