Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa
File: 2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (raw, json)
Hash identifier: EF2I3pjn/h6ASVg2ssCZ8IHgats89Yw5yjv3C7mb+hE=
Subject key identifier: C5:31:98:02:18:FE:CC:BA:31:8D:4E:E9:93:52:B2:07:25:F5:07:32
Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial: 010D0C9F4328584835BA99ED1023702EAF9C6740
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 400790
IP address blocks: 207.228.217.0/24 maxlen: 24
2606:f6c0:40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:99:ed:10:23:70:2e:af:9c:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=ae2b131a-a83a-40db-a88c-2c62cbe34df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:33:08:62:d8:9e:95:2e:3c:68:19:02:48:
2a:cd:96:6a:37:1c:9c:e5:ec:b6:38:d2:b7:eb:2a:
87:6a:bb:9b:a9:68:d4:dc:0c:3f:4c:3b:20:df:c5:
21:7a:1e:78:ae:4a:e2:09:a7:26:04:82:15:8a:7a:
c8:53:ed:b7:43:62:de:50:f3:87:f7:6b:c0:6f:4f:
30:8e:ee:17:66:db:15:96:1d:bc:6a:e0:9f:03:16:
37:05:99:e5:4d:db:fe:98:ef:8f:7e:24:b2:1f:47:
41:65:3d:ba:0e:43:ca:13:fa:36:58:4f:2c:7e:14:
c2:41:37:ab:62:06:73:5c:23:46:36:cd:66:45:95:
1f:fb:b0:ee:ad:fd:f8:64:a8:56:a8:22:04:11:0a:
2b:9c:93:a2:62:fa:32:6b:fa:ad:43:b3:8a:e4:11:
93:bc:63:b0:da:33:5c:12:0c:03:7e:3f:55:f8:e3:
ef:a4:df:fb:a3:f1:91:14:b7:fb:61:06:60:c0:76:
a8:8e:96:c1:0a:09:05:d6:a2:54:3b:63:f8:48:86:
71:cf:f1:0f:4f:f2:fd:11:6e:12:17:99:bb:1b:a3:
a6:aa:4e:8c:5b:61:8d:53:60:f8:aa:f5:ae:77:3b:
eb:55:54:48:9f:8b:de:2e:1b:95:54:e5:0f:0f:56:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:31:98:02:18:FE:CC:BA:31:8D:4E:E9:93:52:B2:07:25:F5:07:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl
X509v3 Authority Key Identifier:
keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.228.217.0/24
IPv6:
2606:f6c0:40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:0b:17:69:ef:e9:25:0e:ae:ae:0b:34:9c:bb:d0:27:6e:38:
1d:fd:1f:94:06:dd:e3:06:80:b6:a6:84:cd:2a:ed:9e:0b:71:
b7:79:ff:95:10:90:d6:46:44:10:06:57:38:33:48:f1:2e:d5:
1a:5b:b3:3d:7e:cd:7c:06:3d:63:f1:b7:ca:64:73:ad:91:af:
bd:ac:07:61:79:af:92:de:c5:77:d7:44:8d:66:4c:f3:21:1a:
37:cb:7e:19:bb:37:50:02:49:9d:a9:0e:6b:eb:ba:d3:ef:30:
60:af:5d:76:75:dd:61:c1:77:bd:d7:ff:88:42:7a:9c:48:3c:
73:02:2b:10:60:9f:96:bc:ec:56:4f:39:33:f9:4e:51:15:28:
75:d8:eb:99:a4:d3:2e:79:7e:7d:a2:c8:75:ad:aa:3f:6f:a1:
e7:b7:b5:5e:e3:d9:94:d4:a5:e2:a4:a4:55:5e:86:de:a8:84:
70:2e:99:ca:87:e3:01:a2:57:e8:ed:38:e0:cf:3f:da:48:a7:
28:e2:6d:4b:d4:7a:3f:0c:23:0e:7c:7b:21:b9:16:62:94:70:
cf:8d:0d:c5:34:08:7a:30:89:58:40:9f:ea:0d:56:07:02:f9:
dd:21:d4:3c:79:26:42:6b:f0:1f:34:49:a5:e0:6b:db:34:95:
2d:33:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:21 2025 by rpki-client