Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/07dff386-a6b4-3b99-b1cc-808ccc001aea.roa
File: 07dff386-a6b4-3b99-b1cc-808ccc001aea.roa (raw, json)
Hash identifier: dg8Z3iylaNqp+FsAdDYxSETpGmtMdRZaZ+9jMuC33ok=
Subject key identifier: BD:EC:5A:94:E1:6B:0C:A5:A6:58:99:10:91:37:67:46:3A:30:EC:2F
Certificate issuer: /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial: 010D0C9F43285848037B67A884922CEFDADB4520
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/07dff386-a6b4-3b99-b1cc-808ccc001aea.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 207.64.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:67:a8:84:92:2c:ef:da:db:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=82b75b1a-5faa-4870-8267-ad09ddc4657d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:95:00:a9:8c:2b:e8:21:d4:a7:dd:2a:df:
16:e8:92:00:bc:d1:f4:fd:d3:ae:c5:a6:67:71:a6:
76:03:09:d9:ff:8c:48:21:1b:80:ab:5a:fa:2a:f3:
cc:ee:08:99:90:b0:75:f5:99:da:20:df:da:68:c0:
9f:9d:92:f5:d1:e9:66:ac:76:58:72:53:d2:7e:55:
f6:6e:2b:58:a6:5e:69:3c:b4:b9:87:68:b5:f9:b1:
60:5b:5b:f2:2b:20:72:c3:e7:3a:70:94:aa:40:84:
39:f0:99:96:9f:6b:f6:e2:0a:f9:21:e0:3b:3d:a1:
94:0c:eb:79:d3:39:e8:c8:3e:f5:fb:1f:fd:9b:11:
1a:b7:5d:de:3e:fc:ff:6b:0a:2c:0f:17:bd:97:b2:
26:03:8e:b2:ea:38:7a:8d:dd:e6:39:65:32:f0:dd:
89:3b:14:b2:dc:72:f9:8b:3c:d3:ce:09:d6:b8:a5:
cd:23:0b:71:db:56:2c:38:f1:11:98:e3:67:95:a3:
e9:9b:a6:8b:ad:f7:88:a5:cc:40:d1:6d:01:cb:bd:
3f:ba:12:6d:4a:3f:97:9e:fe:69:e6:b5:f1:36:b0:
4a:a1:f2:98:03:b9:88:19:e4:28:28:cc:cc:0f:32:
a0:8e:49:d7:51:da:a6:c2:6e:78:ee:2a:a4:c3:6d:
bc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:5A:94:E1:6B:0C:A5:A6:58:99:10:91:37:67:46:3A:30:EC:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/07dff386-a6b4-3b99-b1cc-808ccc001aea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
X509v3 Authority Key Identifier:
keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
sbgp-ipAddrBlock: critical
IPv4:
207.64.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:8f:6c:df:01:79:82:c1:1f:8c:fc:1a:5a:4e:e3:b3:7b:1d:
eb:a3:bf:8f:2e:9c:3e:b4:55:d1:c7:12:24:d1:1e:9a:3c:07:
e1:61:09:34:35:5c:03:dd:c8:4a:e5:14:3d:c8:b9:4f:0c:e5:
c7:44:ec:ca:57:6c:50:1d:cf:2e:8b:c7:43:9b:bb:19:c0:f6:
89:b4:61:64:9d:1a:19:6e:f2:cb:7e:4d:f7:21:8a:f8:c5:7e:
cb:d3:13:27:36:60:16:22:d6:4e:63:2e:ab:91:9e:26:cd:e3:
90:31:60:9f:63:75:0c:4b:a8:a0:e6:56:5a:95:54:c0:10:3c:
c8:1e:5f:9c:cd:30:93:63:97:42:5d:c4:33:97:df:08:99:da:
26:68:19:5c:e4:20:4e:81:b0:f5:10:ec:00:5c:2e:3b:21:f2:
65:54:ce:3b:e9:a5:a3:e7:c3:2e:8f:b5:e3:35:be:8d:a4:fa:
7a:80:76:a7:f7:6d:f8:8e:0e:6a:d5:dc:de:86:78:6b:d8:b0:
52:7e:1e:51:43:ad:bd:24:94:2d:6d:e6:fd:1c:7c:33:d0:f6:
2f:a8:96:cd:53:a1:56:4d:be:de:23:3e:6a:06:7f:1b:b7:04:
6a:d0:ac:9f:d7:bf:fe:16:b8:13:51:8b:5f:05:13:32:bd:68:
d8:e5:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:21 2025 by rpki-client