Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/987c82e5-cd4d-31a5-9d05-595685ddaaa6.roa
File: 987c82e5-cd4d-31a5-9d05-595685ddaaa6.roa (raw, json)
Hash identifier: 887cEW8F3s9qvFyFoks5faMk9hbKbi/WJIqjF9ki7WY=
Subject key identifier: 10:8C:19:F4:6A:C3:7C:4B:51:0A:EA:32:C0:3C:53:74:70:01:00:A3
Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial: 010D0C9F43285848B8F0C056B9DBA7F1284F3A40
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/987c82e5-cd4d-31a5-9d05-595685ddaaa6.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 376
IP address blocks: 206.167.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:c0:56:b9:db:a7:f1:28:4f:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=bdd76e3a-9c26-49cb-aded-dc69c395b267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f5:98:9e:c8:95:fe:0f:0c:68:16:69:c9:30:
75:c1:16:e7:c5:33:57:c0:64:66:2c:20:b4:ee:cf:
2c:52:65:7c:9e:31:56:db:b5:68:84:45:03:cd:3f:
69:a5:57:20:b4:b2:cd:c8:82:70:35:ad:70:23:d4:
4f:61:a8:94:83:b2:56:3b:eb:a8:73:41:09:58:94:
e2:34:53:fe:d6:e7:59:7d:b0:95:06:a0:09:99:61:
22:92:e8:4f:2d:bb:e2:5f:54:7e:e8:a8:7b:8e:49:
5f:c7:2c:5f:9f:fd:1b:bd:8b:9c:3c:55:e2:30:db:
14:d6:fb:85:ff:d9:73:8f:22:6f:eb:05:fb:34:2c:
ba:2e:d9:42:03:67:41:e9:92:4d:0a:ed:3b:d0:d1:
ea:56:6a:b2:d9:4c:f8:a5:10:9a:fe:10:18:da:25:
b8:e5:96:29:0f:ce:32:a5:e6:6b:60:da:1e:4f:9a:
8f:59:9b:27:19:79:d9:5d:12:a7:00:9d:17:4f:91:
c7:48:d2:66:cb:eb:af:87:cb:2c:e3:07:3a:13:a0:
c0:15:60:02:d9:6d:90:e6:01:7c:24:37:83:3c:3c:
fe:eb:22:6c:03:60:b4:39:fa:f7:c7:b3:fb:ec:52:
99:da:17:8a:2c:77:21:68:4c:7d:95:63:6b:63:e8:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:19:F4:6A:C3:7C:4B:51:0A:EA:32:C0:3C:53:74:70:01:00:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/987c82e5-cd4d-31a5-9d05-595685ddaaa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
X509v3 Authority Key Identifier:
keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:f8:0e:65:69:2e:d1:1b:ed:25:09:bd:94:9d:03:b4:eb:0c:
04:e4:17:0f:33:2b:fb:fd:c7:24:9d:c7:3e:32:51:ee:e9:d2:
67:94:d5:84:75:ad:92:d7:5e:2a:f7:18:4f:f2:16:95:c7:eb:
5d:72:f9:39:05:9f:d5:0f:dc:9a:58:47:c8:3b:4f:89:d1:95:
0c:4a:14:f6:70:c8:6c:1a:df:49:cc:ba:10:cc:2e:da:f0:8d:
24:e5:0c:a4:d2:80:51:8f:35:72:8c:71:f8:30:cc:3c:a5:34:
64:31:e0:ed:bf:35:0c:ce:d5:f6:8f:10:1b:d0:51:f4:91:69:
c3:cd:af:ee:b4:42:0f:1a:9d:1e:27:ab:16:7a:be:0c:1f:f4:
17:3b:b2:b2:78:04:a8:d5:d9:21:10:88:ac:1d:16:86:04:9b:
cc:9f:e5:88:4f:04:07:f8:36:02:46:fb:a3:1b:dc:89:cc:e3:
80:6e:90:db:8f:c2:7b:e5:55:69:85:13:c0:8e:1f:49:a8:26:
f6:86:51:6b:56:93:85:f2:93:2b:8d:a0:e3:f9:4c:f8:9a:a8:
c6:76:c9:3b:af:17:60:e9:9b:c7:55:d1:f6:c5:f4:19:b7:0f:
6a:02:f2:45:e6:4a:b6:c9:c5:d2:41:c9:b7:26:6e:72:fe:8d:
d0:45:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:30 2025 by rpki-client