Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/d40b4f43-5c6f-35b6-a1e8-8427e70f6fd6.roa
File: d40b4f43-5c6f-35b6-a1e8-8427e70f6fd6.roa (raw, json)
Hash identifier: uXuNOOth6UjtYPap2AsWhLNe9RNJAb9YIJWoaOA1vhI=
Subject key identifier: 2F:48:E1:DE:96:3E:4B:D4:85:70:23:E1:8F:7A:D1:3B:71:08:81:60
Certificate issuer: /CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
Certificate serial: 010D0C9F432858489340A4225DAAE41F8DF50300
Authority key identifier: ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/d40b4f43-5c6f-35b6-a1e8-8427e70f6fd6.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 16509
IP address blocks: 206.220.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a4:22:5d:aa:e4:1f:8d:f5:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=2f27476f-7d79-4604-8b47-dfbdc564b124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:30:bf:9f:49:60:66:05:35:e6:1f:ee:50:47:
d8:6f:1b:a8:91:e1:4d:2f:49:6c:40:82:67:06:e7:
c7:e5:4a:4e:f7:f0:0c:a0:aa:c9:30:05:20:38:64:
95:2c:e6:8b:ce:b2:46:18:c0:68:6d:fc:1d:cd:eb:
90:1f:48:39:29:20:28:df:5d:33:75:1a:e2:88:80:
52:b7:21:26:c4:86:a3:90:82:d8:62:0f:ce:b2:52:
0a:6b:1c:69:86:57:50:3a:9b:fb:fc:aa:94:99:9b:
01:4e:dd:33:53:16:03:4a:bb:d1:35:bb:22:8a:44:
84:bb:37:e3:50:06:76:d4:b5:f0:37:a5:d3:ef:67:
f2:67:1d:2b:eb:90:ef:71:03:3a:d6:e2:28:96:f8:
ec:57:ee:6a:05:0d:d4:2b:80:6f:11:b1:70:67:33:
35:1f:6b:63:ab:50:bd:7b:08:d9:f5:24:7a:2a:6c:
53:ef:b5:91:0b:34:2b:84:e7:3b:54:6b:86:b6:3d:
d3:79:0f:c3:1b:7f:ad:ee:c7:2a:2f:3a:80:60:55:
03:90:d1:ba:5a:f5:f7:28:16:96:4a:c2:cc:69:17:
26:63:72:0d:f8:dc:a0:ef:3e:68:ac:99:ee:0b:62:
71:26:41:b1:f9:55:9d:dd:3d:d9:09:09:d6:a2:16:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:48:E1:DE:96:3E:4B:D4:85:70:23:E1:8F:7A:D1:3B:71:08:81:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/d40b4f43-5c6f-35b6-a1e8-8427e70f6fd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl
X509v3 Authority Key Identifier:
keyid:ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
sbgp-ipAddrBlock: critical
IPv4:
206.220.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:ad:f7:47:59:25:20:d0:a5:08:69:3d:2d:62:4d:e6:ad:5d:
3c:3a:cd:54:6b:91:26:15:f9:26:ab:87:cc:f2:27:57:a0:8a:
0d:78:9c:a0:4c:7c:fd:91:2a:24:00:9f:08:0c:e4:50:ca:fb:
1c:5c:7f:76:60:51:8f:40:0a:f3:2b:a7:00:35:7d:a1:8f:49:
7c:77:97:97:b2:d2:90:04:19:23:42:78:bc:10:b5:3d:09:08:
4b:c4:f5:91:eb:07:fa:bd:e7:a0:f4:c2:e4:ee:ea:30:9a:72:
65:31:9b:6e:c6:3c:6d:9b:4c:b5:a5:8b:81:fd:f6:41:ba:a7:
9b:64:a2:42:6e:1d:00:d4:68:64:64:5d:22:8f:8a:5d:8a:2e:
fe:ff:53:aa:76:01:3c:bd:96:b6:af:dd:a7:eb:61:bc:51:2e:
e8:a8:79:57:1a:7e:b1:f7:d7:27:46:5a:85:61:a5:09:2c:fa:
39:e9:ff:74:96:c8:0a:53:6b:e5:6a:0e:c1:d3:a7:93:b6:e2:
3f:a9:3b:05:96:d3:70:b6:a8:a9:55:dd:e4:1b:69:25:39:2b:
34:91:76:9c:72:75:30:cb:7c:cb:d3:5a:cc:c4:e3:0a:4b:34:
bb:60:38:ed:4c:29:65:8e:45:43:2e:24:66:f5:02:da:d8:a5:
cb:1f:b1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:09 2025 by rpki-client