Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa
File: 04bcb534-109e-3dec-a653-5e03796d1436.roa (raw, json)
Hash identifier: tJbuKM6xVAkJ52ugi2Mn8RKK9VWqhGChYFgIu8bsSIE=
Subject key identifier: 21:44:B4:20:03:69:F7:08:03:C6:C7:AD:FA:CD:CE:2D:E5:9A:C3:62
Certificate issuer: /CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8
Certificate serial: 010D0C9F4328584944693BA2EF3E5CCB3C36C580
Authority key identifier: 0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 400764
IP address blocks: 206.223.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:3b:a2:ef:3e:5c:cb:3c:36:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d99f8b-a85a-41e9-89b4-612c6b9c10a8
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=98628390-dc1e-4e4a-bbab-c5247b1deed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:a8:a4:72:7e:f5:12:c4:5d:f3:64:9a:10:
53:0d:64:d2:12:f3:2c:e8:40:2e:49:36:06:c6:c6:
e3:df:ec:b1:d6:e4:ee:3f:62:12:64:e9:ef:c4:4c:
81:c5:37:e4:59:86:cc:b3:02:01:59:cf:9b:56:0d:
a2:f1:7c:e5:39:ef:23:85:fe:4f:a1:b2:06:e2:1a:
a7:c7:00:f1:99:8d:5a:fd:3a:23:d6:b2:e7:61:e8:
5a:60:a0:1d:65:bc:34:b4:29:4b:2d:df:e1:a7:45:
42:bb:40:fe:e2:2b:22:17:5e:ed:2f:bb:c6:66:22:
ff:50:9e:b0:a5:9d:03:a1:54:fe:cd:d1:92:1f:a7:
3a:73:1b:ca:0d:57:6b:4d:99:a7:71:b4:b5:6a:a2:
ca:56:58:3c:12:f5:51:95:ee:29:01:9e:2c:5f:b2:
60:31:af:44:04:a7:67:90:38:c7:be:23:eb:1c:85:
65:47:d6:53:73:86:8c:af:8f:cf:ed:4f:7a:38:88:
f1:f1:e7:59:7a:f4:25:90:90:68:57:07:cc:c5:e9:
8a:4b:4c:72:14:19:17:e7:2b:b9:b3:28:27:2c:74:
73:ef:57:cc:0e:79:bf:d0:88:eb:83:d0:7e:07:b4:
66:33:58:b1:75:94:bf:14:8a:36:56:5e:1d:4f:4e:
32:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:44:B4:20:03:69:F7:08:03:C6:C7:AD:FA:CD:CE:2D:E5:9A:C3:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/04bcb534-109e-3dec-a653-5e03796d1436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.crl
X509v3 Authority Key Identifier:
keyid:0B:72:93:6A:9C:83:B5:E3:6C:B7:76:E3:59:21:8A:61:87:56:CE:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8d99f8b-a85a-41e9-89b4-612c6b9c10a8.cer
sbgp-ipAddrBlock: critical
IPv4:
206.223.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:f4:ce:96:5f:af:1b:f4:65:8b:60:82:d4:d1:bd:ec:fc:72:
38:51:6e:4d:f5:89:d2:b0:f8:cd:84:98:14:e6:c6:f7:7c:21:
6c:5c:10:11:a6:95:2e:df:2b:2a:a7:68:28:01:a2:2b:df:6c:
57:73:13:84:95:60:d4:e3:3e:d7:66:a7:14:9a:68:e3:d5:01:
83:12:9a:03:a0:0c:22:5d:72:e2:c8:9b:fa:d4:1a:4c:40:ed:
92:24:a1:ab:b9:23:f4:22:fb:54:76:c1:af:88:03:4d:20:86:
0f:20:06:f0:52:f5:83:e1:e4:dd:ea:2c:98:3e:06:08:13:10:
34:41:26:67:6c:76:e7:78:5a:f9:d6:87:2b:4b:89:99:3a:d2:
2b:1b:91:68:45:5d:a4:9f:aa:0a:65:c3:82:1b:c5:93:a8:6b:
ad:09:b2:18:10:36:8a:63:61:ab:df:7c:8a:00:3c:27:01:7d:
53:0d:22:ec:3a:d3:94:13:2a:2c:7f:11:b9:ed:07:59:40:76:
c8:bb:83:95:fc:62:87:d3:37:e1:03:2a:1f:07:e9:57:df:06:
ba:72:8d:5e:54:7f:1e:ae:c1:97:3c:73:da:d0:0d:11:37:45:
18:a7:eb:dd:b2:f0:14:29:3c:94:bc:71:4e:f0:9e:31:16:7a:
e5:35:cf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:29:09 2025 by rpki-client