Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa
File: 5e09b4be-660c-32d7-905a-93080ed41e33.roa (raw, json)
Hash identifier: 6iSpL/XlG5Y5A+eBjRl2+aNYHYXr/90Gzpmocq9sRhE=
Subject key identifier: 4A:75:5D:4B:36:87:42:71:AA:2F:AE:A7:B4:8D:22:47:02:19:3E:6B
Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial: 010D0C9F4328584902EC074968E22DD8431B1140
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 1273
IP address blocks: 206.128.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:07:49:68:e2:2d:d8:43:1b:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=6b949cd8-d39b-40d4-bf1c-b77c0d735304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d3:9e:d0:cd:36:e3:e8:fc:2c:d0:af:de:47:
c7:ff:9d:c9:49:57:5e:aa:33:2a:1f:c7:d2:05:ac:
f6:74:ba:09:09:dd:26:d5:5f:09:25:3e:85:e8:b5:
48:fb:45:0f:e6:02:69:7e:97:5a:c4:2a:da:45:f9:
48:23:23:57:89:4b:26:da:9d:44:cb:72:7e:de:91:
65:32:9e:a2:41:b6:ab:53:9f:f2:a4:2e:dd:42:4c:
d0:77:47:e2:f6:32:92:86:64:21:b1:8f:8f:cf:54:
01:30:26:37:6f:bc:b7:9d:4a:1d:dc:a3:34:97:ea:
90:31:b9:43:8d:e3:84:d3:15:d4:c9:32:7c:86:ac:
98:90:aa:60:8d:7d:0d:e1:59:83:2f:cf:4e:7e:e3:
44:4c:57:ed:41:24:95:5e:60:74:0f:eb:ee:58:91:
8b:11:d2:d0:b3:47:1e:f5:99:16:5e:5a:bc:4a:70:
dc:21:48:57:5f:84:21:51:69:53:99:45:fe:62:c0:
1a:a8:13:81:fe:bc:f1:3b:fe:28:df:3a:8a:84:28:
27:98:7b:c4:44:49:c3:33:8c:d2:c6:48:a7:33:3d:
66:3c:b3:02:17:ac:91:61:af:09:98:e7:5a:ab:ff:
fb:a4:81:f1:ef:13:d0:91:0a:3a:44:3e:04:41:d3:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:5D:4B:36:87:42:71:AA:2F:AE:A7:B4:8D:22:47:02:19:3E:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
X509v3 Authority Key Identifier:
keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
sbgp-ipAddrBlock: critical
IPv4:
206.128.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:b1:ae:5d:7f:42:7f:af:15:7c:08:4e:b5:89:7a:0b:16:d8:
a1:9f:dd:1b:ab:ba:66:46:6f:ff:0f:80:9a:c2:cd:30:e8:93:
5e:44:ec:e5:5a:54:0c:b1:71:67:01:28:68:ae:cc:8c:eb:a6:
13:4d:c9:da:76:d1:0f:3a:e7:9b:d9:21:25:48:e9:fc:e2:b9:
fe:96:6d:e3:ff:ab:8e:1a:1c:cb:00:a2:31:d4:1a:bc:fb:07:
53:b1:14:73:c7:a6:d6:bd:0b:53:38:16:a4:42:7b:f0:e2:23:
17:cc:ff:1a:20:1e:0b:2d:8c:97:94:80:c6:69:89:c0:58:0b:
32:7c:1b:83:64:8e:53:6c:0b:2e:ed:40:4b:8f:3d:a9:f9:db:
64:84:e8:aa:87:ce:fc:c6:df:d6:3f:85:77:e4:5e:d2:7d:e4:
8b:ce:74:75:a9:f1:16:3c:b2:fb:69:c1:3a:08:b2:e6:f1:1e:
73:b3:db:d8:6e:2f:e8:cf:4d:28:93:b5:0e:39:9a:09:bb:95:
08:ec:3c:43:d4:62:92:ea:17:2a:08:47:8f:f3:24:7d:2a:24:
63:05:35:2e:e8:68:fe:4b:0f:be:6b:f5:ff:70:7a:7d:c0:bf:
cf:6a:aa:12:c6:7d:f4:cb:98:aa:f6:e2:b2:50:6c:76:f5:e8:
7a:df:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:55 2025 by rpki-client