Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa
File: f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa (raw, json)
Hash identifier: evg8sAVjN61UAZGaVv0HuxhSpX5EbGUHyE7TOmg6GOQ=
Subject key identifier: E9:93:30:EC:22:E0:D8:06:52:28:45:E6:26:06:E3:DD:1D:17:77:E9
Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e
Certificate serial: 010D0C9F43285848E16BEBC2987500ADD16FE200
Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 33211
IP address blocks: 206.41.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:eb:c2:98:75:00:ad:d1:6f:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=07bb2a08-b592-47d4-9df7-f9ab30e17f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5a:14:11:c6:87:a3:a5:e0:4e:16:59:52:e5:
29:a1:8b:51:96:2f:dc:2c:13:64:34:7c:8e:c8:1e:
db:cf:d0:22:67:d1:cb:b2:aa:44:4e:8f:b0:fc:32:
fd:cc:84:b4:f4:67:b8:b9:3f:40:c1:89:e3:b3:05:
18:46:29:6a:ad:94:58:c3:8b:96:a8:23:02:6b:e9:
0a:23:72:c9:38:e3:9e:13:67:2c:ee:a3:c2:6e:19:
c2:14:87:e3:6a:de:08:55:34:0f:72:77:85:d2:c7:
dc:ca:cd:50:9e:61:31:7b:25:2b:72:8b:a6:11:3e:
4d:fd:30:e0:b7:ac:e6:b2:4e:bf:37:ba:c3:12:2b:
af:5d:df:f1:e8:ed:82:a2:ef:1b:d6:0f:69:8b:48:
b2:de:f4:20:b1:64:5e:21:9b:c3:d3:e0:56:0f:43:
d5:bb:e5:b5:37:2a:d1:5f:19:ec:72:1f:57:ee:e0:
6a:d6:c5:df:ce:45:e9:6a:98:21:2f:0c:a4:26:95:
07:5d:e5:9a:a2:4d:da:d1:96:24:73:69:0e:71:8f:
a7:69:e3:e1:fa:b1:8d:b2:6c:25:cb:c1:ad:cd:b7:
34:d0:2c:fd:1a:00:63:a2:9f:dd:11:df:2b:57:55:
e6:25:e0:96:57:b9:95:c9:40:65:05:04:34:87:32:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:93:30:EC:22:E0:D8:06:52:28:45:E6:26:06:E3:DD:1D:17:77:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl
X509v3 Authority Key Identifier:
keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:1e:c2:6d:2a:f2:d1:c7:be:d0:8b:b7:c3:8a:59:a4:70:ac:
cf:ba:54:4c:76:1a:55:59:f4:cf:5d:68:c9:7d:34:25:1c:dd:
de:5f:01:0d:ff:d8:c2:48:1e:36:f6:89:ad:80:fc:65:eb:f0:
a6:a9:0b:e9:d5:33:07:cd:f9:0d:29:a3:51:27:26:82:35:41:
07:10:22:b4:42:fa:f6:a8:56:6f:92:ca:6d:54:8f:89:f2:5b:
18:af:01:a9:a6:d1:ea:07:8a:c0:c3:3d:01:a1:81:20:fd:b3:
94:c2:e8:5e:b7:31:da:df:77:e8:c8:c3:ab:bd:65:bf:d0:36:
9f:6b:68:25:34:5f:2a:4e:d1:0b:75:c3:8d:d4:18:74:da:2b:
ad:62:2b:d7:8d:75:d3:19:64:2b:8d:49:cf:91:1a:96:23:91:
cb:32:a1:4a:bb:4a:fd:0a:ee:d7:1e:2f:60:6f:6d:3f:44:94:
4a:c1:d8:2f:d4:66:36:ae:0c:a0:99:07:54:00:9e:6a:a9:bd:
bf:3e:19:c8:f8:1f:f9:5a:2e:dd:ae:79:14:3a:4d:e9:d7:a3:
1d:0a:fb:4a:67:1e:11:9b:7a:72:e4:10:7f:15:e1:9a:3d:1d:
e5:6f:35:35:56:7c:60:6a:ea:69:d8:9d:94:ca:5c:42:d0:f9:
92:db:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:17:41 2025 by rpki-client