Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/acd65c2c-0570-3dbd-8416-30e89cccdd5b.roa
File: acd65c2c-0570-3dbd-8416-30e89cccdd5b.roa (raw, json)
Hash identifier: IabOOyMZ1KtqRaBHxKDYNpM3xJDnGkJ3E/ztD9blFzk=
Subject key identifier: 94:C7:57:4B:74:35:F7:35:22:E6:D9:86:25:51:B0:D6:F2:44:A3:00
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848A1361B3E4826BC5BA5522480
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/acd65c2c-0570-3dbd-8416-30e89cccdd5b.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 11090
IP address blocks: 206.55.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1b:3e:48:26:bc:5b:a5:52:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=c1f28169-8b46-41c3-a8d9-2516a05c8a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:e5:02:54:8a:d3:29:d3:12:16:3e:ef:bf:
4d:9f:5d:4a:0d:3c:37:d2:33:bd:5b:7f:47:54:04:
e6:05:26:37:0f:1c:85:59:cb:1d:59:aa:0f:d9:88:
48:9c:ee:2d:81:38:70:cc:cf:f0:11:b1:7a:57:54:
1f:3c:7c:ac:e8:13:9c:66:51:f2:3b:bf:6c:20:b3:
8e:95:ee:69:d6:53:cc:35:8d:97:2d:a1:68:58:e5:
b0:f2:6c:42:64:25:8b:98:10:fd:07:0c:05:03:06:
7c:28:71:7d:cd:59:d5:7d:03:92:b4:f9:b9:47:8b:
6d:26:2b:f2:aa:48:99:23:e2:a5:f8:69:d0:0a:50:
c8:d6:7f:f5:6d:e5:37:a6:e0:e0:f4:7f:9a:22:ec:
19:96:3d:6d:87:92:27:23:27:3e:68:94:99:f0:65:
24:9f:8b:f0:b4:a9:4b:d0:22:c1:d8:34:5a:76:c3:
3b:c0:cf:22:26:0f:bc:13:e1:04:91:17:dc:fd:8b:
5c:e9:1f:fb:1e:14:fd:1c:24:9c:c2:e0:55:6f:05:
2f:49:81:2f:84:ea:ba:b8:b6:5a:4a:70:47:a1:6a:
4b:ef:f9:2e:cd:fc:9c:4c:56:cf:7d:72:50:aa:e7:
61:f4:3b:85:d9:b0:03:f5:be:c9:b9:c2:dc:2c:35:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C7:57:4B:74:35:F7:35:22:E6:D9:86:25:51:B0:D6:F2:44:A3:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/acd65c2c-0570-3dbd-8416-30e89cccdd5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
206.55.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:c8:d0:03:fc:e7:1e:77:39:47:00:6d:ca:83:1a:d3:01:87:
dc:40:25:ea:37:ac:d8:1d:4b:bf:8c:40:8a:f9:a5:ec:56:55:
12:88:cb:3f:f2:17:c1:60:d1:12:5f:25:8b:57:95:0e:74:c4:
3b:56:71:c3:08:83:8a:70:11:3b:97:7b:97:38:24:53:2a:fc:
66:78:40:f9:4f:7d:55:98:64:90:0b:ad:47:2e:a5:ff:61:43:
4c:58:04:fa:c2:2d:c4:a1:7e:ef:48:14:1b:70:aa:51:59:96:
25:71:63:d8:97:1d:a9:d9:ae:2f:51:5a:7d:17:eb:bb:a1:d9:
49:29:84:f4:97:71:75:8c:11:13:2d:f9:d0:d0:be:f5:a3:d8:
7f:71:8b:aa:db:d4:46:c2:c2:27:2f:af:cf:29:62:7d:9b:ed:
f6:3b:af:0c:cb:6a:d4:fc:7c:2e:89:68:64:30:22:84:ea:2c:
76:51:df:ca:32:ad:b3:54:ca:1e:86:50:b6:47:57:ee:ad:90:
bd:26:33:dd:13:cd:cd:89:f0:ac:ea:16:28:b6:3b:26:07:c1:
f3:af:ab:ef:9b:ef:c5:f1:a0:87:1c:d0:83:ac:3e:91:4a:87:
e0:1b:d1:fe:8f:04:60:a6:23:18:57:da:4f:45:29:1e:63:ac:
18:9a:98:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:09 2025 by rpki-client