Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/06bc7db9-a1e3-35ef-8326-b47a98d09a68.roa
File: 06bc7db9-a1e3-35ef-8326-b47a98d09a68.roa (raw, json)
Hash identifier: uOk1yPQxlKoOKPTdVM6FmyficMXtNuDb0Nt/j9c89Zc=
Subject key identifier: 42:06:CB:CB:2A:EB:92:FE:CD:44:68:FB:35:73:0B:5E:E8:6E:F5:F2
Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial: 010D0C9F43285848A9962C5A0F2A9D00BA43B280
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/06bc7db9-a1e3-35ef-8326-b47a98d09a68.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 401104
IP address blocks: 204.197.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:2c:5a:0f:2a:9d:00:ba:43:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=fcb551ff-f25e-4916-b0a7-47909f20718e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:b7:a0:ad:a7:5f:95:07:1a:ab:42:a2:7c:
68:62:84:30:6a:f2:2a:ea:73:72:5d:12:94:9e:67:
7b:7e:b4:39:5e:b7:81:8a:9b:59:9a:b5:bf:07:ef:
eb:af:76:86:37:b7:c6:fd:65:bf:54:c7:e2:02:e0:
ea:74:4a:77:e1:4f:03:db:00:a0:af:d2:6a:3b:0f:
e5:3c:1e:c0:74:db:d9:bf:e7:81:e5:78:dd:d3:51:
a8:c4:02:da:10:74:06:a7:78:1b:ff:cd:14:63:4b:
5b:4c:34:63:59:97:11:dc:e4:ef:45:03:7c:a6:dc:
50:cd:2a:b3:3f:33:f0:7b:0e:a9:fb:93:9d:29:e6:
d3:cc:32:6e:64:ae:a2:d5:76:34:14:75:46:e8:f6:
7e:71:06:a9:7b:f0:2b:e9:9f:18:ed:d1:b4:03:b3:
33:69:da:01:05:57:3e:ee:a7:e8:84:8e:c2:f8:bf:
91:d5:65:9f:99:8c:76:62:71:a5:b3:cc:2d:0c:15:
08:c5:ef:7e:10:6c:56:a7:fa:fb:c0:6e:4a:6a:18:
5b:97:83:b2:a8:50:bf:8e:c4:e8:8b:f5:41:05:29:
9f:1c:e7:b2:0f:03:81:ff:10:5b:36:ba:c6:9d:82:
78:8b:15:56:17:b4:9d:67:ce:07:38:65:47:49:cf:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:06:CB:CB:2A:EB:92:FE:CD:44:68:FB:35:73:0B:5E:E8:6E:F5:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/06bc7db9-a1e3-35ef-8326-b47a98d09a68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
X509v3 Authority Key Identifier:
keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.197.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:a2:ee:b9:a5:e0:a2:26:56:b1:e8:9a:4c:01:df:20:6c:ae:
c8:2f:85:fe:1e:b4:b4:95:c6:d7:a5:94:ad:e7:40:02:19:4e:
27:b0:d0:0e:fa:4b:d2:81:38:d9:3f:77:42:dc:af:4d:ed:ab:
3e:ca:af:2e:e4:97:41:bc:87:8c:09:81:05:e9:77:6d:bd:d2:
e7:29:ba:71:1f:1f:6f:6a:20:30:75:8a:3a:68:48:ca:65:d9:
32:0b:af:cb:c8:b0:e4:f5:af:8a:ed:bb:7c:d7:df:09:ae:9b:
02:38:7b:f8:a1:0f:4e:ff:89:2a:01:4e:83:1a:f7:6a:58:d2:
5e:37:23:e8:ae:ca:de:ec:a6:6f:1f:16:1f:41:8d:b1:4d:37:
d7:59:74:6a:01:31:e8:55:e2:6c:b1:c1:42:27:b7:84:fd:09:
48:03:63:77:52:83:90:bc:47:bf:f5:8f:a4:2a:94:1d:81:1c:
f0:3c:3d:63:2c:ae:39:5d:a9:49:69:4f:19:b7:35:26:b6:8a:
65:b8:4d:43:73:02:3c:0b:14:20:13:a2:3c:14:13:23:f8:96:
2f:cc:3d:be:8c:d3:ff:1d:f2:67:ed:48:2d:2c:1a:59:1d:67:
4a:24:9e:75:9e:d1:47:d5:9a:4c:e5:be:0e:35:ef:ea:e9:85:
ed:97:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:00 2025 by rpki-client