Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4b33ca9b-2df1-3a99-911c-80efb8916482.roa
File: 4b33ca9b-2df1-3a99-911c-80efb8916482.roa (raw, json)
Hash identifier: C2WGyFNe+BO8vsfkW7RKOPrVtLwWZg22g5MZCc5L/Ck=
Subject key identifier: A2:96:E0:44:95:CE:68:F6:8D:99:C4:76:4B:16:ED:97:0F:74:54:10
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848FD56B4C97B30D12B77BAF880
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4b33ca9b-2df1-3a99-911c-80efb8916482.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 198148
IP address blocks: 206.161.216.0/21 maxlen: 24
206.161.224.0/22 maxlen: 24
206.161.228.0/22 maxlen: 24
206.161.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:b4:c9:7b:30:d1:2b:77:ba:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=6daa530f-7145-40e4-a029-6fde5437e943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:e6:c1:ac:df:38:f2:47:a7:08:3c:57:af:
01:58:f0:40:8e:85:2c:dc:7f:66:0c:01:8e:b1:c3:
06:05:9e:67:0f:9d:4e:06:4e:dd:56:fd:dd:3d:89:
6b:01:a2:b1:85:b4:34:b7:a0:d3:08:6b:f7:57:6e:
dc:64:9b:f2:65:10:a2:0b:9e:e9:e6:09:a1:a6:f6:
a5:54:df:b4:17:a1:07:b7:7d:73:a2:e7:64:8a:b5:
49:70:70:1e:f9:63:17:78:ca:ae:5c:5f:55:07:d2:
48:9d:04:72:a9:0b:e7:a0:20:c0:a2:48:fe:23:23:
f7:37:d5:ba:26:fd:da:2d:08:d5:a4:0c:7f:65:e9:
5c:8f:4f:36:0d:91:2c:f3:0f:25:38:59:b6:94:a1:
ad:80:4b:4d:2a:46:6e:56:4e:76:c7:ed:b6:4f:30:
6d:3d:79:3e:8e:ca:b5:5c:9d:5b:ee:09:15:f9:31:
19:53:b8:ce:b7:80:a3:87:1b:1d:41:e0:13:e4:a6:
3f:17:f7:b3:c9:b5:87:78:16:39:9f:c5:c1:1f:ad:
27:f5:a5:a6:b5:03:b4:ed:20:59:37:c3:86:35:81:
d7:b8:e0:cf:85:dc:cd:fd:66:8d:68:2c:f5:fd:58:
1b:31:6c:d4:e4:cd:86:75:c0:5d:61:0d:0e:2a:3c:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:96:E0:44:95:CE:68:F6:8D:99:C4:76:4B:16:ED:97:0F:74:54:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4b33ca9b-2df1-3a99-911c-80efb8916482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
206.161.216.0-206.161.235.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:a9:ae:ea:1d:25:44:0e:26:74:d3:c0:ce:23:66:f7:24:bc:
59:2b:ac:32:90:be:18:dc:ad:df:01:d6:11:eb:55:39:27:80:
e6:8d:ab:95:26:9f:24:f8:97:84:a4:ee:25:97:f2:84:2a:e8:
7a:fa:a5:16:8b:55:a3:e2:4c:29:bb:f4:ce:db:fc:da:30:bd:
2e:53:b2:a7:84:d9:25:8b:e4:01:cf:1c:0d:eb:75:16:b7:a5:
27:43:9e:26:a2:d0:73:db:a0:10:04:a7:42:e7:4b:d8:bb:bd:
c1:51:a6:7c:4d:c4:1f:00:20:84:1b:15:75:8c:2b:4b:af:b4:
e9:b2:f3:af:24:84:2a:68:14:92:d5:d7:5b:71:47:9e:4c:d9:
52:f6:79:35:a9:f7:df:53:b0:05:a0:72:aa:54:c9:87:8f:f8:
96:fb:02:fa:b9:eb:25:19:84:ba:44:13:7d:9f:5c:de:4c:61:
19:10:41:8c:25:6e:6e:dd:af:37:1d:8c:1f:3d:87:41:1e:b0:
87:e9:33:a5:61:36:b0:b6:a4:87:e9:d5:e3:50:75:5b:0c:1c:
d4:34:01:89:ee:aa:d3:e0:56:62:87:6b:67:89:62:8d:24:a7:
75:45:1f:63:d1:80:6d:87:d2:1e:a2:03:fb:f2:8b:e4:ff:6c:
75:66:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:29:40 2025 by rpki-client