Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa
File: 152d19fc-a4dd-3003-8922-b7d5efb068f1.roa (raw, json)
Hash identifier: c+xSGG9RgTLIS74/J6uqAAsFmQsDlWvDLHBVcm8Kl7I=
Subject key identifier: 3C:52:DF:A5:C3:E1:6E:57:5D:3D:23:2B:FD:3D:76:5A:00:59:5B:EE
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F432858493C093A18ADDD828C75D4FB80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 21949
IP address blocks: 206.223.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:3a:18:ad:dd:82:8c:75:d4:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=9fbafd23-1d5e-42e6-b8db-c624910f841f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:2b:2e:9b:64:3f:a5:e7:00:36:40:7d:2c:
ab:c6:87:09:52:90:b9:de:84:e1:7d:e7:18:75:05:
a9:bd:56:36:bd:b9:2a:91:8b:a7:3f:d4:72:cc:d2:
93:56:cd:e3:36:9d:6c:c7:51:e4:80:9b:33:a3:c1:
3c:9c:79:75:7d:34:0d:30:d6:e9:de:f7:6f:85:5c:
cf:7c:38:9c:b3:6c:e2:94:3a:52:be:47:47:6e:f0:
44:d9:53:32:8f:c0:7b:d0:2e:45:89:e3:44:43:75:
85:ae:f9:ad:fe:55:a2:b3:0d:56:62:9d:2d:d8:8d:
dc:db:89:45:28:ab:ca:7d:93:62:e5:47:13:fd:51:
de:1b:46:26:1c:10:e9:8b:84:be:0c:78:15:aa:7d:
fa:58:c3:ef:2c:aa:62:4d:a9:7e:41:df:21:06:82:
ba:ca:7d:d4:d0:0a:94:41:1e:4f:a3:d9:ce:80:86:
f3:5f:19:ae:c4:3c:4f:0f:bb:9d:74:75:c2:72:39:
b1:37:f0:4d:42:63:f2:31:8e:ba:2b:ad:f9:ab:77:
79:3d:e6:90:e1:80:ee:ca:aa:3c:62:00:6a:cb:1a:
59:3c:c7:63:45:a0:21:39:c8:3a:77:d6:80:a9:67:
f7:8b:84:5f:3c:be:bf:22:38:58:d5:85:2f:92:a9:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:52:DF:A5:C3:E1:6E:57:5D:3D:23:2B:FD:3D:76:5A:00:59:5B:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
206.223.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d5:a4:19:2b:3b:cb:f6:f5:5c:c1:43:45:6a:e9:08:81:9d:
b9:c9:ec:46:c9:b8:00:68:60:60:b1:5c:95:4f:40:f2:62:56:
2e:a6:d0:42:2a:10:0c:b7:21:95:34:56:02:25:11:85:32:97:
64:ef:6e:61:fd:e5:ac:ca:17:ea:6e:fc:70:5a:6b:e5:0d:02:
3d:34:ea:37:d7:2d:98:5d:33:b0:d2:46:59:40:c1:4d:58:34:
44:cb:43:08:68:dc:ac:d4:10:4f:f6:eb:70:4a:e0:a6:3e:0f:
da:f0:8c:74:51:0a:8c:cd:a6:0f:30:f7:1c:b5:dc:e6:dd:69:
cc:8a:f4:3d:9b:dd:a8:6b:ce:21:2a:7f:f2:33:8a:2c:08:27:
37:81:cd:c0:98:7d:60:07:4d:16:65:00:59:d7:4f:76:07:70:
fd:46:2a:87:be:dc:87:26:4f:6a:14:e1:7c:48:83:cd:3a:64:
c3:88:8b:f0:db:4f:68:4c:af:fd:f4:07:6d:a6:f6:c7:87:e1:
91:76:58:a4:5c:50:63:29:b1:06:3c:30:28:1d:c3:8c:6e:67:
76:c4:69:dd:0f:41:39:df:dc:8c:f5:cc:2d:7e:b1:cf:3d:41:
44:ed:a0:17:16:35:a7:e7:b2:99:43:d2:68:8e:49:67:93:95:
2f:e7:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:14 2025 by rpki-client