Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/cc93a0e7-a7f0-3164-8d46-991da9bffb81.roa
File: cc93a0e7-a7f0-3164-8d46-991da9bffb81.roa (raw, json)
Hash identifier: Ra3Wu+BEKs1gBLBEsZkEiwIQBzB+7R0KmUEuJ/4+T0A=
Subject key identifier: 00:85:5D:C0:B9:90:EC:B0:F7:91:E2:6C:5A:BB:C5:BC:74:0A:68:5D
Certificate issuer: /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial: 010D0C9F43285848F926AC76F08FE139C18DCC60
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/cc93a0e7-a7f0-3164-8d46-991da9bffb81.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 22438
IP address blocks: 206.130.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:ac:76:f0:8f:e1:39:c1:8d:cc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=f83e652e-1ba0-4f02-80c6-961fa290bd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:e6:54:0e:b1:67:df:bb:88:19:26:8c:94:
5d:de:72:93:6a:23:5e:7a:f6:11:0f:cc:5f:04:82:
64:59:e9:8c:cf:b7:a2:e6:53:22:9e:23:61:05:74:
ec:a5:6c:08:d4:54:d6:80:77:3f:72:56:27:a8:d6:
52:52:d8:1c:30:42:a5:a9:db:43:31:6e:f7:a4:1a:
75:88:ba:d3:69:73:5f:2e:ec:aa:a8:42:ca:3c:91:
e9:e3:cc:1d:82:c5:c3:64:51:98:e7:c6:a8:45:fb:
72:3b:6b:10:94:21:f6:60:9b:5b:0f:0e:b8:87:7b:
43:c0:56:6c:08:86:09:70:ff:15:97:40:bd:7b:38:
a1:6e:fc:f9:74:a2:07:06:9e:b2:15:b0:64:6e:03:
d0:93:66:38:35:42:42:3a:19:87:06:ba:44:74:7e:
f2:4c:fc:7f:f6:6e:60:7d:43:f2:c5:f8:54:9d:39:
5f:e8:13:9b:ca:6e:82:47:a9:72:21:fe:dc:1b:09:
e1:bb:ea:28:86:04:47:ae:40:91:97:f8:33:7a:03:
dc:a6:06:eb:92:5a:f8:9e:01:59:20:cc:90:33:86:
d3:f2:00:ce:e1:46:05:9a:42:96:e4:95:95:fa:03:
b2:52:1d:a2:f0:58:f4:04:4c:de:95:93:5c:c7:53:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:5D:C0:B9:90:EC:B0:F7:91:E2:6C:5A:BB:C5:BC:74:0A:68:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/cc93a0e7-a7f0-3164-8d46-991da9bffb81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
X509v3 Authority Key Identifier:
keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.130.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:32:4d:ac:06:77:0e:0a:8c:d6:14:91:f7:da:05:14:12:7f:
17:e7:aa:a6:6f:5e:cc:45:89:06:41:63:67:03:92:9c:c9:53:
c9:85:e1:43:59:20:00:67:b9:7f:ed:09:70:79:6c:25:f7:1e:
4f:03:0d:a3:98:46:d9:07:d5:d1:5e:e4:2b:ce:26:52:7e:7d:
bc:7e:f3:d9:97:45:8e:4b:16:4e:e6:2c:46:fa:cb:91:00:23:
40:3f:13:5a:f8:66:06:37:11:c3:93:b4:7f:10:b5:c3:e1:c5:
23:94:37:7a:ea:cd:3f:77:3e:ee:f3:14:1d:81:c3:a8:69:6d:
20:f7:e6:88:22:57:f6:e1:ad:6e:b1:f3:b3:01:14:d0:a3:63:
a9:2b:9c:3e:05:2a:7b:56:c5:4c:19:06:b3:c8:a4:bc:72:3f:
9a:5b:88:59:f1:53:bd:0e:90:24:4e:02:cc:e3:b1:d4:83:f8:
42:b6:3d:43:34:23:f8:0a:55:fc:60:bd:80:1f:ca:0c:45:2d:
e4:04:74:b3:50:e0:60:9c:be:04:54:eb:c5:d6:1c:de:ae:6c:
fa:c5:79:b2:50:4d:b2:06:99:53:76:46:b5:ad:09:74:64:46:
b0:d3:a3:5c:ef:05:f1:8b:68:08:34:14:3d:b0:46:7b:68:6f:
73:49:5c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:11:56 2025 by rpki-client