Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa
File: 925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa (raw, json)
Hash identifier: Y7OWc5Vu8nV8fZcXGn7Y6os5bA46ayiwf3Fr57Z6bfc=
Subject key identifier: 95:5F:38:86:95:C3:83:E4:D4:62:5B:10:63:EE:E0:BB:19:B2:3E:33
Certificate issuer: /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
Certificate serial: 010D0C9F43285849350E82C0AD99A42BEBADAC00
Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 400427
IP address blocks: 206.225.0.0/22 maxlen: 24
2606:ad40::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:82:c0:ad:99:a4:2b:eb:ad:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=a8c1ff41-7c07-49e6-88f5-e633d5cf115e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:fd:88:8d:68:45:85:66:85:57:c0:82:65:
01:70:ab:26:d9:82:b6:84:ed:b7:42:cf:2d:02:ca:
a3:db:53:a6:7e:4c:ad:c8:93:20:95:99:e7:5f:4e:
57:aa:8c:a8:57:24:4b:bc:88:c2:61:3c:93:9a:01:
10:1e:c0:0b:eb:32:e7:78:e9:6a:e1:01:21:1d:2f:
de:1b:50:a7:32:43:1b:ca:38:94:a8:0a:89:2b:2b:
02:d9:17:ba:c4:72:7a:61:e8:c7:06:ad:74:2a:e5:
51:4e:34:04:d5:05:5a:15:94:98:7a:80:49:01:3b:
03:07:52:de:71:df:9d:ed:3e:11:b5:82:f6:1a:33:
76:42:70:53:e8:4b:7f:76:65:f0:e5:06:25:3e:96:
b7:9e:9a:bb:ef:23:18:03:28:b3:c3:98:b3:44:21:
c3:93:14:08:3a:c8:6b:43:d6:33:fc:1a:5a:55:c1:
d0:05:48:2a:d0:9f:13:4b:54:2a:51:bc:c3:97:22:
4a:c1:68:59:4b:98:e1:1b:ad:74:26:f9:61:6e:5d:
ed:ed:4d:da:6d:9d:84:60:42:e1:ae:24:0c:15:62:
62:40:c1:8f:5e:e5:2c:f6:c5:88:18:f9:86:15:00:
1e:a5:c5:6f:e2:35:73:a5:73:b8:6e:99:4c:92:48:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5F:38:86:95:C3:83:E4:D4:62:5B:10:63:EE:E0:BB:19:B2:3E:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl
X509v3 Authority Key Identifier:
keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
sbgp-ipAddrBlock: critical
IPv4:
206.225.0.0/22
IPv6:
2606:ad40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:9e:4a:3a:c2:f5:9b:fb:49:6a:72:bb:38:0f:81:6a:66:8c:
8d:fd:49:0c:31:d2:a3:c8:a5:11:2f:d2:53:54:bf:33:0b:c8:
5c:9b:1a:33:36:65:37:5a:22:d8:38:8d:8a:54:39:c2:cb:3f:
bf:ce:b8:bd:45:2f:5c:1b:37:fc:71:04:69:3e:16:a1:f7:c2:
dd:5c:6a:2a:99:cd:1e:42:3a:0d:86:1e:ad:d0:b2:af:5f:f3:
bb:12:67:cf:07:de:ad:ea:ee:b6:27:c1:79:1b:00:9a:9f:b7:
84:59:87:f8:23:2f:68:2b:fc:70:65:bb:3c:f2:cc:3d:4a:8b:
e0:fd:e3:36:67:15:10:a0:67:1e:92:71:7b:30:15:eb:56:95:
65:52:a9:82:e5:b1:c0:5d:b0:23:9f:bc:cf:e8:14:9c:e4:b6:
cc:79:a5:95:a7:ad:3a:c6:64:16:c2:30:71:eb:0b:1c:6c:85:
d6:d0:cd:4f:de:3e:30:d3:a3:cc:cb:69:65:58:e6:b9:7c:45:
25:c1:ab:84:c8:0e:7f:0e:e6:be:22:25:d0:3c:25:a1:a2:70:
f9:66:80:93:fe:43:22:66:07:a3:de:37:35:f7:2c:2f:dd:25:
46:57:98:9b:9a:15:18:56:34:1f:f7:51:82:bc:55:03:36:a9:
79:ef:4f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:39:04 2025 by rpki-client