Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa
File: 1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa (raw, json)
Hash identifier: 2/KOTlTNj+w4pdlEYhBoKENHnZroGOPN3tJifJsVbLg=
Subject key identifier: 8A:17:06:C7:3D:7B:67:FD:12:8C:AE:A2:A2:9B:55:D8:1A:4F:73:ED
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584919418B23D239E7E01212BF00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 11105
IP address blocks: 206.12.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8b:23:d2:39:e7:e0:12:12:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=3a4921dd-fc9c-436a-94ef-341966c8816d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:88:8d:e8:39:0c:19:53:9a:5b:df:e1:ef:
7b:96:a8:39:bb:7c:6f:95:a6:eb:ab:d3:98:0d:b0:
4b:4f:f3:06:7e:3d:16:ea:a3:88:61:25:de:f6:ad:
74:56:03:52:9c:23:87:1a:ad:6a:78:7c:c2:15:b3:
27:36:60:78:9b:9c:61:b0:99:96:0a:bb:8d:26:48:
52:80:5d:62:e4:24:b8:56:77:f7:f5:45:c5:18:af:
b0:df:81:39:9b:71:43:a3:94:94:42:b7:10:0f:cb:
b0:b3:59:fb:29:45:06:c0:d3:a5:8f:72:2d:49:71:
ac:22:42:62:01:66:16:d1:7b:9d:62:f8:4c:10:f1:
c7:ea:ba:75:0a:42:ae:8b:eb:2a:16:73:20:e3:26:
1d:51:a9:5a:12:ed:cb:be:06:ce:55:d0:51:b0:93:
99:0d:0a:ec:cc:57:1f:4f:22:59:25:ce:15:1b:9d:
27:a0:a6:ee:60:d8:aa:3e:ec:e0:d3:12:9b:1e:ab:
83:23:cf:88:51:3c:28:91:5f:3f:96:4a:1e:5b:b4:
c0:05:fd:3a:d8:56:15:b4:76:85:cd:3a:37:39:d0:
96:12:dc:a6:7e:06:94:5c:dc:46:f9:02:e2:aa:45:
48:47:e2:d8:4c:4e:c6:7f:81:e3:cb:56:d4:59:79:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:06:C7:3D:7B:67:FD:12:8C:AE:A2:A2:9B:55:D8:1A:4F:73:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1c7bc5a3-bd9e-3ccb-91ce-db6fe725f249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.12.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:0b:97:71:b1:b6:04:cb:6b:d2:bc:8f:02:96:14:91:ef:16:
21:35:ba:3f:72:e1:c1:7d:cd:dc:5e:a0:84:0e:17:1f:7e:17:
a7:5a:55:9f:bd:51:91:2c:ad:c2:66:f4:56:47:2a:69:9f:5a:
b5:64:e2:5a:8f:2f:7a:b0:c3:e0:0b:47:3d:8e:68:0e:35:b8:
8c:15:9d:99:9c:03:fe:9b:86:cb:c5:aa:bb:92:ce:54:39:29:
ce:d9:61:97:43:67:64:59:bb:8a:8a:31:60:54:02:cc:b3:4d:
9d:28:2e:a1:05:53:16:b3:61:a9:a2:29:c2:af:5a:b2:cc:2d:
59:93:b4:dc:59:f4:e3:25:32:fe:59:c0:39:5b:05:08:51:21:
0a:dd:f0:6a:45:d1:ba:8d:ad:5b:39:b6:c1:c2:59:ef:cd:75:
f8:31:ff:0e:4c:eb:b4:c6:22:3e:ac:bf:03:46:76:b2:f1:07:
72:aa:80:81:6a:5a:64:d2:d7:b1:77:1a:16:c3:fc:cd:27:f7:
5b:9e:5c:8a:71:2b:8e:5f:4e:db:c9:69:0d:9a:cf:d4:7d:98:
67:10:fd:dd:e6:a2:91:8b:a4:df:bb:21:18:a5:96:f8:83:35:
fd:d4:42:15:45:55:a0:e8:a7:1b:83:c9:0b:10:f4:c2:77:a1:
12:b2:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:37 2025 by rpki-client