Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa
File: 4674c542-a229-3daa-8f2c-4c5ff78cf657.roa (raw, json)
Hash identifier: MiLY0TtJRcznO7bUQ1txJJ1JxrnovuF6RXY+SeIvZC0=
Subject key identifier: 19:E1:1E:D4:C5:7D:5B:D9:43:51:B8:D9:80:DF:F8:5D:B2:EE:66:C5
Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial: 010D0C9F4328584902EBFD31C4D8FC1D0D3C3280
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 1273
IP address blocks: 206.128.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:eb:fd:31:c4:d8:fc:1d:0d:3c:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=2be6fb41-a170-4dd3-ae51-661d74bec6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:b9:52:1e:0a:cb:e2:04:d3:42:b1:65:35:
b2:74:3a:13:b1:e7:7d:62:4b:c6:46:00:37:72:c8:
ab:19:75:1a:8e:c8:ca:6a:1e:62:cd:97:9d:47:81:
6a:a0:8f:83:f5:f2:e3:9e:e2:0b:7e:e5:14:a7:ba:
4a:0f:44:a2:37:4d:0a:07:eb:1e:8c:fe:31:3d:6f:
57:1b:f4:5b:b2:d5:cc:83:c3:e5:f2:98:69:c4:9f:
41:dc:61:a7:f5:04:dc:44:9b:52:bb:2d:ce:07:da:
46:bf:0f:24:1a:f1:e2:cd:a6:cc:71:47:70:d8:c1:
ca:81:c0:98:01:07:75:95:f8:e0:7c:be:0f:f6:29:
26:c9:9b:45:26:eb:f0:69:ac:9a:7d:87:e2:6a:09:
f3:dd:e2:13:1d:25:e7:e2:9b:c0:46:89:d2:ad:f9:
ee:d1:85:e6:11:8f:6a:de:4f:37:eb:cf:ba:92:00:
63:1d:db:3f:eb:cd:ae:c1:52:ba:1f:75:21:61:9f:
1c:f9:0c:d6:38:5b:0a:88:17:43:b5:bd:79:bd:c9:
d2:1b:16:6b:67:ad:6a:a9:ba:63:bd:14:e8:30:b1:
7f:6a:5c:26:f8:48:b1:91:a3:07:25:be:e9:42:f8:
cf:62:c7:62:d9:63:d3:0a:d8:7f:2f:2f:db:af:86:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E1:1E:D4:C5:7D:5B:D9:43:51:B8:D9:80:DF:F8:5D:B2:EE:66:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/4674c542-a229-3daa-8f2c-4c5ff78cf657.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
X509v3 Authority Key Identifier:
keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
sbgp-ipAddrBlock: critical
IPv4:
206.128.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:26:16:1b:0e:c2:a9:b8:08:8b:fa:50:59:2a:9f:f1:cd:df:
e5:ab:b6:bd:27:9a:26:2f:0b:49:e7:86:aa:79:d2:95:47:97:
76:6d:d5:16:67:de:fa:46:05:18:81:aa:99:f1:eb:94:9c:12:
6b:c5:c9:be:34:8e:38:41:6a:4b:6c:b5:8d:63:3a:ad:fe:85:
65:ec:bf:c2:07:2c:90:58:02:7f:7d:a5:9c:83:af:09:cc:6c:
cf:3a:97:9c:fa:a7:a5:1b:ae:d9:9f:40:0b:c6:5c:92:2e:f5:
bf:af:ea:4d:78:e5:0b:2b:44:d6:c6:4c:56:fd:74:00:75:68:
9f:f2:1b:22:5f:c0:89:17:3e:f8:01:7c:0a:dd:5e:56:71:56:
29:11:b2:9d:4b:3f:75:5c:d0:fc:c3:c5:85:b8:13:ca:03:3f:
8c:98:7b:80:50:1f:6d:64:11:05:9d:02:41:54:12:a0:7c:b4:
24:86:36:5f:39:c2:3f:c1:f9:f1:e2:42:47:f6:ea:ec:d4:47:
29:ae:96:2e:7e:e6:b3:eb:ae:1a:c6:c3:1f:56:de:d7:ba:ac:
14:0a:6f:ba:af:51:49:4e:39:77:d8:7c:00:8b:d4:5f:35:e7:
9b:d1:6f:13:d6:77:d4:09:a0:0a:41:ab:ff:ad:88:1e:f4:23:
53:c7:79:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:20 2025 by rpki-client