Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/e4cdbcf4-77b1-39c8-b5f4-d31a97c04f2c.roa
File: e4cdbcf4-77b1-39c8-b5f4-d31a97c04f2c.roa (raw, json)
Hash identifier: 0WnlQoiBmai3gMJ8FyuipGkYJ+4H/qzb0+Z6n2EKap8=
Subject key identifier: D8:7E:1C:CF:00:41:A1:EE:B6:1E:BF:B1:EB:74:F9:86:AE:23:14:EE
Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial: 010D0C9F43285848E8667D28A7A4004A619A4380
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/e4cdbcf4-77b1-39c8-b5f4-d31a97c04f2c.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 376
IP address blocks: 206.167.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:7d:28:a7:a4:00:4a:61:9a:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=86977452-e1a8-462f-ad4d-e0711e923a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:99:4d:fa:db:27:4e:ae:eb:2a:a1:9e:fe:
e7:83:4c:01:6a:f8:7a:fb:bb:75:7f:8a:82:f9:03:
4b:80:99:28:8e:38:48:ea:81:c4:68:f0:80:ed:05:
05:77:05:42:8c:a6:c7:99:0d:15:70:58:5e:e2:18:
4f:33:0a:d9:cd:b9:65:f4:92:f7:82:0f:f8:51:f7:
f6:01:42:e2:6b:7e:95:0f:6a:20:81:4c:d1:11:ee:
73:65:05:a3:b6:ba:f2:e2:3d:a6:7d:6e:d5:5d:9f:
9f:b1:40:c3:01:cb:03:09:33:a7:89:70:71:1d:3c:
47:2f:7d:08:d1:d9:0b:79:6f:ee:e6:a9:e5:c2:b0:
bb:45:ed:94:81:92:3e:63:fa:e2:14:6e:e0:f7:58:
c5:cd:cd:c6:44:39:3b:11:98:47:99:39:2b:f7:58:
93:e9:a9:ce:57:59:28:b9:7b:3e:07:9f:25:a2:8c:
f6:e8:cf:54:de:c9:60:97:f5:fc:f4:64:13:69:54:
6c:a2:b2:02:11:04:46:08:4f:3e:ee:58:86:8d:24:
1d:62:8f:a6:1c:3c:b8:da:1d:65:98:65:4b:4e:3a:
50:eb:36:26:f0:f7:dc:20:7a:eb:7a:93:49:79:f7:
bf:70:b5:b9:c4:55:96:76:34:3a:0c:b4:60:90:12:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:1C:CF:00:41:A1:EE:B6:1E:BF:B1:EB:74:F9:86:AE:23:14:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/e4cdbcf4-77b1-39c8-b5f4-d31a97c04f2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
X509v3 Authority Key Identifier:
keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:f0:aa:93:9c:4b:da:55:c0:e2:7d:fa:7e:4b:65:d6:a6:9b:
20:d6:c2:59:e3:2e:6c:1e:8e:77:f7:d2:e4:47:f8:9c:dc:5e:
99:b9:53:f6:df:f8:a8:86:39:35:b9:ff:5c:e2:cf:8d:18:aa:
03:ab:eb:56:c4:e6:f3:1d:61:82:8e:6e:06:6a:6c:28:32:26:
ef:a4:ae:ad:51:8e:01:91:f3:b0:c3:a5:d7:0e:6b:95:d4:70:
23:f8:9d:42:ac:01:d3:1c:14:56:a5:bc:f7:c7:10:19:88:a2:
51:1b:4c:b4:52:3c:93:76:fb:68:87:e6:13:6e:55:d4:fd:85:
02:9e:ee:2f:95:1d:f7:a2:a6:32:49:33:47:aa:8a:28:a9:cd:
92:a0:2d:e7:7e:1e:c5:f3:7e:2d:87:7f:7c:6a:cb:bc:c0:4c:
d3:3d:14:a7:c5:13:82:af:5e:c6:9d:6d:a1:35:66:fc:e4:c7:
31:bc:49:70:a0:20:e1:61:7f:e6:b7:c5:48:c7:71:4d:e4:f6:
f7:f6:c1:33:f7:fd:fe:51:1f:ab:30:87:a1:81:a7:77:bc:6f:
1d:86:56:fa:81:59:e3:7e:4e:e6:17:b8:7f:51:df:82:da:5a:
b0:02:3b:81:aa:38:97:34:b9:87:63:f1:53:9e:9b:41:7a:b3:
1f:f4:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:51:46 2025 by rpki-client