Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa
File: f03a9443-1468-3e4e-9fac-80bb32418d00.roa (raw, json)
Hash identifier: uim/cu4aoV2qNxwhFt6q2NIMpYbtzO6PGiOhEjerS3w=
Subject key identifier: F1:47:DB:CE:1B:62:74:3A:2E:02:FA:94:A9:89:26:38:B5:2F:6E:6C
Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Certificate serial: 010D0C9F432858494B641AAD1FF873F651BE8E40
Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 906
IP address blocks: 206.168.92.0/24 maxlen: 24
2602:fb82::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1a:ad:1f:f8:73:f6:51:be:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=ae3a8a81-6c31-4053-a3f3-7f6e131bf921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:44:38:7e:f8:e9:7d:4d:36:ed:89:80:a3:
87:98:2b:ed:e1:34:da:4d:8b:24:2d:ca:d7:69:df:
79:cc:c0:b5:82:03:fc:cc:ba:cd:8b:cc:0f:ab:cf:
4b:df:c7:87:f5:df:5c:58:1b:65:76:84:44:d1:9c:
73:91:d8:a5:09:84:3b:e0:ff:f5:3f:b3:b2:24:49:
ce:ab:18:87:94:b5:0b:10:c2:75:7e:8e:27:b0:36:
17:fb:3f:06:7c:cf:50:9e:d7:fc:28:80:08:a9:ea:
ce:9c:e4:02:8c:e7:b9:77:84:14:55:74:ab:40:c9:
e9:47:d4:fd:4c:c5:f5:8e:b3:7d:d6:d8:b0:51:2a:
c7:15:4e:17:82:a4:46:4b:da:df:0c:57:89:f1:12:
d6:81:ff:7e:80:01:6c:4f:5e:04:74:3f:a5:31:d6:
99:f5:e6:06:a2:49:94:95:16:d3:35:71:9b:7b:5a:
d0:16:2b:fd:1a:9f:3f:b2:16:43:72:23:0a:b1:46:
1c:2e:d6:ba:31:33:74:d1:6a:1f:5a:96:a8:67:b4:
ed:3a:ec:73:91:e0:ef:8c:0d:55:92:78:88:b3:d7:
8c:9b:62:8c:14:5b:f4:8d:15:4a:ca:3f:00:7c:a4:
f2:ce:6a:e1:ca:77:1f:7e:a2:34:45:b9:7d:5d:ce:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:DB:CE:1B:62:74:3A:2E:02:FA:94:A9:89:26:38:B5:2F:6E:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl
X509v3 Authority Key Identifier:
keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.92.0/24
IPv6:
2602:fb82::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:33:d5:14:54:ba:82:40:7f:ec:70:c5:d8:72:3f:1e:3e:82:
c7:d0:c9:a0:92:d5:4e:70:8b:89:1c:22:44:47:89:b9:73:7d:
9e:ba:03:88:8b:4d:53:2b:57:68:da:fe:a2:23:45:50:ca:c7:
90:6e:45:a4:61:b5:c5:bc:28:4f:7c:d3:a0:31:77:11:45:05:
1a:bd:c3:b2:65:71:84:b4:fc:79:10:6b:76:2b:9f:29:a8:92:
3c:00:bb:6e:a8:05:1a:f4:b4:ff:26:3e:bb:ba:b7:74:1e:6c:
2c:eb:20:04:f1:fd:f5:30:66:e4:1e:94:fb:00:63:8d:71:a2:
ec:3e:5f:cb:c3:af:5c:20:2d:c6:8d:06:b4:2b:0b:6f:3a:86:
56:9f:f1:67:28:fe:c4:fd:e3:43:57:00:79:3b:9d:a1:ac:c9:
90:3a:d8:ad:f8:48:bd:6c:89:f3:6f:b5:9b:a0:c9:b2:d6:a4:
9c:02:cb:03:01:f5:4c:d0:d8:56:98:fd:9f:bf:2f:21:f4:7e:
9d:c9:44:06:9d:eb:76:07:8f:81:32:81:38:8b:85:d7:d8:f2:
0e:29:56:64:05:a0:e0:3d:fa:2f:fc:00:2c:f5:db:0b:c2:a1:
aa:30:f9:16:37:43:0c:df:99:e1:cd:73:d2:c1:06:55:8a:b3:
c2:bb:4e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:06 2025 by rpki-client