Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa90a921-50f8-3528-a5ca-49096b1e475d.roa
File: fa90a921-50f8-3528-a5ca-49096b1e475d.roa (raw, json)
Hash identifier: 0jd2bGuHzOdUYiOiXhKZtngFTLlBbRypTI8DAI63VZw=
Subject key identifier: 5F:E8:61:34:30:F1:EE:E4:E1:DC:B6:02:E6:25:5A:E9:69:63:97:32
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285848E9CBEFBC463657B3EFF8F880
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa90a921-50f8-3528-a5ca-49096b1e475d.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 9009
IP address blocks: 206.123.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:ef:bc:46:36:57:b3:ef:f8:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=e0336f27-506c-4fcc-907d-3630ed46b9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:4f:d1:0c:b3:24:23:0c:ed:5e:41:e2:06:
1c:3d:f0:da:90:fe:1c:6d:1c:e5:9c:45:dc:5f:f7:
28:c8:25:25:87:9b:a2:71:dd:95:dd:c5:1c:91:3f:
89:a7:d5:8b:94:57:81:28:08:58:ff:94:7b:63:f8:
fc:33:0b:ac:66:e2:15:9c:41:fe:78:68:08:00:76:
7c:b3:d4:c5:00:00:66:2a:34:4d:7e:95:3e:af:06:
4e:ec:5a:f4:41:47:95:11:e1:e5:0e:d8:99:7a:5c:
7a:d9:fe:84:a5:1f:00:87:db:dc:26:e3:1a:7b:55:
0c:27:92:37:a5:6b:3f:02:62:a9:4d:f7:4a:b9:82:
09:14:04:81:c8:4f:bf:87:a5:0e:6f:71:d2:d5:b9:
87:5f:d2:6d:fe:72:2b:66:74:2a:1e:06:0e:be:85:
3a:da:f6:1c:bb:2e:f7:41:71:c5:c0:eb:70:bd:10:
f8:3e:42:72:18:fd:a2:e5:27:14:25:76:83:7c:c4:
8f:27:4d:a4:f6:f0:d7:b4:98:16:13:0e:fb:08:73:
c6:1f:c5:37:86:4a:fa:e0:a9:32:80:97:f1:63:3b:
26:cc:1c:71:c6:56:c6:55:ee:35:56:72:03:40:5d:
2e:78:fa:c8:a3:42:16:f6:74:3c:97:38:98:bd:a7:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E8:61:34:30:F1:EE:E4:E1:DC:B6:02:E6:25:5A:E9:69:63:97:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fa90a921-50f8-3528-a5ca-49096b1e475d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.123.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:00:69:e1:82:d1:25:2a:44:a8:47:89:66:a5:f3:ab:84:b7:
55:b4:21:3d:cc:f4:ba:77:a7:89:54:a1:97:20:3d:27:60:52:
32:10:04:cd:92:3d:fb:3a:cd:a3:fe:b5:18:4f:08:98:4f:7b:
8f:98:be:19:78:99:d8:c4:50:7b:20:4b:fe:8f:32:1f:07:37:
9e:46:45:d3:99:eb:ef:f4:9c:63:fb:84:b3:e2:7e:76:19:ce:
3a:01:66:c8:a9:fb:b0:ff:98:f0:45:cd:b7:f9:49:11:58:82:
be:4b:fb:4e:e9:8a:73:99:b4:47:0f:8d:fb:3d:71:5a:7d:22:
12:32:28:b2:d0:e3:d6:ec:b7:bc:ce:30:6b:b2:63:4d:24:a7:
b3:06:db:f5:b8:0b:25:bc:3c:a4:c8:6e:e5:6a:81:ef:d2:ea:
3d:26:fd:36:f0:34:fc:4d:0f:8b:be:3e:de:cd:50:f5:ad:29:
2e:8e:31:73:42:e2:74:28:ad:00:e6:f4:cd:0e:c6:8a:f1:3e:
85:57:f0:f4:c1:6c:ff:13:cd:a9:f2:7a:e3:e8:60:91:14:b9:
18:cf:ea:fa:2d:f7:7c:bb:9f:42:15:2a:4b:af:30:c4:d8:de:
68:c4:fc:5a:6c:71:34:fa:b5:ac:67:5c:1c:c1:59:e4:e5:1c:
c6:6c:dd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:04 2025 by rpki-client