Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ec792123-1f9e-3433-a292-3dbe37f12fac.roa
File: ec792123-1f9e-3433-a292-3dbe37f12fac.roa (raw, json)
Hash identifier: Yfio4eS8vB4XBH4SL3A4D9r5lpjRwxM0d/2AsjE194A=
Subject key identifier: 8F:10:48:D1:14:5C:FF:FA:0A:DC:8C:0B:7D:AD:82:71:66:5A:C1:6F
Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial: 010D0C9F43285848D7A6435532DE85A7B1992640
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ec792123-1f9e-3433-a292-3dbe37f12fac.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 376
IP address blocks: 206.167.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:43:55:32:de:85:a7:b1:99:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=be8178eb-da7b-469e-a525-530d30e4b32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e2:ad:db:fb:51:d9:13:52:6c:1b:81:25:5a:
a3:8b:c5:ac:06:13:31:03:08:29:a9:9d:13:3f:c1:
4c:7f:1b:12:0f:91:20:65:f8:6f:0f:b1:83:6c:ae:
3a:d6:71:17:6c:6d:ee:f9:4d:c1:30:c4:4f:9a:7a:
52:7f:84:5b:a0:45:ee:33:68:75:cc:ad:e8:ed:f2:
1f:c4:ba:b6:c3:3b:0e:ba:23:fa:16:29:57:d2:41:
d1:41:9c:06:45:79:65:3b:bd:df:4b:1c:b4:35:86:
25:b9:30:17:7d:86:39:4d:ee:d6:1b:9c:59:0c:9b:
5c:0f:ee:e8:67:8c:83:e6:33:95:05:64:31:5b:96:
b4:de:a7:67:c9:ce:9d:56:d9:06:95:11:9d:18:c1:
a4:49:de:55:6b:ff:c8:76:b6:4f:0a:6d:36:84:bf:
88:66:3d:31:ce:25:28:23:fc:8e:d2:14:48:f9:38:
b8:97:b5:5e:a8:69:db:3e:1b:cd:78:0e:df:d1:46:
08:55:4b:c6:22:ac:0b:6e:1e:1d:a6:e0:88:a2:8b:
c5:ad:b7:92:65:a4:a2:32:00:37:06:8a:df:f3:13:
6f:3f:29:5d:28:b2:5d:d9:a3:cd:67:c9:5c:e7:bc:
39:c1:8c:54:f3:35:8e:77:3c:06:4e:b7:11:e4:79:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:10:48:D1:14:5C:FF:FA:0A:DC:8C:0B:7D:AD:82:71:66:5A:C1:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ec792123-1f9e-3433-a292-3dbe37f12fac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
X509v3 Authority Key Identifier:
keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:38:dd:67:07:af:b7:fb:a3:52:17:04:d7:bf:98:13:20:c7:
b2:06:88:47:c8:18:c5:4d:66:9c:7d:31:ca:a2:18:3f:ee:40:
27:66:94:4b:55:d2:9b:b8:43:5c:8a:75:38:76:9a:ea:75:67:
6b:42:7f:11:ca:e0:bd:69:4a:47:d6:8b:97:ff:ff:fd:98:d7:
22:2c:f0:89:49:81:98:5c:9b:91:09:49:84:10:94:30:7a:41:
44:d2:b9:a2:11:1e:50:7d:57:40:22:e7:b7:a3:22:97:46:0b:
00:e8:83:bf:25:27:91:f9:92:d1:ad:73:00:39:ce:1f:7f:39:
ad:21:53:19:f3:d1:8e:0c:fc:3f:43:7a:da:95:2c:b9:25:b0:
87:a0:fd:77:15:56:67:cc:ac:0e:f5:eb:e9:a6:3e:bc:d4:78:
82:9d:dd:18:08:7e:82:10:b7:68:57:91:df:cd:26:0f:cc:9e:
55:ef:41:f1:66:90:8c:2f:4c:31:1a:d5:df:12:f4:d5:e8:0b:
37:a4:b3:11:d4:bc:5d:88:e9:93:dc:d4:e2:be:82:cc:8c:e9:
8c:a9:9b:fc:23:ee:0b:35:f4:61:1c:94:43:54:71:9d:1a:b5:
ca:78:8d:9d:3d:41:2e:d9:61:1b:38:2b:fa:8a:fa:71:37:fb:
99:e9:1d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:45:44 2025 by rpki-client