Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/dc0436c7-83ef-331c-a257-e37b035fa9be.roa
File: dc0436c7-83ef-331c-a257-e37b035fa9be.roa (raw, json)
Hash identifier: N8sfS19Fs8vRcq4DAlLkrL0SxQkrFi2togFJ+TqPzMQ=
Subject key identifier: CE:7F:2E:D5:71:85:8A:81:2F:79:0C:76:65:9A:E9:27:15:BB:F2:51
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F4328584845157FC8FA659550A5CAE700
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/dc0436c7-83ef-331c-a257-e37b035fa9be.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14061
IP address blocks: 67.207.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:7f:c8:fa:65:95:50:a5:ca:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=4c286288-37f8-4546-8926-07d8f7db603f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:22:ce:db:91:43:dd:74:56:bc:e0:b8:eb:
a4:16:7e:4b:bd:5b:7e:38:d3:15:36:22:a5:b1:05:
db:8d:ab:48:d1:94:08:0f:05:1f:7e:2a:0f:55:6a:
52:1e:77:34:14:2c:bc:95:e2:b3:07:c7:48:4d:0d:
08:a5:69:11:12:a6:05:b9:56:36:96:bc:a5:be:5b:
36:7e:5d:14:a5:72:bc:84:b9:44:7c:ee:df:05:e1:
2d:a0:12:c6:8c:f6:b2:ec:48:47:0e:b9:18:73:64:
fb:2b:19:d0:b4:5e:d0:ba:c3:cb:34:1a:45:df:e0:
85:fc:36:de:89:2b:43:49:1a:0d:06:a1:42:8d:58:
98:28:2a:73:74:0b:1d:8c:3e:7a:61:8a:03:ad:d5:
33:d0:12:72:7d:0e:69:a9:38:08:01:d6:37:1a:d1:
6d:0a:99:f8:3b:3d:39:ef:17:a7:5e:db:1f:cd:b6:
a1:af:82:18:f8:5e:84:13:f5:61:8f:ff:df:56:ac:
2a:55:15:fc:65:78:ba:5a:5e:a4:c8:d0:b9:c9:82:
90:09:05:2d:45:a6:c0:8b:5b:90:3e:61:11:82:52:
10:b5:25:2e:b9:d1:1a:39:d0:f9:59:a5:7b:58:4c:
7e:3f:a4:c0:e1:d8:8e:f3:01:9c:d7:a6:53:52:f0:
7f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:2E:D5:71:85:8A:81:2F:79:0C:76:65:9A:E9:27:15:BB:F2:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/dc0436c7-83ef-331c-a257-e37b035fa9be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
67.207.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:2b:49:1b:b8:4c:ae:cc:65:0b:d9:32:58:3c:92:62:71:0d:
14:44:f2:5c:18:a3:66:2e:6e:e6:cd:cc:26:50:38:45:ff:71:
51:f2:c1:f9:4f:03:34:e2:b9:94:39:e7:36:85:bd:ad:9e:89:
95:d3:ea:76:aa:d5:bf:0f:a7:0e:38:12:c8:33:75:cd:cc:e9:
e3:34:9f:84:81:e7:09:a1:88:e2:2c:48:42:3f:a7:ef:34:67:
c2:f2:33:bd:25:ae:ea:9c:1f:2e:bf:b1:d9:e2:88:81:e2:37:
70:6d:54:57:9d:1d:5c:e3:87:e9:19:4f:c8:48:22:20:d8:59:
e1:0f:12:43:e9:a2:f6:35:92:e3:68:d3:c6:bf:d9:0e:2a:b8:
27:a8:4c:f3:57:83:1b:36:34:d4:bb:11:9e:b0:8c:9d:c8:80:
c2:bf:5f:9d:5e:84:b1:ae:1e:8d:61:e0:87:ea:33:6e:9c:36:
99:2e:c1:01:59:5c:db:fe:81:32:86:34:cf:68:e7:66:cc:9c:
f3:f5:7b:d0:e5:bf:f6:b2:d0:f9:61:3c:0f:fa:5a:91:54:46:
5f:91:fa:d7:57:11:e2:49:8c:08:3f:ea:50:65:cf:54:15:4d:
99:6a:81:20:17:47:43:5c:3b:7e:61:2a:f0:e2:62:35:98:11:
cf:c2:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:29 2025 by rpki-client