Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/093c735b-28d9-3469-91d9-c9a8070dbea6.roa
File: 093c735b-28d9-3469-91d9-c9a8070dbea6.roa (raw, json)
Hash identifier: y/c3Ftp2E/j8JPsaTVDF5e5JEAbhCVi/QQsoRfLlM6I=
Subject key identifier: C2:4E:37:D0:DF:97:17:48:A7:BD:AF:35:CE:8C:4A:18:B9:07:2C:01
Certificate issuer: /CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
Certificate serial: 010D0C9F43285849037793799EB7A7AC1386BE58
Authority key identifier: 74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/093c735b-28d9-3469-91d9-c9a8070dbea6.roa
Signing time: Wed 26 Feb 2025 18:42:11 +0000
ROA not before: Wed 26 Feb 2025 18:42:11 +0000
ROA not after: Tue 27 May 2025 17:42:11 +0000
asID: 62681
IP address blocks: 192.206.32.0/22 maxlen: 24
2620:3b:4000::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:03:77:93:79:9e:b7:a7:ac:13:86:be:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692
Validity
Not Before: Feb 26 18:42:11 2025 GMT
Not After : May 27 17:42:11 2025 GMT
Subject: CN=cc698392-b034-411a-896a-1546a470e7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:68:c3:43:bf:48:85:b3:b4:40:68:73:79:
38:aa:ec:cf:79:6f:86:30:74:77:7e:a0:e5:53:43:
ee:a0:bf:06:2b:b7:60:be:d9:65:a0:d5:4f:44:46:
9a:2e:85:59:6f:b2:e7:29:5d:24:78:35:d8:71:4d:
03:96:c1:7c:22:57:80:ce:d2:12:3e:84:bf:51:6d:
a8:c7:52:50:f4:d3:cc:59:59:37:5f:b0:3b:c9:8a:
90:56:27:a7:87:6c:f2:f7:62:d7:3e:43:ce:41:9e:
89:14:fe:12:98:c6:27:d1:25:bc:e2:45:2d:dc:82:
d8:23:12:a0:1a:c9:80:2d:a8:87:82:88:95:b6:7c:
f7:81:fb:13:25:de:89:c9:16:67:ab:e0:07:f2:fb:
46:43:91:5c:ab:5d:7f:b4:7e:fb:49:2d:c2:2c:95:
5f:02:ba:d5:84:64:56:c5:83:dd:5c:0c:42:22:17:
46:13:da:60:c0:3f:b0:dd:c6:21:bc:4b:9e:2d:bd:
68:bf:84:cb:ad:cc:a7:9f:2c:1a:bc:59:d4:f4:d1:
55:9a:55:d5:af:94:d2:97:27:af:8b:92:97:37:45:
33:1f:dc:f6:7e:9c:58:fb:5e:01:ae:ac:30:f5:fb:
91:f7:75:09:9f:a6:32:6f:58:dd:4c:57:ab:d5:64:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:37:D0:DF:97:17:48:A7:BD:AF:35:CE:8C:4A:18:B9:07:2C:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/093c735b-28d9-3469-91d9-c9a8070dbea6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl
X509v3 Authority Key Identifier:
keyid:74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer
sbgp-ipAddrBlock: critical
IPv4:
192.206.32.0/22
IPv6:
2620:3b:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:42:94:fa:66:5e:ce:e8:3b:24:e3:75:4b:93:de:31:e2:7d:
45:5b:50:75:dc:bd:26:ad:5c:00:9c:b4:09:21:e2:16:b3:c0:
b7:f8:94:23:14:45:f8:bd:c8:fc:4c:e6:7e:b4:e2:84:e3:b7:
63:cc:a0:a9:cb:cb:e8:aa:88:c7:c2:c9:14:51:04:b7:35:21:
87:77:a0:6b:3e:58:98:3e:9a:83:f4:10:98:7d:d8:0f:b0:aa:
27:62:8c:e0:3b:cb:2b:ca:25:7a:a1:0f:4e:be:e8:4d:6b:39:
7e:36:12:a5:56:bf:41:c7:a9:30:ef:1f:c3:c1:f2:56:9a:f3:
f0:3d:db:b7:3d:8f:0d:d3:7a:5b:3f:f0:11:38:36:c5:25:f4:
89:d6:dc:29:01:5d:51:5c:ed:15:49:eb:ce:c0:24:95:bf:59:
77:f5:91:6e:36:6d:25:03:75:3d:f2:14:97:1f:1d:2f:8b:13:
25:9e:3c:7b:b7:1e:ac:49:f7:ee:f0:85:7d:26:5f:e6:97:41:
b2:61:f9:73:29:66:0b:d7:2c:61:ce:ee:38:4a:3b:df:52:ff:
e7:2e:7f:40:23:f2:6b:e6:c9:0a:17:e7:1b:c4:11:c5:78:b4:
19:b9:ba:cc:4d:b8:d2:35:1b:37:1b:6e:c6:bb:87:99:b2:46:
fc:77:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:54 2025 by rpki-client