Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2a799575-489a-377f-8d63-903f7e71c982.roa
File: 2a799575-489a-377f-8d63-903f7e71c982.roa (raw, json)
Hash identifier: akzZOc+v4spP+LIV3lIpL5rmteX5mF3ef+qa5rJyBBo=
Subject key identifier: FF:63:11:6C:D2:27:4B:10:72:16:19:BB:FC:FF:51:F8:3A:90:CD:1B
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848911AC781AC677C3AD4D27600
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2a799575-489a-377f-8d63-903f7e71c982.roa
Signing time: Thu 16 Jan 2025 19:33:03 +0000
ROA not before: Thu 16 Jan 2025 19:33:03 +0000
ROA not after: Wed 16 Apr 2025 18:33:03 +0000
asID: 30336
IP address blocks: 207.96.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:1a:c7:81:ac:67:7c:3a:d4:d2:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 16 19:33:03 2025 GMT
Not After : Apr 16 18:33:03 2025 GMT
Subject: CN=bed3bf5d-c6d3-4696-a0ec-1d9d4a5487fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:9e:3f:9e:cb:95:1c:31:73:89:96:6f:48:
e1:98:3c:74:e2:1e:e8:62:45:66:08:6b:68:25:6f:
48:f5:a7:b9:06:0d:09:69:bb:ed:30:22:8b:6f:10:
f0:41:ab:43:f3:f4:b9:26:fd:01:5e:25:a1:01:c7:
b9:ab:39:49:92:0c:bb:52:28:f8:7c:d0:c4:a8:db:
99:33:6f:20:ac:9d:d4:ce:fe:e6:a1:c5:8a:82:61:
eb:f6:55:ad:9b:e0:1c:ff:c7:9a:ea:e3:2d:b4:0f:
08:f3:f5:92:61:af:d6:7c:16:9f:d5:44:18:6d:62:
de:fc:c0:6c:d5:94:b1:e3:e7:a5:15:1a:a2:05:4e:
c3:32:18:cb:d9:99:33:75:86:70:8b:ae:e1:80:6b:
11:e5:a4:01:d3:1a:e5:a1:04:6d:57:0e:3e:da:2c:
dc:5d:ec:1a:b0:56:a0:ff:91:26:1c:0c:68:7e:70:
b2:69:71:7e:3c:e4:d1:9b:be:5e:08:c4:a4:02:ad:
e6:10:e6:e2:a0:0a:a7:b7:b6:f7:ac:a7:92:a6:da:
ea:77:92:45:3b:32:ba:31:f2:99:f6:d6:d1:af:ee:
02:67:76:a2:37:f2:75:0f:a6:67:9d:06:f5:2d:9c:
36:22:f9:0d:2a:c4:d6:1d:83:c0:f2:31:38:31:73:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:11:6C:D2:27:4B:10:72:16:19:BB:FC:FF:51:F8:3A:90:CD:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2a799575-489a-377f-8d63-903f7e71c982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.96.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:65:7e:3e:56:33:3a:27:7e:e8:63:fa:c8:17:3b:cd:a8:d4:
cd:ed:4f:41:4d:ab:cd:80:d9:2e:c9:15:ec:13:76:4d:97:56:
78:bc:60:f5:86:aa:d2:1c:7a:39:e6:da:8b:5f:7e:ac:1d:e3:
3f:e7:3a:07:c6:a9:fd:77:99:e2:0a:27:fa:22:d4:08:d2:00:
41:c2:ea:2d:0c:f2:ee:86:b4:c8:4f:7e:1f:7d:c1:b7:cf:08:
6b:b0:c9:d8:9f:1c:35:b0:7f:36:e9:9a:b4:97:2d:ff:32:3e:
b6:16:1b:59:ea:02:80:f9:83:a6:ad:71:0e:9f:f2:3f:e0:d1:
08:59:a0:b5:c6:9c:f0:67:1a:14:bc:e0:30:74:73:d4:66:89:
cf:b8:25:e3:68:7a:ce:83:8c:61:f3:8e:bc:a5:d0:1e:9f:e2:
fd:65:31:d3:a7:55:71:5b:9d:07:75:80:a5:6a:70:af:53:ed:
e4:af:01:2e:2a:79:45:83:1b:db:a3:c1:a5:36:31:d9:ad:bc:
d6:8a:fb:aa:8c:5d:4c:ba:e1:84:6f:da:e8:ff:4b:70:2b:dd:
3e:54:c5:95:07:6e:b9:23:b1:ef:59:a8:92:b2:66:d3:7a:2d:
7c:8b:03:46:81:9c:58:fb:e0:77:23:f5:29:1a:46:14:7c:42:
fc:ba:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:25 2025 by rpki-client