Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/197c52d9-e053-32b7-8644-b5a9e40ced29.roa
File: 197c52d9-e053-32b7-8644-b5a9e40ced29.roa (raw, json)
Hash identifier: Z2lapjxk5R7hV9/EF5uVZOBSM2L92poW+RKn2dqDs8E=
Subject key identifier: 9F:95:94:43:3A:FA:E1:EE:01:06:72:EA:17:E1:06:87:0F:B9:F1:FF
Certificate issuer: /CN=66108100-1fc2-4d23-b89e-3e81cc652270
Certificate serial: 010D0C9F43285848EF6164FA6D702DF21E5839C0
Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/197c52d9-e053-32b7-8644-b5a9e40ced29.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 13984
IP address blocks: 206.124.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:64:fa:6d:70:2d:f2:1e:58:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=e463b5e8-428a-4d78-bc8c-fda4f67c4295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:9f:35:18:c2:30:98:a3:b7:b4:e7:4a:cb:
b9:92:30:02:22:7d:fe:84:10:5c:b0:34:93:43:58:
11:97:c9:4a:c1:75:f0:cf:b3:32:e8:cd:9b:ce:ed:
0e:94:6d:b1:82:59:d2:4a:a6:e0:0a:61:3a:ce:44:
66:e9:32:9b:58:2a:75:7e:fa:07:f8:ae:2b:4b:30:
27:a2:01:e5:b1:ea:2f:cc:33:d8:f7:79:3f:aa:86:
60:11:15:01:0e:57:ad:c7:53:32:57:4e:6b:8c:c5:
1c:c9:1f:e2:6e:a5:84:db:38:75:49:2b:38:13:33:
b5:23:a2:72:a7:de:2a:ff:65:3b:d8:1e:b7:43:e1:
cf:a4:bb:6a:f5:ce:7f:8e:7b:d7:ce:d4:43:e5:3c:
84:88:25:51:3d:eb:53:c6:08:04:de:b1:22:03:9e:
e3:1f:e3:38:f0:f5:d1:ec:e7:2f:f0:25:3a:7b:a9:
27:ba:25:ee:11:78:34:08:7d:d3:ba:fc:f1:bb:df:
ca:0d:8f:ee:44:da:86:33:c1:be:9a:5b:39:84:2e:
6d:ab:1d:d2:a2:b8:c6:b4:6c:98:60:fb:78:33:b6:
41:17:8a:fd:34:b9:da:3b:5f:d8:3f:d6:42:18:78:
0e:15:79:03:8a:aa:03:ce:8b:90:19:8c:a5:c4:a6:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:94:43:3A:FA:E1:EE:01:06:72:EA:17:E1:06:87:0F:B9:F1:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/197c52d9-e053-32b7-8644-b5a9e40ced29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl
X509v3 Authority Key Identifier:
keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
sbgp-ipAddrBlock: critical
IPv4:
206.124.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:61:9c:fb:1b:30:e7:d8:71:fb:70:d1:bc:c9:d3:2b:2c:6b:
9d:9c:34:fb:d4:42:6b:94:86:dd:03:96:40:9a:b5:c0:ae:31:
3c:b7:4f:0e:26:bc:bf:4d:76:c1:81:6a:3e:08:05:39:38:1d:
d6:2b:50:f7:cd:6c:6d:50:60:be:97:e3:24:fd:99:b4:78:80:
dd:be:82:ba:84:9a:79:11:ec:18:4f:b9:9c:81:b4:5c:cd:03:
06:b7:f3:f2:ee:dd:2a:c5:be:f3:d8:f7:12:60:33:92:d9:4c:
38:f6:48:6a:e1:5e:65:6e:96:4e:ee:cb:ff:4d:8c:11:0f:41:
92:26:61:f2:1a:62:4f:68:e5:f2:be:a9:6a:75:01:6d:b9:ad:
84:ec:18:c2:32:59:18:17:80:ea:18:1c:cd:38:77:ff:c2:ab:
ec:3e:26:c2:9d:a5:c0:38:ab:7f:e0:18:7a:8f:b4:0e:2e:94:
6a:8a:fc:0a:cb:bc:80:d8:b3:28:7b:a8:bf:c4:28:33:dd:30:
f8:f9:00:c8:98:ff:3d:5a:6b:91:97:f6:7b:5e:f8:31:91:0f:
0c:62:da:56:86:64:65:4e:ee:e9:29:d3:c2:b7:f9:4a:d2:43:
73:37:d8:0f:c3:fb:9b:a5:0d:23:5f:f6:ea:e3:b1:5a:39:34:
44:39:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:56 2025 by rpki-client