Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa
File: c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa (raw, json)
Hash identifier: 12Mv7QtqDFrmP7bO0vSwJKrs4KUUGZCeaSt9eMFQCdk=
Subject key identifier: F8:0C:B8:5F:CE:E0:D2:DE:CC:35:D7:70:1B:B8:E8:2D:49:EA:B4:FF
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F4328584891DB2F1C19A88C75E7749900
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 206.71.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:2f:1c:19:a8:8c:75:e7:74:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=8a7e287b-f160-4917-b025-2d55a30ad20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4c:ef:05:7e:c7:a3:c7:01:09:15:a1:dc:99:
e1:58:ad:aa:4a:8c:67:9a:65:f0:2b:1a:ae:bd:b3:
5c:03:76:85:f5:af:cb:86:77:32:68:be:1e:cf:c5:
d6:7c:3f:86:e6:3a:4a:98:4b:4f:f9:31:39:d1:c3:
5d:e3:6f:45:0e:a3:5b:0f:e9:63:1a:36:63:5e:96:
b2:3c:93:8c:bc:0e:28:3b:94:6f:a2:fe:6e:b4:e7:
af:44:5c:9b:5e:24:61:49:fc:80:ff:7b:0b:45:dc:
cc:19:40:4d:80:58:74:83:88:38:1d:ea:69:7a:05:
32:37:fc:26:7d:b5:bc:31:a8:e5:8f:db:e2:28:b4:
83:ab:bd:4d:25:6d:ec:dc:69:b3:04:06:58:39:cb:
8a:f7:bf:51:c9:20:b6:20:99:c7:60:a0:33:ee:a3:
b5:0b:df:99:41:f7:60:c8:2d:6f:f7:75:98:8e:fe:
36:3d:e4:a2:91:5b:71:3f:e2:b6:34:a7:eb:ec:ed:
52:f0:91:88:87:6f:7d:23:5d:a6:49:76:f1:f7:9b:
d0:eb:0d:c2:e5:55:58:f9:d6:24:03:76:8f:c5:f4:
b6:66:51:38:b2:d4:33:8e:e5:3e:f3:02:e8:79:5b:
e6:e4:36:59:27:23:9d:74:01:0f:bd:ff:e2:d0:13:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0C:B8:5F:CE:E0:D2:DE:CC:35:D7:70:1B:B8:E8:2D:49:EA:B4:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
206.71.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:79:50:ad:48:37:8a:40:31:45:f5:4a:c6:4d:5d:b9:b4:b7:
25:20:0f:ee:f3:ea:42:47:06:c7:53:b1:65:8f:df:de:84:8e:
9b:51:b9:f8:cc:30:cf:7d:cf:39:87:a1:d0:e4:16:5e:78:bc:
7d:8a:74:11:3b:93:0a:00:3c:ba:b5:03:df:af:b4:b6:f7:9d:
e0:64:38:e4:fc:04:73:50:87:65:0e:af:b7:87:e7:3f:2b:e2:
ea:68:7a:91:ce:38:05:a6:1f:f9:43:c1:3a:4c:7f:4a:d1:33:
c2:21:1b:d0:0b:12:b4:f6:e2:67:2b:88:6d:cc:08:37:8c:a4:
50:61:0d:73:82:83:68:9f:40:d5:b4:de:cd:40:3d:85:e7:bc:
75:39:19:d6:75:be:89:fb:0f:78:b0:46:e7:72:8a:50:9f:b5:
ae:f8:16:fa:db:4e:ef:37:43:a1:c5:e9:1d:e5:39:7c:73:1f:
87:a0:1e:96:d1:45:a3:f2:d9:4e:6b:5c:0c:96:0e:3d:2a:2c:
c3:38:9f:5f:a6:fb:f8:e3:33:30:1e:5b:47:eb:29:f9:99:0a:
4c:d6:f4:0c:68:25:d6:8e:d7:36:b1:15:00:fc:02:79:56:b8:
84:70:29:90:0c:3b:17:b7:29:80:58:1c:ad:9f:aa:8f:ff:e4:
bb:30:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:27 2025 by rpki-client