Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/156836c7-22c7-3e84-9f36-c5a95cba1b62.roa
File: 156836c7-22c7-3e84-9f36-c5a95cba1b62.roa (raw, json)
Hash identifier: 9Sz1HYfrgpCbwWKjrASaDWa5etcokeFT9xgQrdo4khA=
Subject key identifier: B4:B6:26:73:EE:F8:E8:1B:6E:6B:18:DE:5D:3F:4C:76:9E:E8:FF:BC
Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Certificate serial: 010D0C9F43285848D359035EE2B386D54ACFC6C0
Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/156836c7-22c7-3e84-9f36-c5a95cba1b62.roa
Signing time: Sun 09 Feb 2025 13:01:48 +0000
ROA not before: Sun 09 Feb 2025 13:01:48 +0000
ROA not after: Sat 10 May 2025 12:01:48 +0000
asID: 834
IP address blocks: 206.174.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:59:03:5e:e2:b3:86:d5:4a:cf:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265
Validity
Not Before: Feb 9 13:01:48 2025 GMT
Not After : May 10 12:01:48 2025 GMT
Subject: CN=af0003e2-0e2f-4b9a-a7d1-3d4bd67218f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:01:eb:be:9d:0f:d0:9f:27:49:49:20:79:
d3:da:c0:9a:f3:59:55:41:2e:97:9f:e5:4b:7b:5b:
c4:31:1c:ad:18:da:dd:d3:84:0a:41:63:9c:35:9d:
5e:93:21:78:5e:92:52:b1:87:bb:8f:61:63:c3:a7:
f7:c7:3f:fa:40:ba:bb:a0:2d:39:40:5b:65:b8:24:
4c:ae:c7:b6:9c:8b:ab:a9:d5:95:4c:c8:cd:bd:51:
af:39:9f:2a:6c:8c:57:e4:dd:2e:04:3b:69:33:96:
0d:35:b5:59:70:88:03:cf:ba:a1:77:79:e0:fc:43:
8e:0a:fc:a7:a6:ec:63:79:95:96:1b:ce:af:39:4e:
a9:88:46:1a:e9:2a:89:3c:4e:cc:b0:d2:d9:cc:4d:
da:dd:d2:ef:2b:74:c8:1d:08:4c:83:d9:45:8c:51:
30:69:7a:a4:5f:f2:21:a3:48:eb:ed:ef:77:aa:62:
1a:41:1b:0d:4e:7a:27:69:bb:a5:93:50:1d:45:bf:
94:b4:06:0d:32:f3:9e:64:4b:60:4c:ea:f2:ce:a7:
cb:7c:ec:84:21:b7:e3:6d:e3:80:c1:25:d6:61:f6:
aa:6d:a5:45:20:43:9a:22:50:9a:85:72:92:16:d6:
53:f3:ac:c7:ca:37:a5:57:7e:d6:99:de:0e:b3:48:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:26:73:EE:F8:E8:1B:6E:6B:18:DE:5D:3F:4C:76:9E:E8:FF:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/156836c7-22c7-3e84-9f36-c5a95cba1b62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl
X509v3 Authority Key Identifier:
keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer
sbgp-ipAddrBlock: critical
IPv4:
206.174.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:c7:73:d2:ba:09:9e:1c:02:e8:46:07:d3:3c:4b:2f:24:f0:
fb:a3:e4:d3:42:24:95:10:e0:75:de:fb:91:7f:3c:a0:17:53:
9e:43:3e:8e:a8:1c:03:c6:d0:f4:cb:75:23:65:77:1d:f7:5e:
9b:d1:b9:44:fd:af:77:6a:4d:de:97:c4:dd:a2:9a:9d:c5:f7:
4e:6f:71:d2:08:eb:18:58:7c:d5:70:0c:a5:58:8f:7c:eb:0a:
0c:16:e8:da:2a:aa:cc:4e:5f:f6:f7:de:46:d7:30:44:eb:99:
34:c2:40:62:58:e6:01:6e:dd:a2:79:ae:59:01:99:62:b9:16:
59:06:84:f6:c2:52:92:40:c6:1d:54:9b:99:a4:4f:ec:dd:aa:
f0:44:1e:50:1f:5c:f2:93:21:60:ca:b1:09:74:a5:70:c1:50:
3b:0e:a3:6d:e0:c0:d0:0e:a0:b3:60:b6:6f:47:39:58:1e:2d:
17:e8:fd:0d:a4:a8:88:88:2f:89:39:bf:70:81:4e:51:f7:cb:
4c:90:75:bf:df:d7:e7:69:cb:e1:5e:9e:04:55:be:4f:18:e2:
b6:90:63:54:6b:47:97:03:be:59:66:89:37:9a:64:b5:79:1b:
d5:0e:db:fb:97:33:bf:f7:61:54:d0:35:29:f4:12:57:ce:c1:
7a:03:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:05:40 2025 by rpki-client