Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2243b43a-ebc3-3153-8bc3-77c738ad1480.roa
File: 2243b43a-ebc3-3153-8bc3-77c738ad1480.roa (raw, json)
Hash identifier: fLsZTu1LtA+bEVFV+4HHbVW8n+VN7WdzHt0YSmDP0JI=
Subject key identifier: BD:B9:BD:03:24:03:99:0E:08:57:94:83:FE:9C:83:31:4C:30:52:CF
Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial: 010D0C9F43285848E00652F95540878292D43300
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2243b43a-ebc3-3153-8bc3-77c738ad1480.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 376
IP address blocks: 206.167.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:52:f9:55:40:87:82:92:d4:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=5456006a-a931-4a7e-86aa-e1721bd433aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:fa:ac:ea:41:db:88:66:07:78:7a:9b:1f:
21:d7:51:62:9e:e1:c5:20:15:d8:03:7c:40:29:e4:
b4:77:c5:a6:33:70:1b:23:40:89:1b:90:30:5d:5b:
c7:ec:ae:87:de:41:6c:9c:9f:d0:e2:59:4e:31:aa:
85:fa:57:75:82:f9:c4:3f:3c:94:3f:d8:50:b3:69:
50:f8:df:10:a3:3e:a9:6e:93:62:84:f7:9f:56:f2:
7c:a6:66:0c:c8:76:64:9c:ed:8a:3d:fb:f1:cf:c7:
02:b5:b6:22:17:95:6b:0a:a6:aa:7e:89:7f:99:a2:
6b:fa:ab:2b:b0:6f:0a:8f:3b:bd:ea:e9:db:74:25:
9c:d7:fd:c2:99:52:ec:45:1f:5d:9a:c2:a1:ee:36:
c8:5d:20:37:58:a5:b7:8c:17:a8:04:b4:1f:fe:68:
94:03:1f:ed:72:06:25:f5:ec:99:6e:94:ce:7b:b4:
b5:45:5e:33:83:39:f0:3b:cd:61:dc:ed:ef:0c:c0:
70:10:06:30:7b:80:99:d2:56:cd:3d:c0:ed:92:3f:
85:42:70:19:14:66:42:b4:e2:4f:ce:89:bb:9d:5f:
e9:d1:0f:38:65:88:e4:31:eb:81:1a:9c:7a:d2:95:
8c:50:c4:69:6a:93:ef:3a:e7:0b:6a:31:d3:2c:51:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B9:BD:03:24:03:99:0E:08:57:94:83:FE:9C:83:31:4C:30:52:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2243b43a-ebc3-3153-8bc3-77c738ad1480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
X509v3 Authority Key Identifier:
keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:b2:e1:88:d8:44:8e:d3:d5:6d:49:2d:b0:e0:67:37:56:6c:
94:27:da:b3:06:93:0a:60:e8:29:9c:3e:e4:52:50:8f:94:da:
0e:b9:cf:9d:e0:54:f7:ae:12:10:1e:26:c4:cf:96:4f:b5:d0:
3b:5a:b0:9b:14:78:55:c9:cc:c2:2e:3f:76:b6:98:1b:80:f5:
a9:9b:cc:3c:42:d0:d8:98:28:1a:dd:56:64:77:36:c2:99:01:
6f:30:a2:96:d1:92:bd:b7:03:2d:7a:3d:a4:fb:2b:20:8e:e1:
8b:01:5b:64:6c:25:0f:ff:ab:ca:a4:39:70:24:0a:42:ab:9a:
43:12:a7:52:eb:ed:66:08:50:ca:c1:bd:54:30:ad:a7:a0:6f:
4e:d8:7a:61:08:63:67:1f:e8:8a:ab:da:4b:86:57:74:d2:d5:
98:9d:16:21:f5:cd:e1:c9:b4:07:31:4c:2d:f0:98:8a:92:98:
aa:5f:5e:b3:d9:41:8e:3e:e7:7e:20:cc:96:f4:2d:61:e9:13:
3d:6f:a5:43:e6:ad:08:8e:5e:c5:5c:d9:76:8c:1f:57:bd:1d:
78:ea:d3:e5:70:56:61:06:59:ed:37:93:21:0f:62:d3:52:ec:
76:60:9a:0b:ce:b6:2a:12:ca:30:19:bc:14:5d:7b:35:82:5a:
83:de:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:56 2025 by rpki-client