Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9caa57a6-ffdf-3327-a6ff-469bcda630bf.roa
File: 9caa57a6-ffdf-3327-a6ff-469bcda630bf.roa (raw, json)
Hash identifier: KYFKNGZWWzuQEqxdwuFLPyC0B22S53N3uxhUgkpnMeg=
Subject key identifier: 46:D1:5B:07:43:45:12:5F:50:96:13:0C:3E:2F:BF:91:CC:17:79:67
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E9CBEF91FDE6D475E7C84D80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9caa57a6-ffdf-3327-a6ff-469bcda630bf.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 9009
IP address blocks: 206.123.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ef:91:fd:e6:d4:75:e7:c8:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=c6d8e7eb-4ed3-4a5f-8d62-0cd20afd1846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:6a:4a:b4:b7:02:ad:c2:0f:28:8e:9f:22:
ba:d8:b4:6c:e2:c5:08:df:15:a6:cc:5d:85:36:28:
8c:1d:ea:89:ca:a5:d5:93:db:73:a2:b1:44:d5:26:
c2:46:91:9f:10:e9:eb:92:14:8b:61:7c:8d:b0:bd:
b4:af:69:c5:0c:28:20:34:f4:88:b3:5d:b3:e1:6e:
ba:d0:b1:ab:7d:3e:e9:77:77:b9:68:32:9c:a7:4b:
7d:c3:e5:38:ea:3c:8a:6a:69:f8:d9:e5:3a:08:bf:
e8:77:f3:25:a2:52:d3:e1:3e:63:a9:94:76:0b:57:
3c:ec:78:17:9b:79:8e:da:1f:4e:46:70:d1:c7:be:
55:3b:f1:bb:7c:3e:83:19:e3:d2:82:59:d4:ea:7d:
b8:42:2e:1f:29:57:ff:a7:2a:e9:da:54:19:3f:77:
ee:79:31:5a:d7:37:3f:19:5e:3e:5b:8d:8d:62:74:
7c:57:5a:f3:93:36:1e:bf:fc:53:68:72:51:c3:9a:
9b:78:ef:17:af:55:cd:98:05:a2:21:ef:b9:c7:35:
51:b3:6e:c8:9a:4a:5b:0f:14:25:05:41:5a:9c:a2:
f2:df:c6:b0:b7:2d:e9:c7:92:85:0a:34:61:9c:fc:
bd:ac:f3:a5:52:5d:60:d7:00:26:9a:39:c4:ba:25:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:5B:07:43:45:12:5F:50:96:13:0C:3E:2F:BF:91:CC:17:79:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9caa57a6-ffdf-3327-a6ff-469bcda630bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:74:b1:04:0f:a0:2e:33:b0:c7:3d:2c:7b:13:2c:80:65:92:
16:08:6f:05:00:70:c3:14:a0:bb:60:2f:81:51:f9:2d:69:f1:
a4:bb:31:94:fe:3f:6d:2e:fa:ed:60:2a:e8:b3:59:d2:45:9e:
4e:90:92:d0:52:28:8f:65:18:85:18:9c:75:45:32:6c:a3:b8:
06:72:56:7a:f9:43:7f:90:ac:23:30:47:57:df:fa:4d:bc:cf:
e6:18:88:92:4f:3d:64:24:77:c6:3c:40:39:e0:db:6b:63:a3:
40:4a:6b:23:98:04:af:64:0a:e1:01:e5:b4:49:6f:08:f6:27:
cc:a9:4d:0e:70:9a:08:da:c9:2d:15:c4:fc:71:63:b9:97:6f:
64:94:04:fe:2c:c1:1c:f4:a7:3d:59:44:08:d1:3b:79:da:e7:
80:4f:23:87:00:39:24:37:17:49:5a:1a:67:01:06:c6:ce:b3:
ae:f4:49:43:45:8a:21:83:97:92:bc:b9:73:26:05:03:6d:38:
1b:ff:d2:59:60:10:d3:cc:be:69:2d:db:00:a5:5e:35:ba:5e:
1f:3d:c9:16:53:36:61:36:6c:66:00:bd:8a:da:09:a0:b3:e2:
03:6c:db:48:1e:72:f9:fd:47:d0:f9:6a:9a:54:b9:86:0e:87:
cd:03:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:42 2025 by rpki-client