Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/d3abd280-e5f9-3db9-b782-12d227437886.roa
File: d3abd280-e5f9-3db9-b782-12d227437886.roa (raw, json)
Hash identifier: /HpYhIZZ5u3OrVHemNKWL8fZH+vhbPgBivWBxIBQFgI=
Subject key identifier: 79:D1:77:EF:BC:0D:24:9E:D2:53:25:AF:CF:5D:C7:C8:29:70:E0:33
Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Certificate serial: 010D0C9F43285848C6E636700927F5DBAC548238
Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/d3abd280-e5f9-3db9-b782-12d227437886.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 0
IP address blocks: 206.41.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:36:70:09:27:f5:db:ac:54:82:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=3f3aded8-795a-49f8-bec2-02cf4027c08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:f3:56:77:bd:ed:09:6b:99:5a:b2:fd:b2:
38:a6:1a:03:c4:05:5f:e0:70:7b:f7:4d:fc:e0:66:
95:7e:9f:b9:26:e2:ee:51:74:d8:c3:f0:9f:90:9b:
5e:0b:1f:c7:0f:a1:3c:99:4a:2a:f8:38:bc:22:d2:
cb:a8:e4:62:e0:43:e3:df:0e:f7:42:95:42:5f:22:
f9:de:88:db:fa:ce:b5:af:76:f0:26:bf:56:c6:f9:
3d:67:27:e4:6e:e4:e5:16:54:62:d2:7f:f6:91:15:
64:b4:a0:d7:72:e3:3d:c0:4a:8d:ce:9e:a1:f9:d7:
f1:36:96:e1:a9:58:19:8b:84:b7:7f:6d:0e:7a:7b:
7d:3c:95:fb:d4:88:b7:d1:79:42:50:0d:66:15:88:
71:50:ae:21:69:38:1c:c7:34:31:d1:92:e3:18:95:
5d:92:41:80:90:91:73:9b:d2:09:b6:ec:42:6d:f7:
96:82:df:f7:59:b8:c1:8b:21:cc:5f:2f:d6:c1:77:
41:eb:eb:6a:65:40:b5:f4:e0:0c:7c:e0:2c:c5:f0:
03:18:ce:aa:3b:8c:4b:83:92:f5:39:05:7d:f1:cf:
15:24:c2:b5:02:e6:6f:6f:50:26:f0:93:e1:d5:e7:
b3:f5:61:01:c0:b9:b6:51:cf:ab:54:0c:9e:32:53:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D1:77:EF:BC:0D:24:9E:D2:53:25:AF:CF:5D:C7:C8:29:70:E0:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/d3abd280-e5f9-3db9-b782-12d227437886.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl
X509v3 Authority Key Identifier:
keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer
sbgp-ipAddrBlock: critical
IPv4:
206.41.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:5f:31:18:04:2b:9a:43:58:98:01:64:7a:04:fb:44:8e:12:
a9:1d:2f:74:c1:26:3f:3e:47:85:5a:05:08:28:a4:a2:79:84:
70:2a:ee:0a:01:9e:bc:f9:be:be:36:0d:67:af:7f:3e:b0:f7:
bb:c9:4a:d7:b8:c3:a7:f6:54:7f:2a:f4:7c:1a:2f:2a:fa:c4:
01:fe:da:a0:e1:b6:84:0a:37:e6:3f:67:f2:16:f5:6e:ce:f1:
41:52:2e:0d:44:c1:b6:ef:1a:44:ce:6b:cc:98:a9:eb:bf:5e:
e8:62:3f:3a:2a:08:ea:9c:ed:cf:59:cf:f9:62:4d:1b:29:fa:
3a:25:e4:e0:31:cf:09:f9:d2:ec:53:e3:22:41:f3:d2:3f:10:
5e:47:de:79:b0:53:a0:14:7d:fc:e4:d4:1e:5f:b6:75:0b:f6:
47:ce:97:be:dc:dd:6e:e3:18:ca:f6:1d:f7:0a:1a:e5:0d:5d:
64:4e:82:80:55:67:1a:a7:a4:ed:de:14:f3:ff:b9:1d:83:9e:
ec:38:78:6e:70:76:60:e8:da:25:fa:a7:af:24:d8:ea:ed:26:
64:37:59:f5:62:2c:0b:cf:7e:c3:f1:66:79:00:8f:bb:23:d2:
28:29:eb:a2:c6:b9:85:e2:74:12:f7:c2:fa:ea:9b:0b:c2:d4:
c7:d3:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:00:55 2025 by rpki-client