Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/deb60b62-235a-3e60-9042-e2589cd32690.roa
File: deb60b62-235a-3e60-9042-e2589cd32690.roa (raw, json)
Hash identifier: hi3iNG++BdEtwquC42ZGfUPKa7MTj5U4RuaAARVXEh4=
Subject key identifier: 87:E8:4D:59:1F:94:B3:AE:CB:7E:8B:A2:18:D2:CA:6B:C0:32:C3:15
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F43285848F926A84B06C9880305CB8A80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/deb60b62-235a-3e60-9042-e2589cd32690.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 271
IP address blocks: 206.12.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a8:4b:06:c9:88:03:05:cb:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=8a48f1f4-03d2-4ea0-8066-4dabff8a0aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:04:b6:3e:b6:bf:b9:ae:e9:db:97:a2:e0:
cf:17:b5:f7:e1:5d:87:07:08:38:e8:31:0a:23:2b:
4d:2f:a2:a0:ac:19:6d:a3:cb:2e:10:a0:10:3e:a3:
81:53:da:b0:04:8c:1f:25:48:c3:f9:54:28:46:c3:
48:9a:a0:77:44:d2:42:1d:de:17:75:51:f7:65:8f:
93:fa:57:61:f9:a5:03:16:be:fa:84:cf:37:be:87:
bc:65:09:c9:8f:a7:31:fb:e0:3c:56:36:00:97:27:
f5:33:60:1b:d0:56:62:79:ef:5e:95:6a:21:3c:d2:
0e:be:a2:82:63:e6:2c:33:f8:57:5a:42:5a:4e:17:
cf:3b:87:2b:db:2f:cb:40:26:fe:24:18:8f:fd:b7:
f6:4f:ba:fe:62:38:9a:f0:17:66:1b:22:15:cb:a0:
13:73:b1:11:37:02:b8:0b:54:72:f1:e5:01:df:18:
ec:6d:6f:6e:6c:70:87:f4:b2:94:36:04:27:3f:fd:
38:40:d1:7b:58:bf:dd:73:99:96:78:4e:01:ff:54:
47:47:17:b0:9b:cf:30:9f:d8:f0:08:bf:72:ed:b1:
9d:8f:95:65:b6:67:09:c3:0e:27:a5:1a:0e:fd:fc:
5b:09:8f:52:35:fd:a6:17:8e:61:3a:73:77:4d:95:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:4D:59:1F:94:B3:AE:CB:7E:8B:A2:18:D2:CA:6B:C0:32:C3:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/deb60b62-235a-3e60-9042-e2589cd32690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
206.12.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:9d:bf:96:b4:b7:55:0b:0d:6a:5e:8d:9b:44:05:97:2c:b1:
d8:4a:56:88:37:96:ed:50:80:03:c4:2a:42:7b:b3:e3:a4:6d:
5d:6e:7b:5d:3c:fa:f6:85:9f:0c:25:0d:7d:e9:86:01:33:6e:
8b:e9:8c:6a:b1:a9:da:51:5a:eb:b3:6a:86:65:aa:f1:29:53:
35:d9:63:7b:1d:35:79:59:d5:22:c4:77:ef:38:22:ad:f7:29:
05:f1:87:82:4a:11:13:9b:e3:9a:70:69:30:61:24:bf:28:33:
d0:18:b1:1f:79:36:a2:12:af:bf:86:aa:78:4a:78:17:66:cd:
9b:5e:76:b3:12:55:c9:7f:22:21:2d:e1:7e:5d:d9:df:a9:9b:
28:07:92:10:10:1d:55:2d:21:7f:85:4c:1a:9f:bc:af:02:9e:
7d:c5:5e:72:b6:4c:16:10:39:68:51:96:1e:5f:2c:cf:da:3f:
e5:6a:95:93:dc:df:26:c4:12:2c:7b:a4:d0:b3:54:67:8c:ab:
e2:88:43:d3:33:35:67:73:47:40:b6:38:19:4e:b1:90:01:03:
4c:a2:f2:ae:66:03:ba:dc:1a:b0:33:38:40:c0:4b:e4:26:cf:
6f:72:96:cb:0f:f0:6b:ed:d8:55:78:46:0e:5a:9e:40:6e:86:
00:f4:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:32 2025 by rpki-client