Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa
File: e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa (raw, json)
Hash identifier: /zss1q4IoQyxtJfQeWDe+P0RHi1KrMra4JiTAjfHr6s=
Subject key identifier: 74:19:23:33:34:EA:02:B2:05:53:9C:E4:79:60:FE:72:3F:CB:D2:B0
Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Certificate serial: 010D0C9F432858491ED6E6348FF0D434D1E17A80
Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 376
IP address blocks: 206.167.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:e6:34:8f:f0:d4:34:d1:e1:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=accdbbcd-a6ee-4ca2-8e64-619e226b980c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:3f:c8:af:0a:9c:24:5f:a2:03:9a:90:7a:
57:ed:a7:2a:6a:bc:cb:d5:3c:f5:68:64:ba:c2:fe:
c1:7c:fb:cd:ab:09:fb:b2:9d:c5:0d:0f:95:ca:cd:
e2:ae:56:21:84:5d:a0:a2:0b:de:ff:de:06:5a:c9:
a7:5a:af:72:2a:3b:8b:c5:9a:03:ed:fd:f6:64:34:
ec:30:08:11:c8:4a:4e:88:8f:a3:d5:86:b8:15:64:
9f:a5:a3:0b:76:87:2a:88:04:df:4d:56:23:57:1a:
42:2a:30:1c:bd:4a:b5:be:b6:1b:97:85:99:f5:d9:
46:c4:7f:97:1b:00:91:74:2e:48:e0:48:54:c2:1a:
4e:d4:2a:d4:ef:eb:43:92:16:d7:ce:df:74:ed:af:
93:0f:ff:b4:46:71:c4:93:0e:75:6b:7a:7f:f3:e2:
07:24:0b:32:78:74:c5:9e:f6:57:33:6f:27:59:28:
8f:ce:34:fc:4a:db:76:fe:77:96:ce:17:d2:4b:1a:
16:4c:ee:95:f1:f9:85:1f:18:03:5a:89:ef:cf:ab:
9c:aa:05:b2:87:72:07:7b:28:4d:2a:59:09:a2:4e:
df:d4:8e:2c:c8:7d:4a:a9:a0:17:fe:5c:fa:54:80:
e8:8d:e1:0a:f9:25:ca:49:22:45:14:20:7f:0d:6b:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:19:23:33:34:EA:02:B2:05:53:9C:E4:79:60:FE:72:3F:CB:D2:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl
X509v3 Authority Key Identifier:
keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer
sbgp-ipAddrBlock: critical
IPv4:
206.167.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:e3:38:04:05:47:db:05:e9:64:2b:5b:ce:d8:f0:7b:85:c0:
11:de:f5:3f:33:d4:6a:ac:64:c8:c9:0e:b3:cb:62:95:2d:75:
32:c5:0d:0a:21:78:1f:ec:9e:78:a8:7f:55:57:c0:e7:8a:7e:
ff:71:e2:bc:49:df:4f:36:3f:c4:c7:2f:ec:70:c8:86:73:5a:
c1:10:06:c6:37:65:c3:a1:42:f2:69:e9:54:ab:7e:b3:1a:d9:
91:1a:24:bb:8d:7c:e2:4d:e1:f4:8e:d2:ae:ca:b8:97:c3:24:
eb:f1:29:c7:58:19:b2:7b:97:14:e1:4b:f3:fc:9b:67:7e:77:
cc:46:bd:35:49:89:ca:a0:af:45:c9:47:89:12:48:79:09:7f:
59:d2:b9:75:01:2c:3d:3d:37:36:56:07:72:90:9c:41:16:d9:
0a:46:45:a0:c1:0f:55:dc:0a:b7:3d:61:22:f1:db:d2:e4:e3:
45:c6:3d:e2:01:7e:69:b3:54:7d:fc:13:b5:5d:03:86:70:b9:
ef:7f:ec:8b:24:5a:08:8e:3a:e8:30:11:29:f8:80:4b:47:32:
d6:16:e8:9e:e2:ca:8f:6a:60:c1:9e:63:c0:22:c4:2d:91:88:
5b:f8:ea:7b:30:a7:ce:0e:e6:45:4f:92:2a:8b:38:f3:b0:97:
d9:ce:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:36 2025 by rpki-client