Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/df094277-d2bc-383c-bec8-1ab56e3af9ef.roa
File: df094277-d2bc-383c-bec8-1ab56e3af9ef.roa (raw, json)
Hash identifier: 4KbBz0qWFnx4BSP0hcncN/46HI3QJKzrfS3Kcq2swrs=
Subject key identifier: F3:19:8B:9D:32:A2:97:70:99:0E:39:7D:AE:BD:0D:F0:47:47:D2:D4
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848F926AF26515C1416F9309E38
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/df094277-d2bc-383c-bec8-1ab56e3af9ef.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 25899
IP address blocks: 206.192.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:af:26:51:5c:14:16:f9:30:9e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=0aaf2857-0dfb-40cd-a692-285f3dcb1a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:36:10:01:cd:d0:8c:92:88:18:f9:cc:6d:
f7:bf:98:70:ea:16:37:6f:73:5c:43:94:58:f5:47:
c5:74:ef:b4:b8:be:8a:23:97:9f:94:da:63:1c:17:
5d:ce:70:ae:99:39:eb:76:d3:cb:cc:84:07:59:53:
2c:92:47:3c:68:3e:33:44:6d:14:6c:02:9b:9b:53:
79:e8:7e:3b:3c:cf:ef:4d:86:19:45:bd:56:f8:7a:
7d:23:0f:92:d5:52:ca:42:9b:ad:af:70:46:48:13:
39:cf:3f:5e:63:e4:f6:2e:2c:eb:9a:86:a6:b2:11:
e6:37:e1:e0:e5:da:85:22:8f:d8:68:c8:23:f0:6a:
1e:20:80:83:95:53:ca:24:17:ee:9d:7d:e1:9e:9a:
98:7c:c9:c6:92:a8:21:8a:01:f6:a6:96:8d:25:e5:
2b:83:71:64:b2:3d:7a:9d:ac:c5:80:dc:77:5a:3f:
5a:be:02:88:5e:d4:35:0e:17:a1:15:92:e4:d4:2e:
3b:f6:a8:ed:c4:e7:8b:e8:17:76:ef:cb:2a:ea:d7:
1a:15:6b:de:29:c2:bc:4d:8f:22:cc:35:c2:a4:67:
79:51:c0:b9:74:00:b0:ec:7f:af:af:89:fd:2f:b1:
40:b7:c6:bb:81:04:ef:63:3c:b5:83:62:51:18:92:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:19:8B:9D:32:A2:97:70:99:0E:39:7D:AE:BD:0D:F0:47:47:D2:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/df094277-d2bc-383c-bec8-1ab56e3af9ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
206.192.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:60:fb:5e:9b:bd:70:ae:6c:1f:06:75:df:18:89:ca:93:dc:
29:7e:d7:6c:26:ba:37:cb:b8:3c:8e:8e:25:b8:42:24:2f:47:
65:a5:15:a4:a8:a2:54:66:19:66:fa:63:aa:fd:2a:b8:de:da:
69:a8:5c:72:b4:ef:18:54:d1:49:85:9a:4d:bc:42:df:bd:37:
e0:bb:1d:29:38:5c:99:b9:b3:c9:32:90:2f:7e:f7:fa:c8:36:
cf:ea:ad:f7:da:3e:17:95:80:12:6f:e2:eb:8f:68:a9:04:9d:
77:e3:41:69:41:2f:7b:a0:46:0b:a0:78:07:d3:1b:7e:f8:15:
50:94:7c:25:73:73:5e:c7:c5:b1:25:c9:20:3c:15:d9:34:87:
57:8c:90:e9:8b:31:43:47:cd:fc:77:bc:23:7d:88:9a:6d:d3:
b2:f2:ad:49:74:64:f4:40:7a:98:57:ab:7a:1a:2b:97:2b:30:
93:e8:95:88:e0:bf:15:50:cc:72:61:9e:38:27:6c:94:dd:ef:
bd:5e:34:02:73:3a:1a:8c:69:d5:6f:bd:f1:b0:6b:ac:e3:64:
a6:e2:dc:ce:d6:e7:05:6b:8f:0f:87:7d:aa:ef:18:66:af:e0:
f0:6f:60:e0:f5:66:5a:27:a7:df:0b:ea:59:34:1a:50:94:18:
e1:22:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:08:38 2025 by rpki-client