Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
File: 0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa (raw, json)
Hash identifier: x14vaitTWFMnH2xl67nlookRQyriKUaNjqQzrTW3DnY=
Subject key identifier: 0A:CE:07:C9:51:A5:42:A0:00:6A:72:02:47:77:CF:DD:D8:11:5A:57
Certificate issuer: /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial: 010D0C9F43285848A99631B7C06EBDB62E0D8100
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 26356
IP address blocks: 91.106.220.0/22 maxlen: 24
204.52.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:31:b7:c0:6e:bd:b6:2e:0d:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=a6a3b10d-140a-4aac-a0f5-a117a08db4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:2c:60:ff:b2:73:57:cf:50:f3:4b:7e:e2:
89:99:2a:f7:5d:e7:8f:94:df:df:37:db:93:3a:14:
71:8c:6c:d3:fd:c3:fc:50:2c:ab:75:a7:65:43:a6:
9c:90:c7:75:c2:bb:65:43:76:fc:cb:ba:57:20:69:
f8:ae:dc:96:18:e7:2b:49:37:49:78:98:08:52:01:
2a:c5:07:fa:d3:6b:8c:43:d4:b3:5d:bc:5d:16:0e:
8b:8e:09:5f:3e:2c:e9:54:1d:76:6f:80:55:07:ab:
c5:69:bb:85:73:18:6b:77:9e:63:a7:f0:aa:e4:0a:
dd:8f:1d:68:fb:0d:71:fc:41:ad:03:9c:ea:c1:d5:
00:12:b3:90:68:15:f9:31:ca:2c:7a:fb:8a:a4:d5:
6f:9b:64:4c:43:d6:21:7f:b5:6e:2c:d8:79:bd:58:
1d:d3:5e:18:13:4c:22:8a:f1:1f:61:db:e0:33:19:
c8:d1:fe:79:27:52:82:5a:4d:56:fe:8a:47:51:b2:
b3:05:13:0b:86:23:7c:fb:8e:e4:42:10:0a:c0:6b:
8e:05:28:c9:89:29:7b:48:af:f2:70:7d:68:12:40:
39:48:13:0e:9c:af:5c:16:90:bc:79:e0:4e:9e:9b:
fd:fd:bc:4b:b9:2a:88:bc:9a:d0:a3:04:ed:94:42:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:07:C9:51:A5:42:A0:00:6A:72:02:47:77:CF:DD:D8:11:5A:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
X509v3 Authority Key Identifier:
keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
sbgp-ipAddrBlock: critical
IPv4:
91.106.220.0/22
204.52.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:95:be:7a:26:b3:10:30:76:67:45:af:6f:d2:3c:7b:76:87:
c0:cd:83:04:1e:19:b8:3e:84:40:24:f6:6a:ce:65:1a:6c:9a:
bc:83:20:82:88:db:30:fe:74:b8:a7:6a:88:c2:dc:3f:cf:be:
9b:9a:12:9f:c5:67:a3:e0:5e:12:9c:9b:b9:c8:5d:4b:d4:80:
03:e6:e6:fb:57:9b:6a:14:e6:fb:4f:5b:1d:be:6a:4c:1f:46:
3c:ba:3e:90:ae:c0:76:98:88:13:f6:1f:05:93:81:7a:a4:ed:
c8:1c:a2:cf:20:26:d0:cb:82:38:12:ea:b3:e7:68:1f:3a:18:
3b:de:e3:c4:c5:9a:a2:d0:9a:24:9d:3f:80:b9:8b:5f:95:8c:
0e:c3:7e:89:3f:b1:d6:37:95:20:e2:17:2a:0e:5c:b6:ac:f3:
cc:b0:eb:37:dd:76:ba:ff:dd:3b:82:55:5c:09:63:b3:f2:ad:
48:d7:a0:be:c6:49:f7:74:ba:cf:1a:d5:7e:62:58:ed:31:52:
4c:e8:3a:12:4b:09:68:56:da:59:64:34:8e:de:1b:ed:a7:65:
a1:dc:e6:16:d3:83:f4:21:cb:7f:56:b7:e5:2d:a7:bc:09:02:
b8:d0:42:39:bf:ef:82:22:d7:36:e4:52:ec:6d:ac:fb:45:da:
9c:41:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:44 2025 by rpki-client