Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
File: 2f8b5844-754a-3987-8ab2-f733b85a8928.roa (raw, json)
Hash identifier: 9ffyj1oBHr1nrB6qKReSbrFpx25EjX5Sa0AucBPW03k=
Subject key identifier: C7:AF:29:83:22:C4:54:26:85:E4:9B:63:F1:79:22:56:92:5B:63:49
Certificate issuer: /CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93
Certificate serial: 010D0C9F43285848EF61608F116FCFF1E6CAEDC0
Authority key identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 6491
IP address blocks: 204.89.198.0/24 maxlen: 24
206.197.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:60:8f:11:6f:cf:f1:e6:ca:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=1d6f3b1a-7b0d-4a60-8f54-29ebfd4e3756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:bf:69:4c:55:dd:80:8c:ea:3f:37:0b:14:
ca:5a:42:bd:ad:89:08:e4:91:57:a7:8b:4e:b6:30:
6c:1c:0e:c5:85:80:77:dd:43:ac:86:39:08:ab:ff:
27:16:5f:c8:c7:94:29:f8:13:99:08:ce:f8:97:30:
0a:d2:81:ea:20:0a:24:25:8a:9b:37:98:e4:60:43:
59:cb:0d:ed:45:62:3f:58:50:76:a4:91:1e:a9:30:
a0:d1:cc:26:eb:77:9b:2b:06:62:f1:b6:a8:70:7d:
40:cd:6c:ce:24:e3:7a:a8:77:10:d3:84:ec:e2:88:
d5:c9:91:2c:f4:b6:2c:40:2a:7b:0b:c6:e4:88:06:
d9:ac:60:40:61:4d:91:a4:87:48:05:44:3c:ea:05:
cc:0b:3c:ac:60:cb:1f:7b:78:ba:1d:d7:f3:51:a3:
14:d2:dd:de:f9:f0:22:1b:44:c3:e2:04:a6:87:90:
be:bb:f4:d4:9f:f0:44:3f:31:10:1a:b2:53:ed:69:
4b:45:50:62:80:5a:78:08:b7:45:12:5a:bc:58:29:
5f:28:39:50:52:67:f5:c1:c3:7c:dc:77:38:35:03:
d3:c1:35:b6:b9:32:26:88:41:63:16:2e:6f:9d:1b:
1f:c1:09:1e:3b:08:54:b7:bb:56:3d:c4:1c:c3:87:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AF:29:83:22:C4:54:26:85:E4:9B:63:F1:79:22:56:92:5B:63:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.crl
X509v3 Authority Key Identifier:
keyid:1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer
sbgp-ipAddrBlock: critical
IPv4:
204.89.198.0/24
206.197.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:99:de:e6:20:e8:f3:f5:40:c2:8c:0a:5f:44:42:a6:d5:f4:
db:c3:9a:cb:3c:1c:f1:54:67:7b:47:09:62:e0:a7:76:85:fc:
74:ad:36:a3:a0:73:29:8d:01:df:38:20:ad:92:01:22:56:1d:
44:4e:49:27:1d:b5:06:42:c3:02:f4:92:5f:ff:94:5b:37:16:
57:f1:f1:e4:55:95:0f:a7:cc:59:aa:c6:71:83:fc:a5:3e:f4:
db:ac:11:fd:fe:8c:a2:c1:34:c5:46:e2:5d:43:84:db:20:d8:
fd:c3:ee:9f:41:d2:06:36:90:36:44:c5:ab:cd:04:ec:a8:0f:
41:94:90:f4:98:d1:04:d8:35:56:69:33:d5:1c:d0:71:b3:d3:
c9:c2:1e:01:31:b7:e0:ec:52:92:76:52:bd:5d:2f:e9:6f:b5:
f6:84:11:18:d3:8a:25:f9:11:86:12:0b:2d:35:11:8f:d9:af:
8b:5c:00:bf:c2:f7:c0:0f:92:6d:9b:a9:c0:b9:9d:38:88:0c:
10:14:7d:69:cd:88:44:32:6a:c5:61:0a:da:76:df:b4:ba:59:
fc:2b:63:d5:60:b8:a7:60:ef:2e:5d:96:e0:44:6d:8b:2c:e3:
bc:b1:51:d6:1b:c5:81:b8:77:51:00:27:e5:41:dc:b8:39:1d:
f9:03:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:46:01 2025 by rpki-client