Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa
File: a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa (raw, json)
Hash identifier: qdNshXlYHCozXE6rcgfg8ApuFCrT+YBJVmI8wd2VpXA=
Subject key identifier: 3F:8C:4F:4C:43:4B:8F:23:49:9D:80:6F:4F:7A:C8:35:8D:E5:13:7B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858493C9ECFA7C36E5EDDC6FBCDD4
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa
Signing time: Wed 19 Mar 2025 06:02:19 +0000
ROA not before: Wed 19 Mar 2025 06:02:19 +0000
ROA not after: Tue 17 Jun 2025 06:02:19 +0000
asID: 137409
IP address blocks: 206.123.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:9e:cf:a7:c3:6e:5e:dd:c6:fb:cd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Mar 19 06:02:19 2025 GMT
Not After : Jun 17 06:02:19 2025 GMT
Subject: CN=c823c93c-1c63-4cf0-b635-36706b4ae8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:99:f5:6d:cc:f3:82:d7:13:16:fd:ba:8d:
78:60:aa:d3:30:5d:ad:a1:59:a3:55:fd:38:c6:71:
7e:a1:1b:e6:aa:6b:37:f5:db:9f:3b:40:b2:84:6b:
1d:a5:43:c5:61:59:7a:50:03:0c:93:eb:8b:d4:36:
2c:5b:40:28:83:d2:7a:15:4d:3b:26:e8:3f:1f:fe:
a0:40:39:1b:d5:f3:c2:0f:76:c8:70:c9:6b:3a:eb:
de:c7:90:c3:1c:a4:82:cb:99:da:dd:40:41:82:b9:
f5:24:20:c1:67:32:89:88:bd:7c:74:3f:6f:49:d8:
d0:69:d9:0e:31:e7:eb:d6:6e:46:17:24:38:59:56:
d7:84:3a:2f:17:f5:03:d4:75:53:10:86:02:44:54:
d5:cf:f3:db:2e:68:23:f0:40:aa:b0:f8:95:0e:d7:
63:a9:45:51:3f:9d:fc:11:c2:0e:9c:1e:ec:d0:06:
ec:91:4b:0d:27:60:76:f1:eb:69:a2:18:31:b9:65:
13:e9:76:5a:8e:fa:e0:c7:98:2a:45:6a:3a:aa:78:
8c:66:ce:f1:e3:24:c3:9f:fd:17:23:10:31:e5:79:
20:86:f8:59:a2:42:33:67:c2:a1:5f:ab:5f:dc:a0:
17:9b:a0:51:91:6d:9b:ab:4a:13:ea:76:07:40:c4:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:4F:4C:43:4B:8F:23:49:9D:80:6F:4F:7A:C8:35:8D:E5:13:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0f290e9-fd63-3ef6-9f35-b252f6f4e64a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:2b:fa:70:79:8e:bd:00:15:8d:54:1f:93:f1:ff:d6:79:c9:
e7:55:99:7b:12:1e:d8:ab:2e:cc:dd:fb:5e:87:58:ce:96:f6:
a5:7d:07:4c:43:49:b9:33:37:f7:f6:a5:15:20:c5:c3:87:fb:
46:99:9c:6f:e6:b9:3b:a8:1c:02:b8:05:ce:bc:0b:2f:6d:89:
15:0d:72:18:f1:36:9f:a7:db:af:37:90:b7:18:74:84:b5:af:
b7:ad:dd:e7:cc:3b:d6:28:c3:31:7d:19:7b:74:1e:2a:7a:ab:
be:78:02:c3:f3:98:d9:9e:47:17:48:b9:e0:3b:79:ed:36:e3:
2d:d4:2a:e8:91:34:3d:14:3c:d0:84:37:97:29:df:71:90:0a:
ed:86:6d:32:e0:d0:a2:0d:d4:52:9b:74:80:9f:8a:1b:05:02:
e3:87:8c:4f:11:0a:42:79:65:40:fe:fc:22:47:9c:80:5f:3b:
5e:55:f9:c5:ae:ab:4b:bd:34:54:1e:ab:da:67:f0:b1:94:2a:
e7:48:62:9e:7e:5f:f7:a7:73:47:5d:3b:b1:fd:67:30:eb:71:
44:97:9a:58:d4:fd:d9:9e:20:ec:95:60:73:06:57:e6:13:a5:
ff:99:2e:d8:a1:36:4f:fc:2f:3d:95:8c:a9:92:8f:0a:5e:13:
3b:03:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:40:27 2025 by rpki-client