Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/0f1cf2d1-b304-3b6e-99d4-81663c98da1e.roa
File: 0f1cf2d1-b304-3b6e-99d4-81663c98da1e.roa (raw, json)
Hash identifier: rB6+agnsqP2Vi++gw/lV5Fup8PSaSuW8OnolDIgPOX8=
Subject key identifier: 84:A4:EA:EB:C7:F8:59:DA:75:B5:26:58:3F:25:94:16:18:D0:A1:91
Certificate issuer: /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
Certificate serial: 010D0C9F4328584894A5E30D65B30D5440B87F00
Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/0f1cf2d1-b304-3b6e-99d4-81663c98da1e.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 396982
IP address blocks: 206.222.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e3:0d:65:b3:0d:54:40:b8:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=57a3430a-0ab4-4f7e-a651-de3652b15f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:f1:c2:a0:62:f9:83:0a:90:50:e5:06:b9:
87:27:24:f7:06:02:6d:ed:83:1e:25:9f:52:d2:8b:
8c:61:ed:79:4f:af:40:59:60:a9:00:5c:37:ce:3c:
c9:a6:40:0c:9a:d2:e9:9b:ab:12:36:0f:93:9f:3b:
69:71:6d:43:4b:11:fd:54:56:ef:19:4b:45:81:bf:
a2:ef:fb:17:b8:4e:6e:59:12:cb:10:48:5e:44:87:
e1:45:42:9a:ba:e3:e2:fe:ec:63:af:4f:4e:9b:11:
3c:76:5b:84:f8:a0:4a:9a:89:f5:86:6d:1d:24:34:
da:02:55:fe:37:1b:94:44:04:73:f9:33:ec:b5:1d:
d4:cb:e6:3d:ad:76:2b:90:5a:8a:5e:30:73:7a:bf:
cd:90:4b:ef:94:de:d9:a7:78:fc:e5:da:aa:b1:be:
c4:23:af:0d:52:ad:64:e7:4f:b4:d3:54:4a:97:13:
f4:71:7d:11:86:e0:e8:b0:7f:80:b8:75:54:8c:c9:
ce:b6:00:0a:1d:4b:ea:59:36:b8:14:27:09:11:31:
19:e5:6a:05:6c:4c:fd:a2:a6:e9:b4:33:13:90:34:
29:20:2f:75:e1:fa:4b:65:a2:a9:33:ce:ef:07:f1:
e2:de:db:66:d3:46:c9:01:18:c0:47:84:ae:86:3c:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:EA:EB:C7:F8:59:DA:75:B5:26:58:3F:25:94:16:18:D0:A1:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/0f1cf2d1-b304-3b6e-99d4-81663c98da1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl
X509v3 Authority Key Identifier:
keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
sbgp-ipAddrBlock: critical
IPv4:
206.222.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:a7:b9:e5:d0:54:47:77:06:37:d5:7e:13:5e:8b:9a:91:21:
30:f3:61:ef:bc:3a:90:64:c3:a5:fd:ba:91:9b:80:da:6d:80:
a4:e9:6e:b8:c6:f5:39:f7:bc:ae:df:2c:d3:bd:e3:a6:01:62:
2f:32:ac:3c:13:c7:67:13:8f:0c:ca:6b:fb:0b:0a:62:20:9e:
df:9c:bf:a1:11:15:a8:9a:66:6e:7c:41:18:e0:31:41:b5:2e:
dc:36:51:e5:3a:fa:be:ac:0b:f0:09:d7:64:67:70:ae:52:ea:
4c:69:73:2f:7a:6c:f8:1c:e9:9e:11:67:4f:52:ec:94:d0:0b:
25:e4:d0:da:6a:b1:ca:63:ee:00:2f:05:b5:ec:58:7d:fc:82:
1e:52:8f:15:83:6e:b8:20:9d:1e:9b:79:23:27:8c:09:b1:f1:
67:2d:76:0b:b4:2a:4a:d5:5f:8f:d7:7a:84:8a:95:ef:b0:04:
f8:0a:61:67:0c:f7:52:b0:10:dc:6d:99:a2:67:23:69:6d:5f:
28:f9:0e:13:a8:a0:65:58:7b:a1:a7:ea:e9:fb:2b:75:59:3e:
80:5a:97:c0:86:e6:7c:7d:f0:36:c0:c8:75:69:ee:c8:59:7a:
38:30:24:76:b6:89:eb:e6:03:80:8e:db:54:f5:9a:4f:f1:8a:
1b:14:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:08 2025 by rpki-client