Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/40e8cc11-6e0b-3830-86d7-d9c96aa96e7b.roa
File: 40e8cc11-6e0b-3830-86d7-d9c96aa96e7b.roa (raw, json)
Hash identifier: W0rHiVzW79TCQk+Ct9u6ZKi9HxJw/evAjt3vsDY6mk8=
Subject key identifier: 17:7C:EC:AE:64:05:A3:49:DE:BD:FD:3E:49:27:C6:8E:BC:E6:1A:60
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FFC4C67BD89862F10F3EB200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/40e8cc11-6e0b-3830-86d7-d9c96aa96e7b.roa
Signing time: Tue 25 Feb 2025 10:54:30 +0000
ROA not before: Tue 25 Feb 2025 10:54:30 +0000
ROA not after: Mon 26 May 2025 09:54:30 +0000
asID: 30036
IP address blocks: 206.226.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:c4:c6:7b:d8:98:62:f1:0f:3e:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 25 10:54:30 2025 GMT
Not After : May 26 09:54:30 2025 GMT
Subject: CN=80b67284-9002-4c1b-b3e5-37405ebb5621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:c0:82:4d:f6:70:0d:6d:21:e7:9a:87:48:
f6:b9:98:71:3e:3d:49:22:90:5c:35:bc:e9:11:b8:
8e:bc:71:53:0d:30:ac:0f:8f:cc:b8:f7:30:2a:72:
f1:02:28:11:d3:5f:75:5c:6c:cf:bb:8e:4b:dd:66:
6a:65:d1:ac:0b:06:82:96:27:55:17:f6:23:bf:80:
6d:f3:27:5b:3a:1e:43:fc:55:c6:ea:7e:2e:a2:c4:
ee:b4:ca:93:75:84:ef:de:11:33:a3:33:55:3e:70:
c3:b8:0f:0e:4e:8c:1a:41:fc:4e:9c:cc:7c:a6:aa:
be:aa:26:31:94:07:4a:4e:df:7f:52:61:e5:11:0b:
66:9d:b8:6c:1b:ff:14:61:27:73:07:2f:a9:76:fa:
62:d1:1f:d6:6b:33:e8:34:38:4f:df:60:44:f8:19:
2f:9a:5d:0c:9a:76:19:2a:a3:f6:dd:bd:dd:9c:3c:
89:d1:b3:c4:38:8a:a6:3d:35:cb:c3:bc:f0:41:d5:
06:f2:9d:70:85:c1:c4:76:5c:38:b0:22:c4:e8:6c:
1f:18:0c:e7:30:4f:bc:46:5b:72:02:5d:1f:4e:bf:
4a:95:b4:ae:94:ce:63:1e:26:71:f4:d2:52:5a:ce:
a6:f9:49:31:21:85:b4:fc:ca:6b:6c:7a:b5:03:89:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:EC:AE:64:05:A3:49:DE:BD:FD:3E:49:27:C6:8E:BC:E6:1A:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/40e8cc11-6e0b-3830-86d7-d9c96aa96e7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
206.226.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:46:f9:5d:3f:f1:9f:e4:d2:05:35:d1:07:66:32:00:5f:40:
a0:eb:27:5d:fd:7c:cb:c6:14:f3:50:83:e8:04:c7:e4:6d:ee:
3d:a4:6d:03:bf:00:71:76:a3:b8:ab:a9:18:64:00:d7:aa:bc:
00:15:f9:dd:42:aa:bb:5b:d0:1c:51:c0:58:aa:f4:97:19:fe:
61:1b:94:41:11:d4:29:3d:52:4e:37:25:74:58:bd:1b:3e:53:
a9:e4:e8:b6:6b:2b:7b:b9:f8:73:68:86:19:45:23:38:7a:c0:
0f:52:1a:c0:43:30:a4:f6:e2:4f:27:30:7d:5f:c5:bb:17:d2:
f7:a5:99:51:4b:b9:d9:83:c0:73:c0:bc:33:96:30:6d:e3:84:
c4:98:fe:11:68:bb:af:b9:5b:38:31:99:5e:2f:57:e7:d1:1e:
82:d4:f0:48:fb:00:55:50:99:70:cc:40:e6:6c:8b:e7:43:5d:
8d:ea:b8:ab:52:7f:bb:b2:2d:20:0e:c2:94:1f:c2:1b:1b:d2:
b1:7b:b2:39:d0:c7:0a:20:47:43:e6:7e:30:8a:06:a9:b6:c9:
8f:89:7b:7a:5b:ce:dc:e1:18:ec:f3:64:9d:96:4c:84:20:a2:
13:18:84:c2:25:13:e0:db:1b:a9:f5:a4:7f:9c:c3:64:d5:6f:
7a:9b:49:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:25 2025 by rpki-client