Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa
File: ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa (raw, json)
Hash identifier: j7SwPbV7Mwr2SiSuuqYuWrkCb1kYheEkErLqv82zmw4=
Subject key identifier: DC:82:E0:59:03:74:26:6C:37:A6:F5:5B:FD:B9:95:47:F3:C5:75:E3
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584919418ABCD61110A6E744CEC0
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 11105
IP address blocks: 206.12.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8a:bc:d6:11:10:a6:e7:44:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=4ed7b902-3b74-4616-bcb7-80b7de818cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:03:dc:5f:92:d2:39:d0:5f:c3:00:bf:fc:1b:
d4:61:20:7c:d1:fa:2d:f6:8e:0a:06:03:de:25:af:
df:d7:d6:43:fd:ad:2c:71:70:ab:da:76:85:9b:4f:
14:f7:0b:ec:ce:7b:46:c2:f8:9a:da:d1:e0:ad:ce:
ca:8e:6b:46:32:34:75:47:71:b6:ae:df:77:a3:d9:
99:e5:ca:c1:8d:a4:15:b5:b2:4c:8a:80:99:57:98:
30:f7:17:a8:10:bd:03:3f:81:57:63:9c:0a:d8:61:
b0:da:6f:87:b3:ae:91:2b:14:b9:4f:c0:a8:09:f1:
96:67:2f:40:e0:94:38:02:77:46:29:fa:bf:5d:e3:
94:43:de:05:f2:92:58:e2:b6:3c:78:99:3a:42:e7:
91:31:95:f1:b8:c4:9f:9f:5d:0b:f4:d9:23:e5:1a:
b2:9f:d5:87:9b:4c:d5:29:f4:fe:c7:b3:ce:83:5b:
89:f8:7a:9b:62:40:a5:bc:7a:e5:57:3f:c3:d2:a6:
46:1f:b5:fd:e0:c0:85:00:82:39:93:e1:c1:ad:5a:
a4:37:d0:9c:07:48:cc:06:82:39:22:fd:45:f8:91:
11:b8:dc:53:46:60:e5:a3:c4:5d:c6:2b:22:aa:9e:
82:d0:a7:2c:84:1f:b1:be:b0:49:9c:93:17:8f:f2:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:82:E0:59:03:74:26:6C:37:A6:F5:5B:FD:B9:95:47:F3:C5:75:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ca3dc49f-9faa-3fb9-bae8-8ebe5cf1f6e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.12.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:b3:ff:c1:e6:28:d7:a1:3e:3b:b1:54:d4:5b:12:f7:84:86:
0a:0b:7c:bb:6e:99:aa:9f:7d:24:74:97:2e:ee:f3:3e:14:40:
53:96:d6:4a:d9:9f:bb:59:6e:e4:c3:93:a3:fb:a2:62:38:8d:
09:b9:1b:da:2c:cb:21:8e:c0:cc:da:11:6c:8f:63:2e:1a:15:
a5:43:aa:e6:3c:6b:3d:13:1e:a6:69:a3:a2:90:ca:f2:ec:7d:
3e:18:d7:32:51:d1:6d:cb:b3:2c:16:6f:a7:84:ca:9a:d2:a9:
4c:93:3b:74:33:73:63:47:80:9b:f7:18:28:c3:f9:ad:39:2a:
f3:e1:7d:0d:6c:64:52:81:2b:0e:b9:3f:b9:3f:20:16:d0:9c:
33:73:c6:1b:fc:4e:e1:f1:05:24:71:30:ba:a0:32:16:98:ae:
bb:ce:5f:38:00:55:f0:19:10:6e:0e:c3:22:01:b8:86:bc:55:
8f:59:86:c4:a5:87:0c:33:d4:3e:96:0e:b9:3c:d2:a4:2e:5f:
af:fd:7a:b2:bb:e9:1a:c6:72:00:88:72:67:cf:dc:b2:92:4a:
4b:e8:b3:98:4f:7a:dc:68:a2:09:70:9d:61:f9:e3:22:97:0f:
cf:77:ad:2b:d8:89:3d:f2:03:3e:9a:66:9e:bc:52:58:fb:f0:
78:d0:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:24 2025 by rpki-client