Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4de7e78c-e9a1-3d97-96bd-e2c14e58a2aa.roa
File: 4de7e78c-e9a1-3d97-96bd-e2c14e58a2aa.roa (raw, json)
Hash identifier: 04W2bcwk/jb+TOjoAWhiDPUt8GlDJb8W3y2QLr6vIoM=
Subject key identifier: E3:35:B8:14:69:5C:78:FC:84:9D:C1:06:84:BB:D9:2F:56:F0:76:22
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285848D0ABB733DD5C6F2758C5C980
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4de7e78c-e9a1-3d97-96bd-e2c14e58a2aa.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 3949
IP address blocks: 206.54.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b7:33:dd:5c:6f:27:58:c5:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=a035a2eb-a096-4b69-b52c-66746665e1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:04:1a:7e:af:df:5b:04:16:31:08:c6:0a:
90:56:dd:51:f7:c7:aa:ed:28:83:c3:e2:57:12:fb:
cd:9f:d7:07:fb:45:d7:c1:f7:26:a9:ce:d5:3c:ea:
23:dd:f3:5b:40:1c:df:37:81:19:f4:1b:cf:70:be:
32:c2:34:ce:5a:de:37:42:bb:f9:f7:b9:64:36:8b:
00:5b:6a:88:aa:20:f6:b3:40:fd:60:6f:56:a9:04:
04:f4:30:4c:f9:9a:6b:6c:b2:ab:d0:51:da:ae:d0:
6c:94:d8:8d:08:6d:ce:82:6a:cb:a2:13:40:4a:d5:
d6:f5:b0:b6:6e:0f:d5:46:6e:f5:12:cc:5f:7f:ae:
ad:d7:f9:42:ef:99:66:7b:65:79:46:94:27:a5:8c:
e9:56:76:4f:74:36:d5:24:86:03:bb:4d:fb:99:4f:
ed:80:07:fa:b1:8b:2e:95:28:f4:b2:9c:21:76:15:
3f:a5:30:9a:8c:cc:51:72:d9:2a:72:9e:9a:e9:27:
e0:7e:27:93:5c:91:50:d3:02:c8:2e:7f:f1:b8:ef:
65:4d:7e:30:8a:21:66:a0:b9:61:9c:b5:e7:dd:2f:
bc:95:f5:cf:49:8a:c0:1f:25:7b:cc:94:86:02:c6:
1b:7f:59:3a:28:10:de:1a:c2:d3:51:1c:71:a5:4f:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:35:B8:14:69:5C:78:FC:84:9D:C1:06:84:BB:D9:2F:56:F0:76:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4de7e78c-e9a1-3d97-96bd-e2c14e58a2aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.54.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:fc:b4:eb:52:8d:7f:7f:fd:1f:2f:0a:04:8c:7f:d1:43:39:
ab:c4:cd:ae:45:0b:3e:e6:6f:ac:d1:c2:e6:32:a4:0b:c0:76:
30:5b:d7:a6:f1:d2:88:dc:d0:fa:a5:dc:05:f5:66:f1:ed:05:
01:b1:bf:64:54:1e:d3:c2:23:f0:70:da:75:4b:f7:57:e3:6c:
d0:94:3a:1a:c8:70:7e:9b:0c:15:fe:be:a2:35:fd:c4:9f:26:
34:d2:b7:c6:a1:19:d5:0a:dc:64:00:20:72:bd:fa:51:cc:fc:
aa:a4:7b:a8:4b:d2:1f:27:93:0c:9e:5e:1e:98:de:bb:48:3d:
28:e3:d5:d7:9a:de:18:d6:d2:c8:ba:88:3a:38:7b:4a:cd:bc:
9f:90:0d:eb:d7:f5:86:1c:55:1b:4f:0b:46:95:76:e0:db:f6:
87:5b:1d:46:0d:f8:e2:da:ad:47:69:71:cb:96:be:a4:9f:96:
85:f7:e0:68:c1:6b:44:07:28:11:ad:a5:28:60:6d:00:38:f2:
bb:af:d8:fd:a9:b2:ea:db:04:60:5b:ad:32:29:c7:fd:0f:6a:
14:d1:55:2a:f7:11:9b:4e:db:a1:0b:20:be:84:53:63:19:67:
41:3a:22:3e:92:62:f1:2b:2d:ef:12:4b:e1:5f:0e:89:3a:cc:
02:cb:16:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:21:29 2025 by rpki-client