Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/00b80ae7-7f91-3873-9d7b-8caa3775d067.roa
File: 00b80ae7-7f91-3873-9d7b-8caa3775d067.roa (raw, json)
Hash identifier: D+6KAyYMFHqn8VS/boL1XCvtBQB8PyTWeGG1yF8PCnE=
Subject key identifier: BD:D0:6A:E9:39:D4:4D:FB:39:28:2D:4A:1D:EF:44:54:8C:DA:AB:82
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F4328584919418F6C7DD7F5F426625800
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/00b80ae7-7f91-3873-9d7b-8caa3775d067.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 33211
IP address blocks: 206.41.112.0/22 maxlen: 22
206.41.124.0/23 maxlen: 23
206.41.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8f:6c:7d:d7:f5:f4:26:62:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=d7e81ad2-a740-4c9b-b922-46a6ef3b42da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:5b:a7:3a:c0:2b:06:20:66:e1:49:86:58:
50:31:7f:59:6e:e5:c3:39:db:16:4f:2b:78:d7:f4:
39:63:d8:5f:4a:96:2e:02:19:e1:c7:a9:32:e2:fe:
74:61:61:39:86:ec:c0:ba:44:fa:b0:ff:9a:00:06:
c7:57:2e:bd:4a:36:62:60:fe:03:3c:18:0c:59:8d:
f5:c0:69:a1:b2:5b:a1:44:d5:8c:92:ee:fc:4c:44:
6c:d5:a5:36:6f:66:54:c2:41:c1:0e:e4:ff:dc:91:
73:9b:82:da:1d:b0:c1:f0:89:dc:7b:99:f4:6a:68:
71:f7:bf:fe:9b:d9:53:06:61:f0:f1:13:04:37:fb:
15:50:f1:7e:47:c0:6f:a8:d5:7b:8a:f8:e0:6f:2d:
ae:f0:9c:ff:26:78:41:c6:ee:90:f1:16:05:2b:78:
ec:d6:40:65:7a:ab:6c:de:58:d0:4a:4e:9a:49:95:
2b:c9:0d:7a:21:67:ba:a8:6a:07:d4:5c:d4:b2:60:
18:af:17:9b:71:48:7a:36:7c:f5:cb:e0:d0:8d:13:
4c:7d:42:e2:5d:1e:ea:5b:62:c2:9b:ac:77:d6:d3:
db:71:28:7e:9b:4e:3f:20:52:67:45:db:7f:13:7a:
35:6a:32:48:dd:6b:0e:71:3e:5f:95:ff:a8:c8:9c:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D0:6A:E9:39:D4:4D:FB:39:28:2D:4A:1D:EF:44:54:8C:DA:AB:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/00b80ae7-7f91-3873-9d7b-8caa3775d067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.112.0/22
206.41.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:10:28:b7:eb:3c:05:27:78:aa:bf:2a:8c:d5:5e:9d:5a:3d:
80:1d:96:05:b0:40:33:aa:77:a8:26:2c:dc:99:fd:25:b5:23:
2a:3b:fc:54:5e:38:7a:10:30:2f:4a:a7:56:d1:41:86:0a:94:
01:2e:f5:da:50:e0:00:34:73:3b:96:e8:a4:e8:2b:7b:8c:ea:
b7:52:64:fe:82:56:91:ba:77:fb:25:64:af:a1:64:b3:74:10:
f4:d4:a6:db:61:60:c2:ce:a9:a1:66:c8:e4:92:20:29:9a:c0:
06:d1:0a:23:14:ab:03:fa:5e:41:a0:08:1d:e0:a6:65:f8:a8:
ff:d3:6b:9c:10:96:ed:10:2e:ff:8c:fe:c3:17:9e:6f:07:10:
72:e6:3f:2a:5e:22:5b:bf:51:3c:a0:e7:49:42:c8:11:7d:da:
c4:c2:03:c3:a5:cf:bb:7f:a6:07:4d:a7:43:54:35:ce:ef:26:
34:56:db:5f:1d:e7:33:1c:fd:0d:e7:df:32:9f:74:80:c7:45:
8b:e7:a8:bd:03:4a:3c:1a:26:63:54:88:fe:9e:29:7d:c0:3c:
30:ad:29:f3:e4:5b:83:0d:26:7c:9b:67:82:2d:43:80:4e:67:
73:3c:a9:39:0e:56:b1:76:b1:36:f2:ac:fd:5f:6d:f0:33:39:
48:1d:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:24 2025 by rpki-client