Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa
File: 0670fa0c-1c69-3756-85a2-81fa79b0198b.roa (raw, json)
Hash identifier: aysHBZckpXCVASc9ynVvHO9vCyDIWY2cmt78XRrjLrk=
Subject key identifier: 77:23:33:0E:62:98:E0:17:F5:DC:D6:83:8F:D1:14:EC:51:0C:D6:AD
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858487755D1008A60797E73FD5440
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 22781
IP address blocks: 207.204.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d1:00:8a:60:79:7e:73:fd:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=e52f13e5-947e-4815-a947-d980b7e4d86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:49:fd:4c:8f:1d:97:a4:ab:f1:03:21:5e:
f9:7f:00:d5:d2:ba:7a:48:00:cb:32:7b:01:67:4b:
a3:bb:8f:42:9f:02:71:90:6d:85:4c:73:3c:1e:7f:
96:98:b9:68:98:34:ba:22:a1:a8:ff:f3:38:2a:4b:
07:24:ce:f1:fd:c7:0b:cc:c9:94:4a:67:d4:1a:4c:
e0:d7:00:eb:4d:e6:2b:20:e0:1a:70:05:32:27:dc:
10:ef:a7:10:f5:8f:3a:6b:44:3f:de:5c:7e:80:f7:
47:4f:14:8c:34:87:43:a4:79:26:4d:f3:c6:c3:a2:
87:17:d8:65:ef:7e:ff:e5:5d:3c:fc:16:72:ab:e0:
63:5f:55:ca:a7:44:ae:42:b8:01:63:74:c4:02:8a:
c6:8c:63:a4:f1:b1:44:48:47:a4:72:46:7f:20:8b:
2e:48:28:d8:54:67:7a:b5:e4:cc:24:5b:ac:b4:9d:
57:52:61:eb:ba:43:f4:39:52:f9:c7:48:14:01:b3:
f1:52:43:00:0c:3e:8a:cf:2c:b1:a7:21:5f:97:58:
09:eb:9c:64:7c:0b:ba:40:5e:f2:ab:d2:0d:b3:10:
7f:63:3e:5b:76:f1:9c:07:3d:06:43:01:9f:f6:18:
73:9f:34:32:b5:e1:7b:5e:b0:20:9b:51:df:c9:16:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:23:33:0E:62:98:E0:17:F5:DC:D6:83:8F:D1:14:EC:51:0C:D6:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
207.204.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e7:db:02:b7:f3:39:3d:e0:57:ec:ea:f2:54:a8:ff:18:d3:
57:bd:83:34:5e:68:e1:92:3c:74:50:c0:fd:d6:b7:7d:be:d1:
13:b2:93:9c:ef:a0:8e:97:65:c1:b7:85:35:09:02:91:32:8c:
39:6f:3a:38:57:1c:5f:47:8b:91:99:d7:21:2b:c1:84:fe:32:
38:9e:4b:d3:ad:4a:f3:03:41:39:31:48:bd:0a:80:21:da:c8:
4c:89:d1:cb:d7:73:cd:6b:35:9e:f7:16:f4:bd:95:6f:c3:de:
5b:77:f5:e9:02:c3:bc:e4:8f:f1:5b:54:05:26:82:95:c3:24:
dd:eb:18:b2:a7:4a:2a:56:07:ce:95:1d:a2:73:7e:06:04:87:
94:ed:82:bb:b7:a1:f5:2d:8d:cf:53:16:fd:64:8c:62:df:3c:
0a:37:9d:ea:b2:29:4f:59:b1:0e:e5:4e:3a:be:33:80:2a:ec:
3b:d2:a1:63:7c:a1:fb:be:81:f6:10:a6:60:e9:f9:85:80:c9:
ac:9d:f5:3b:ed:53:7b:79:dd:63:f3:62:db:52:ea:5b:29:d3:
dc:28:3b:95:b5:f7:e9:82:64:82:ea:6a:31:f6:15:94:0c:14:
f8:5c:68:23:3c:6e:aa:3d:07:e8:b8:bb:5f:bb:df:98:73:ba:
06:44:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:20:06 2025 by rpki-client