Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4250a551-35a0-3229-b9f3-1097893cc35b.roa
File: 4250a551-35a0-3229-b9f3-1097893cc35b.roa (raw, json)
Hash identifier: HjC8eph1Yhh7nIG5Fyf/fjmceHxz+Au7GYxitYuegpw=
Subject key identifier: 4B:82:DC:CD:F1:7F:7E:E7:AA:C8:36:A2:D2:A9:AB:F7:05:12:ED:DF
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848FA8BE98B74F04906AF95A280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4250a551-35a0-3229-b9f3-1097893cc35b.roa
Signing time: Sun 23 Feb 2025 14:00:51 +0000
ROA not before: Sun 23 Feb 2025 14:00:51 +0000
ROA not after: Sat 24 May 2025 13:00:51 +0000
asID: 9009
IP address blocks: 206.123.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fa:8b:e9:8b:74:f0:49:06:af:95:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 23 14:00:51 2025 GMT
Not After : May 24 13:00:51 2025 GMT
Subject: CN=cd506028-fb7b-41d1-a236-842b87ad0594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:6d:e2:66:f6:c2:a7:50:7b:a7:29:86:07:
27:aa:70:c1:b7:c4:c7:b3:16:ca:58:80:74:96:88:
30:fd:0d:28:8d:60:17:43:1c:b0:78:7f:06:38:60:
a2:fd:76:19:ee:e1:78:51:9a:ee:ac:4d:f8:ff:84:
62:45:7a:1d:bb:11:a1:7c:53:93:e8:15:c1:69:59:
24:9f:3a:9b:38:74:1a:e0:f7:de:e1:b9:d1:44:95:
83:ab:08:5b:21:d6:61:10:d6:ef:a7:e4:0d:e1:5c:
2a:4d:04:d4:81:e6:5c:a7:07:ab:b2:f4:99:3b:7a:
f6:f4:cd:c2:0e:af:0a:63:44:25:96:e4:86:ce:8e:
1c:78:c0:18:9e:6a:d9:2a:3e:1c:03:cb:70:ea:a0:
03:5d:9e:98:cb:64:3c:e5:66:de:e6:ae:22:e3:e3:
50:3c:8a:d3:7b:4d:f4:ae:1f:c1:d8:c5:55:6c:93:
14:8d:83:21:3a:39:16:d4:da:25:38:d4:4a:20:10:
5c:8f:3f:d8:af:78:6f:8d:a1:03:95:b0:1d:20:fe:
2e:93:3a:5c:68:8d:4a:9d:30:4f:a6:fb:ae:eb:0b:
f2:41:d2:19:65:8c:90:67:dc:f6:96:6b:3f:fd:b3:
e2:df:90:d9:1d:76:f7:e3:f1:48:d8:16:91:34:53:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:82:DC:CD:F1:7F:7E:E7:AA:C8:36:A2:D2:A9:AB:F7:05:12:ED:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4250a551-35a0-3229-b9f3-1097893cc35b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:f5:c7:e9:bb:da:b5:8a:05:87:a1:62:ef:db:69:5f:de:74:
e1:ce:05:6a:91:cd:2c:18:5a:52:22:4f:67:f6:b4:07:e1:70:
fe:63:fe:89:62:dc:4b:72:56:e0:66:7c:11:d5:07:a2:65:09:
1e:77:18:50:e6:d7:24:28:ec:09:5e:7b:fa:41:0a:a4:6f:7d:
15:4f:28:8b:c0:24:18:d0:22:7f:a0:be:6a:00:bf:c8:04:61:
d2:5e:c5:b1:08:04:1f:c3:5f:bd:01:2c:d4:27:98:65:4f:d8:
62:d1:fc:cd:d1:aa:f9:20:64:23:55:b8:ad:79:63:12:6a:0d:
3d:e4:cb:d4:19:bd:a2:4d:6d:76:76:43:fc:58:14:90:30:87:
97:1c:13:fd:cf:6d:e0:06:fc:de:75:76:79:65:6e:14:ee:3d:
3b:d1:ee:0d:aa:ab:35:2d:ca:13:79:eb:88:88:3e:bf:ef:8b:
32:a4:8e:d0:66:00:a2:bf:11:67:a5:7c:2c:05:7c:96:71:04:
d5:bf:f1:0f:1f:f8:c7:4b:5c:b7:04:f3:86:3a:8c:fe:25:da:
55:23:6f:a2:b2:6e:a1:7b:25:29:b4:9a:c2:66:29:84:dc:32:
d2:5c:d5:c4:02:2e:67:cb:fb:55:36:fa:3f:b0:96:57:63:3d:
9a:7f:7d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:00 2025 by rpki-client