Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/283f3339-2271-3365-b5e0-e0cbd98ce2be.roa
File: 283f3339-2271-3365-b5e0-e0cbd98ce2be.roa (raw, json)
Hash identifier: IpQVmJ7A6aaSmn4wdhXwfAkaY6WvGqMjlq2vU9esY0o=
Subject key identifier: D9:5C:24:34:64:DC:E3:4A:50:55:7F:32:C8:D0:E0:49:74:5B:48:FF
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F432858489C92DF9E3BAF5BA113DBF000
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/283f3339-2271-3365-b5e0-e0cbd98ce2be.roa
Signing time: Mon 20 Jan 2025 22:08:55 +0000
ROA not before: Mon 20 Jan 2025 22:08:55 +0000
ROA not after: Sun 20 Apr 2025 21:08:55 +0000
asID: 13737
IP address blocks: 206.212.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9c:92:df:9e:3b:af:5b:a1:13:db:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Jan 20 22:08:55 2025 GMT
Not After : Apr 20 21:08:55 2025 GMT
Subject: CN=e1bbd1c8-ac18-4770-a449-2de95eb850f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:71:62:af:af:5a:5c:43:e0:0c:14:01:89:6d:
d6:7f:f8:a9:8c:0a:dc:8e:44:c9:ab:8a:5b:c5:09:
9a:46:34:7c:b1:fe:47:84:12:11:f6:a4:b4:26:c8:
18:35:aa:63:87:0f:35:f6:49:aa:be:35:31:0a:7d:
c7:b9:65:ac:55:71:84:53:d3:e6:5c:af:6f:aa:95:
e8:d0:79:43:70:ae:86:d7:21:71:a0:81:90:12:10:
80:fa:83:2a:1e:cf:b5:d5:4a:13:68:fa:35:96:ac:
c6:95:7f:42:88:b0:55:37:93:d3:28:36:63:12:3e:
7c:15:31:37:5c:f4:6b:4d:40:55:17:8e:aa:45:77:
aa:1c:0b:00:5f:ef:01:85:42:5c:f6:e8:bc:d7:5b:
04:4a:85:48:bc:ce:c2:9c:cc:de:c8:2f:4f:bd:15:
a5:44:aa:2d:da:37:ab:f8:1e:a7:ac:17:47:c6:2e:
6d:7a:9f:0b:e4:ef:d8:97:f3:17:56:74:b8:d1:4e:
4d:1e:67:c6:8e:10:4e:4e:3d:b5:08:d4:4b:bb:1a:
4a:ee:39:85:0e:72:6f:17:6b:2c:ec:3b:2c:a1:5b:
98:9c:25:d4:79:58:a0:f7:72:a1:2e:19:72:fe:58:
4c:8f:56:63:1f:5b:2c:b3:5c:d5:c8:c2:4a:52:7f:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5C:24:34:64:DC:E3:4A:50:55:7F:32:C8:D0:E0:49:74:5B:48:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/283f3339-2271-3365-b5e0-e0cbd98ce2be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.212.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d4:45:20:36:55:b8:e3:cc:2f:ae:42:bb:2e:55:7d:2e:f0:
19:7f:f6:c1:4b:83:90:e5:05:3d:c0:c4:37:30:3f:26:6c:23:
d1:01:58:6c:e3:55:3d:03:ea:ad:54:79:8f:eb:41:f2:b7:40:
83:3d:dd:d5:7f:95:a2:42:78:e3:27:75:e0:a4:95:6c:0b:4e:
7d:5a:d1:be:ce:0c:3d:fb:09:07:fb:e7:c8:7c:44:1d:d5:2d:
14:b8:e2:68:2d:25:3b:79:74:a3:40:ae:f1:66:87:2e:1d:3b:
2c:58:06:f0:f5:2a:da:45:f1:5d:5e:02:5a:38:e8:af:73:bf:
7c:6c:90:08:26:f2:15:d9:43:a5:b2:e7:87:7b:a6:6b:2a:f3:
f6:a6:7c:62:73:25:ac:7e:5e:d6:63:dc:b2:3b:7d:99:94:18:
68:ff:9a:5a:9a:e4:8a:b1:98:38:29:ce:9d:d6:31:70:99:d5:
04:51:36:dc:08:86:6b:8d:7c:74:0f:bc:d7:8e:6f:1e:2e:2a:
c7:33:66:0e:31:d6:3d:97:92:1c:09:69:4f:f1:54:78:38:68:
bb:28:dd:8b:a6:66:c9:df:46:bf:69:65:0f:77:61:61:03:72:
05:88:48:52:a0:96:45:21:df:e8:e9:e1:0b:f7:d6:87:4c:7b:
7d:ec:02:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:46 2025 by rpki-client