Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
File: 62dd0302-3085-3f70-8edd-449ecdbc6149.roa (raw, json)
Hash identifier: n7dnbQ0ZsT+p+Lb3GUytq6/Ji9RPL91wEWLtDLB1uR4=
Subject key identifier: E7:F5:79:77:33:0F:BE:A0:3C:D2:54:1C:3A:66:BA:AC:34:10:23:B7
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F43285848E16BEBA8047219782ABBC240
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 33211
IP address blocks: 206.41.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:eb:a8:04:72:19:78:2a:bb:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=c37f28f2-563d-4f2f-9879-b26519451242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:f4:34:ea:59:48:68:43:ce:42:e1:70:f3:
21:b5:34:06:5c:0b:7a:83:5f:8e:8e:b9:6d:e7:4e:
a8:e4:53:05:c8:78:f2:b4:fb:ca:4b:5e:3f:e8:66:
86:af:5e:6c:f5:c1:62:6a:95:ba:3d:4b:36:af:64:
1e:2e:f8:6e:d7:fd:ba:0f:e9:5b:b3:fa:54:8f:b6:
91:c2:b9:8d:9c:00:71:43:31:20:c7:77:08:13:ae:
94:50:21:a2:1b:a2:75:55:90:f6:3b:76:70:3e:7a:
be:8c:c5:69:5b:c1:ba:a3:88:1a:2d:02:9e:76:97:
a1:3f:c0:bd:27:f5:50:62:e3:c1:85:ef:58:38:26:
12:b1:ce:77:49:ba:22:ad:c9:9f:90:b9:ee:f2:ca:
de:25:ad:dd:bb:c3:ac:20:71:51:da:32:99:22:d0:
ff:a8:fb:f4:d9:f9:0a:ff:0e:24:15:02:53:26:44:
35:fa:55:36:d4:60:2b:97:7c:40:ed:ef:c0:6f:f5:
b1:ad:98:04:a2:09:ee:22:7d:30:b1:87:5c:5e:e5:
04:4c:23:94:1e:31:06:ed:71:86:ba:9e:5f:e5:72:
c9:fd:b1:f4:26:3b:af:4b:b9:b6:59:b6:40:7c:c1:
e8:db:5c:58:66:04:d8:02:8b:6a:38:78:c8:b9:f2:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F5:79:77:33:0F:BE:A0:3C:D2:54:1C:3A:66:BA:AC:34:10:23:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/62dd0302-3085-3f70-8edd-449ecdbc6149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:77:3f:0b:da:c7:0e:3e:da:db:3f:0a:d1:2c:bc:79:b6:6c:
3b:5a:e9:fc:4f:98:b5:31:c1:99:8d:79:57:6b:b7:fb:cb:9f:
ee:d0:8a:50:4c:4c:46:36:67:f5:95:8f:90:39:77:e9:5e:6e:
60:9f:eb:4b:51:6b:80:5d:98:6b:7c:2b:38:fe:53:26:73:39:
10:51:81:af:b5:e3:bc:5d:45:be:a7:19:67:1b:21:0b:20:eb:
1e:ff:e7:06:f4:93:cb:40:59:6b:33:21:74:98:97:9b:2d:26:
89:bc:f6:8e:d4:61:10:73:93:88:8b:9e:43:b0:a6:6c:b6:58:
c7:ca:0c:c6:a1:1a:a2:61:30:24:dc:35:48:86:b8:41:ba:84:
0a:fe:39:18:50:04:28:45:22:d9:d1:b2:ab:58:92:ed:99:9a:
cb:62:21:0c:f5:0e:90:a9:45:af:95:f2:e6:fd:15:f3:75:e3:
9b:5d:f0:0f:12:38:f5:d2:9b:58:80:56:ba:af:c4:6e:68:75:
9f:a4:39:b7:94:c9:d6:34:c8:ab:63:da:8c:aa:e0:70:75:7d:
4f:7a:b4:1e:ec:cf:5d:b4:9d:7b:8d:dc:d6:de:25:50:bd:e4:
f3:16:6c:8a:13:5d:90:c3:d9:b8:6f:6d:1e:3a:37:9a:73:64:
f6:53:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:43:16 2025 by rpki-client