Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2075d94f-dba3-3778-a1b5-93f3fb3f0f9c.roa
File: 2075d94f-dba3-3778-a1b5-93f3fb3f0f9c.roa (raw, json)
Hash identifier: cW+KAurGPeO3fq2Boja+y0IFqwskfXwiOk4yy41o8gQ=
Subject key identifier: D6:E6:CD:C8:A4:A7:A8:40:05:F8:51:C8:B3:2F:C2:91:C0:8D:45:E9
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858493CA53D8FA795261B3FE21E00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2075d94f-dba3-3778-a1b5-93f3fb3f0f9c.roa
Signing time: Wed 19 Mar 2025 06:15:16 +0000
ROA not before: Wed 19 Mar 2025 06:15:16 +0000
ROA not after: Tue 17 Jun 2025 06:15:16 +0000
asID: 329007
IP address blocks: 206.123.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:a5:3d:8f:a7:95:26:1b:3f:e2:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 19 06:15:16 2025 GMT
Not After : Jun 17 06:15:16 2025 GMT
Subject: CN=85ffe721-bdbc-408c-bc6e-612553e5d97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:38:18:b3:d7:3c:d1:f4:17:c1:cd:b0:8f:
9b:01:81:4e:dc:c2:4d:de:53:74:a8:b3:ab:c8:91:
9e:ae:21:44:95:b1:43:dc:33:57:d5:2a:b2:74:10:
5b:83:45:6f:98:00:3c:18:dc:87:02:cf:2a:10:ac:
80:17:e4:61:ce:3b:64:84:5c:97:36:3a:a5:d0:d3:
89:5d:af:83:01:ce:b9:06:80:c0:df:bd:b8:c0:20:
29:9c:c8:b6:ab:cb:90:ca:4f:bb:69:a7:55:ac:f9:
4d:39:7d:15:46:be:72:be:62:ae:e8:02:b5:0d:0e:
63:37:d7:c2:b9:60:42:58:5f:b0:77:b6:f0:73:c9:
50:e7:b4:ac:2c:9d:f4:d0:28:fb:11:dd:c8:93:54:
9a:27:e6:55:46:4e:64:c2:db:7c:c5:10:d2:49:b0:
55:9f:db:24:4f:7a:42:bb:f3:6b:11:79:be:62:7b:
05:4b:c5:1b:d6:d7:82:9e:26:33:40:45:a1:4c:dd:
1b:aa:f6:da:99:c4:44:31:71:85:d2:fc:06:c7:55:
ad:1a:a7:78:2d:65:f7:b8:be:d9:ae:7e:97:ba:ce:
bc:77:85:76:23:22:73:fb:fb:1f:8e:92:e7:b6:a4:
6d:e5:94:71:ca:eb:f2:21:db:22:c5:8e:f9:6b:bc:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E6:CD:C8:A4:A7:A8:40:05:F8:51:C8:B3:2F:C2:91:C0:8D:45:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2075d94f-dba3-3778-a1b5-93f3fb3f0f9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:43:5d:64:f6:a3:9f:61:7f:47:e7:a7:90:92:48:91:70:0a:
47:e0:ba:f9:cf:39:dc:a9:08:93:2e:ad:fe:fb:94:43:41:33:
73:3f:d9:17:5b:7c:f2:eb:5e:0a:0d:e7:f0:15:e0:54:60:b6:
41:7d:8b:55:e8:87:6e:ab:cd:3c:91:50:dd:79:93:4c:b4:7c:
2a:df:2a:a5:20:b4:58:bc:ce:b0:82:ae:09:22:6c:de:1e:45:
35:e6:8a:b9:d5:3c:2a:aa:86:01:93:f6:b8:83:dc:8a:15:be:
f6:93:0c:32:18:c2:ac:e0:63:9d:1f:13:66:f9:c1:85:07:0a:
3c:a2:6b:6c:7f:7b:e9:28:f2:98:18:ed:e8:3e:4e:a8:5b:b2:
c7:6c:ce:ea:2c:13:de:34:63:b6:19:c8:18:59:9e:8b:e0:24:
60:99:3d:18:95:e3:80:98:15:06:a4:af:46:8d:54:1a:6b:52:
9f:8c:6c:15:45:0c:26:38:d4:94:b5:b3:91:56:16:32:ca:02:
8d:eb:41:92:4b:76:59:2d:bc:a3:a6:b2:63:e0:b7:ac:36:d3:
0f:c3:f8:d0:2d:fe:5d:a7:33:b4:4d:fa:f2:79:7e:c4:56:c5:
8a:4b:20:e9:c3:41:4a:83:40:f9:6e:bf:48:23:95:0a:b6:5c:
20:23:05:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:06:39 2025 by rpki-client