Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa
File: ced6341d-e795-328e-9371-e1a1f59d7ca0.roa (raw, json)
Hash identifier: 1n+ISN+01LLnlrWcKtlPPvgFKQJgrnDDkhCKaLcQUio=
Subject key identifier: 6F:35:7C:FF:D7:4B:E8:30:52:E6:A1:19:60:6F:A0:5F:42:DF:0F:65
Certificate issuer: /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Certificate serial: 010D0C9F43285848F926931A35242823DBCCF080
Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 397493
IP address blocks: 206.197.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:93:1a:35:24:28:23:db:cc:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=004c2c4d-12f6-4428-b04a-652992149092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fa:73:a6:1b:ac:ce:f3:b5:db:8f:af:ac:2a:
13:9c:82:f4:61:97:5e:03:4c:8c:e5:42:3b:d7:51:
d9:fc:67:c7:31:c5:75:f9:b4:90:9b:1d:58:72:0d:
3a:7e:9e:dc:48:38:e3:86:d8:de:7a:9b:d1:00:fd:
03:ac:e4:02:ae:e0:0c:7d:5a:f8:a0:53:99:70:d0:
ff:eb:b2:84:1e:68:1d:9b:b7:7d:44:98:2d:45:40:
d9:ad:21:b3:1c:53:8d:9c:6d:90:7f:dd:5a:e5:59:
9b:33:8e:3c:ce:5c:b9:ac:aa:1d:25:ce:a3:5a:ed:
79:0b:0d:5a:a7:4c:c9:b6:02:5c:d8:90:77:30:94:
82:36:d2:f0:4c:7b:c7:27:78:8d:2a:49:4b:cb:35:
68:fc:b8:99:64:79:18:b3:bb:a4:80:eb:70:da:f9:
e8:c7:b9:e9:90:c6:fd:b6:1b:a7:34:9e:f5:fd:bd:
e5:83:73:13:c4:d8:4a:80:c7:d3:e7:fb:cf:c3:17:
48:13:58:51:31:eb:b0:ae:8a:5e:d4:ba:53:46:47:
39:51:34:99:8c:75:4c:6c:bc:d3:b7:ad:7a:fa:52:
b9:13:62:b9:ba:c8:82:8d:a0:5a:b6:7e:5f:57:6a:
72:a7:28:71:fd:4f:1b:50:ad:ea:be:25:80:5f:44:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:7C:FF:D7:4B:E8:30:52:E6:A1:19:60:6F:A0:5F:42:DF:0F:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/ced6341d-e795-328e-9371-e1a1f59d7ca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl
X509v3 Authority Key Identifier:
keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer
sbgp-ipAddrBlock: critical
IPv4:
206.197.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:a4:89:cb:5b:87:37:45:33:5d:3b:56:c6:27:d9:0c:30:3d:
84:3a:39:7b:92:83:3d:7f:8b:7b:2a:76:1d:dc:da:b0:2c:07:
a0:bc:19:42:d4:3e:2c:27:34:cc:cf:81:a2:70:53:c1:e3:69:
57:4a:25:6f:3a:31:60:7e:c0:88:ee:97:c9:6d:a4:20:2d:2a:
27:19:30:95:29:61:bd:41:d7:0a:51:a7:99:66:90:ff:88:ee:
ff:87:a5:65:74:5b:1e:8b:b3:4b:b3:d5:f3:22:c6:38:80:4a:
93:42:a4:ed:e1:e2:17:fe:0a:cf:17:a3:8b:d6:25:af:2e:ac:
fd:ac:f0:11:81:e1:3e:a3:43:f7:76:18:23:fb:fa:d3:ab:d2:
2e:de:82:65:3b:e2:e5:a2:88:02:4b:bc:68:ca:6e:81:d0:5e:
7e:6c:70:ab:a0:eb:bd:f0:38:d6:08:de:eb:bf:24:a0:08:82:
8f:cc:d9:b7:af:bf:8b:67:89:3b:95:63:a2:65:17:64:05:05:
93:01:be:17:bf:d0:bd:6c:f8:a3:b3:bf:1e:2a:26:c3:11:83:
bd:94:b7:a7:e9:27:ae:b3:08:17:c2:4a:bd:72:9b:01:d1:25:
78:9e:e0:bc:7d:16:7b:00:a9:0a:17:66:af:71:c1:73:71:45:
1d:9d:5f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:11:16 2025 by rpki-client