Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b0a98557-ebf0-3fd2-b599-f48b5b2f2db7.roa
File: b0a98557-ebf0-3fd2-b599-f48b5b2f2db7.roa (raw, json)
Hash identifier: nM4gIL2thHgBTAgCl5wr3G5fkSPRwJFkcNGIm/iYvpw=
Subject key identifier: 79:BB:B2:72:92:0C:40:97:C0:36:07:0C:54:F8:1E:EB:FF:30:66:63
Certificate issuer: /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial: 010D0C9F43285848EC9693044F461246C547A200
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b0a98557-ebf0-3fd2-b599-f48b5b2f2db7.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 0
IP address blocks: 206.53.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:93:04:4f:46:12:46:c5:47:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=9920aeeb-8d70-46d5-9d77-c3488880fcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:45:a5:f4:ac:56:72:ea:8b:9d:b7:ae:09:95:
22:ff:1f:a2:b6:54:a6:9a:c4:b1:77:c9:6e:e5:e1:
ee:a9:5e:97:34:eb:91:59:dc:58:21:1c:c5:6d:e7:
69:96:3b:80:b4:3d:f4:55:69:76:56:9d:a4:32:ec:
e2:7c:87:7c:71:c7:b4:e8:47:58:0f:80:87:57:0d:
87:1a:54:97:11:d0:bc:29:f4:70:80:5f:0c:bf:64:
bc:6f:d5:df:bf:32:f4:bd:68:24:d4:3a:cc:31:36:
b2:08:af:cf:b1:6d:5e:79:c7:c0:75:8e:b6:b5:4e:
e9:17:d5:42:a9:4a:6e:ca:bc:04:6e:aa:5f:97:e8:
b6:f5:ec:06:a8:d5:bb:f4:32:0b:ba:d5:a2:e6:2e:
af:d4:40:d3:97:d0:31:d1:1c:de:d1:46:ba:a7:e7:
10:02:95:7d:96:bf:7f:d7:3a:df:2b:0f:81:c7:1e:
21:62:69:f1:84:b6:24:b3:6c:d6:58:8b:56:c6:57:
82:81:b2:9a:e0:27:7d:52:d2:26:b8:9e:5a:cd:e3:
63:22:71:f3:42:59:77:0c:1a:cf:97:3b:60:61:0d:
eb:3a:b8:65:3c:60:82:06:12:cc:e5:5c:dc:40:4c:
15:74:a7:ca:04:6c:f7:e3:06:20:be:dc:5c:6f:b7:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:B2:72:92:0C:40:97:C0:36:07:0C:54:F8:1E:EB:FF:30:66:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/b0a98557-ebf0-3fd2-b599-f48b5b2f2db7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
X509v3 Authority Key Identifier:
keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
sbgp-ipAddrBlock: critical
IPv4:
206.53.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:1a:e5:ee:c5:8d:3a:2a:76:77:91:cb:35:0c:cd:6e:d1:f2:
3f:ec:63:1e:3d:c0:37:3b:d4:64:a1:b6:fe:3e:91:7b:60:9c:
e1:0c:2c:77:66:02:54:ae:17:08:a2:08:7d:53:d3:6f:32:ba:
29:a7:65:6a:b9:fb:4b:45:ad:0d:c7:2b:7d:6a:4e:59:fd:27:
56:2f:97:74:b0:66:b5:cf:17:8e:d8:d3:4b:46:c3:85:01:1f:
2c:fc:d3:78:34:67:c1:b2:74:31:fe:d2:75:51:85:12:08:bd:
88:23:00:dc:b0:62:77:5a:a3:42:43:4e:d9:e5:d4:d3:e8:e9:
f3:d7:82:18:e6:1b:b1:a8:7e:d1:c1:a9:83:23:a5:76:e4:79:
6c:ba:be:70:82:ea:e9:b8:16:cb:d4:75:47:21:bf:2b:0c:2e:
35:92:f4:69:3a:27:b7:ac:2c:c5:27:58:40:97:9c:28:f6:a4:
bc:37:7e:cd:64:36:c5:63:c1:3c:a5:b7:04:7b:04:be:41:1b:
89:6f:93:94:c6:c0:d3:9a:71:bc:cf:7a:05:23:31:de:e7:a8:
e0:71:eb:59:b7:d5:85:55:c3:04:24:2d:72:16:93:70:16:a2:
2b:34:08:ca:e9:fd:b5:12:71:dd:53:dc:f6:c0:7d:59:33:ab:
f1:79:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:24 2025 by rpki-client