Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3567da57-b1d6-3927-b030-0f8db6e731ab.roa
File: 3567da57-b1d6-3927-b030-0f8db6e731ab.roa (raw, json)
Hash identifier: BSwneQkwlbTO2XBjMY+kqj5mw8LHDgmbXzz78CNK1Pc=
Subject key identifier: DE:78:3D:55:33:16:4D:8A:4D:6E:46:B4:C2:A6:E9:A8:85:D2:9C:37
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848A169D517EBB17B73C81861F8
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3567da57-b1d6-3927-b030-0f8db6e731ab.roa
Signing time: Wed 22 Jan 2025 15:45:16 +0000
ROA not before: Wed 22 Jan 2025 15:45:16 +0000
ROA not after: Tue 22 Apr 2025 14:45:16 +0000
asID: 395075
IP address blocks: 207.253.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:69:d5:17:eb:b1:7b:73:c8:18:61:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 22 15:45:16 2025 GMT
Not After : Apr 22 14:45:16 2025 GMT
Subject: CN=774ae1c2-110c-49d3-9414-4a172a35037c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:d3:4f:35:fe:ff:8d:cc:21:d0:57:b8:f9:
21:59:52:53:97:28:13:13:23:15:45:be:66:62:2c:
86:44:51:4e:48:6f:cd:c7:49:6f:5d:97:52:34:7c:
91:1d:e2:5d:40:22:f1:e4:4a:37:23:3d:47:b4:23:
3e:bb:0f:80:3f:0a:9f:11:a3:45:c4:83:83:cd:c0:
f7:79:10:66:9a:48:eb:a6:3e:79:40:9b:d5:06:71:
70:bb:e3:75:d2:b2:99:03:fb:a0:3b:3f:eb:9f:aa:
6b:47:d4:d2:f6:ec:5c:6a:b3:a7:c6:a3:10:f0:d5:
dc:d3:7c:ea:9c:28:fd:01:af:30:40:04:13:51:71:
72:95:70:fd:3e:ef:98:19:91:bb:ec:bd:bb:f1:eb:
81:e7:98:63:37:75:8e:3d:78:1a:22:cc:43:77:76:
24:f7:9c:5f:a5:75:a7:f0:c2:1c:d0:f8:9d:01:fa:
2d:b8:c6:74:34:33:0a:0b:fd:ef:91:6b:e1:19:47:
6d:46:0a:13:9f:92:65:99:45:0e:10:d3:30:b5:3d:
0e:3c:1b:80:1a:09:e7:b3:2d:a2:5c:56:21:e5:56:
32:76:c1:5c:62:c1:74:10:95:9a:a2:dd:1f:c6:68:
8d:76:d3:d4:82:8d:6e:11:99:e7:d5:bf:42:03:97:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:78:3D:55:33:16:4D:8A:4D:6E:46:B4:C2:A6:E9:A8:85:D2:9C:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3567da57-b1d6-3927-b030-0f8db6e731ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:bd:86:c4:cd:c3:fc:f8:34:ba:be:9c:9d:38:78:6a:fb:b1:
fa:b7:2b:d5:34:ea:54:8a:94:ab:48:93:4f:03:68:d0:09:4c:
d5:3c:72:73:d0:54:4d:91:18:61:ac:15:ef:78:c8:f4:23:7c:
f1:fa:9c:da:c9:8d:ad:c8:a1:66:41:96:4a:fe:09:3c:98:94:
1d:64:74:f5:71:44:eb:1e:46:c2:f7:2b:00:fa:8a:e0:00:7f:
59:9f:61:8f:4d:2d:1d:f1:a0:00:3d:34:6d:0e:0d:4d:53:9c:
e4:f9:e3:37:98:15:89:87:3a:c3:2e:cf:b3:10:5b:e3:81:9b:
13:29:72:48:17:67:af:eb:f3:c6:31:ce:fe:7d:de:f9:0a:69:
f1:1b:34:12:6e:50:19:81:c1:f0:0f:83:06:4f:94:e1:38:59:
24:ca:40:36:fe:8d:c6:a2:83:31:02:6f:c1:ec:2c:2a:7d:ab:
f7:03:53:c6:d1:96:e6:44:ee:da:ac:f0:b5:ff:d5:57:b5:52:
bd:9e:de:3c:cd:bd:7e:18:17:01:56:42:a4:a9:26:ac:d7:74:
f2:0e:6c:25:57:0b:d2:e5:8a:93:e5:84:00:9e:ab:64:12:ed:
34:62:f6:98:b9:04:fa:8e:3f:49:0b:12:d0:69:67:9e:14:4d:
f3:88:09:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:09:20 2025 by rpki-client