Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
File: a61681db-9c2d-39f4-ae56-91f2600f6136.roa (raw, json)
Hash identifier: U6LH5OIlqiXChxCry2iJDlpSU9ltIO4C6wwjVfR27Xs=
Subject key identifier: 65:07:1B:06:1E:E2:FC:47:90:12:EC:10:C0:3D:D3:F4:C1:CB:C4:58
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F43285848BE86289A5960491264FF4200
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 262287
IP address blocks: 198.145.67.0/24 maxlen: 24
209.20.132.0/24 maxlen: 24
209.20.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:28:9a:59:60:49:12:64:ff:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=bcc01bce-a230-4799-b14b-0f3a8e963020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:44:1b:94:18:26:0e:6d:0f:ce:7a:64:9a:
33:04:ca:d9:82:27:00:6c:26:7b:1c:e6:11:f9:8d:
9f:12:d9:93:d0:64:59:71:72:04:b5:e6:86:84:dc:
d8:68:1b:c7:bc:19:bb:fc:32:27:1e:a5:05:c2:4d:
e2:36:db:74:0a:c1:7b:f1:2f:e5:76:7f:1f:28:ca:
e9:f0:df:02:5a:cb:34:fb:0e:e6:4b:6f:a9:bb:b4:
c3:a3:53:e3:14:57:b8:bc:a5:c8:3a:55:f4:e8:8d:
29:12:97:e8:d2:87:a9:11:cc:fc:86:c8:6f:bc:2f:
d1:a5:d6:88:24:ce:87:d5:13:f7:c5:43:a9:f4:da:
4d:a9:a7:12:5d:ad:e1:fe:fe:24:e8:0b:91:eb:ec:
51:76:1b:4b:8e:07:dc:c8:d8:4b:ea:6d:ba:00:d4:
3d:1d:99:b4:52:b7:fb:49:f6:1b:57:9e:55:c4:64:
87:ec:48:6c:42:50:59:54:4c:f9:0b:0e:9d:e3:9c:
08:26:c4:56:9f:8a:52:80:e0:3f:03:77:9b:4a:04:
a3:b4:c9:a3:5f:3e:6b:12:6b:8f:5a:dc:59:87:71:
a4:47:3e:5d:58:0c:a1:4a:80:6f:88:ec:38:b6:2f:
5d:5c:6b:86:ff:83:42:b6:f4:24:6e:57:41:11:0c:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:1B:06:1E:E2:FC:47:90:12:EC:10:C0:3D:D3:F4:C1:CB:C4:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.67.0/24
209.20.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:db:d5:36:fa:6a:f3:72:1e:94:67:78:51:0e:09:c7:77:36:
02:21:e8:3e:e6:3f:b6:88:c8:76:65:1d:98:85:1c:f2:24:ca:
38:f5:4b:69:10:e4:76:67:e3:79:f3:85:6c:52:4c:03:7a:f7:
de:c2:97:7e:d4:b4:8c:d4:53:97:c9:35:d5:30:28:f7:02:08:
5d:b1:82:3b:25:1c:87:87:ee:d6:30:3d:ab:a0:60:d5:85:19:
21:c3:9b:32:14:3b:93:17:93:a5:c8:15:22:ab:42:c2:ac:0c:
a1:91:13:f3:44:4e:ba:bb:f3:8e:fd:0f:ec:d3:fa:66:b8:b9:
9e:7b:77:1c:83:c0:8d:90:41:db:3d:68:fe:73:a2:bd:a4:66:
d2:2f:53:0a:ef:74:6b:1d:2b:9b:b9:fb:4f:9a:20:a3:49:b9:
c3:32:1b:fb:ae:ab:ff:cd:f6:83:15:97:89:a9:b1:c9:f2:95:
92:a2:ee:d2:d7:65:02:d7:26:ee:e2:c0:5f:37:0b:ba:14:b8:
cc:d8:ef:28:9a:7e:f9:cf:11:ee:d8:7c:87:03:ca:63:1f:5a:
1b:30:e0:1e:20:e7:c3:6e:87:c7:2e:de:3a:c2:21:32:63:72:
d0:8c:e2:b3:80:a5:8c:ee:c3:f1:21:08:1f:9b:25:87:65:94:
54:85:ec:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:17:40 2025 by rpki-client