Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b8e0bd29-1d94-3ef0-9318-cb524389cd58.roa
File: b8e0bd29-1d94-3ef0-9318-cb524389cd58.roa (raw, json)
Hash identifier: A/kfHv5ngOKtGlFHRYM1Vev+THHsP4HJB96uWWkKVCw=
Subject key identifier: 2E:71:44:B6:A6:7F:F0:0D:E7:BF:70:C2:A6:2C:CD:62:AE:27:73:41
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584890FDBDCE3F150A3BC9F8E300
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b8e0bd29-1d94-3ef0-9318-cb524389cd58.roa
Signing time: Thu 16 Jan 2025 18:34:33 +0000
ROA not before: Thu 16 Jan 2025 18:34:33 +0000
ROA not after: Wed 16 Apr 2025 17:34:33 +0000
asID: 395075
IP address blocks: 207.96.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:fd:bd:ce:3f:15:0a:3b:c9:f8:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 16 18:34:33 2025 GMT
Not After : Apr 16 17:34:33 2025 GMT
Subject: CN=a853265d-5fac-456f-a0f1-585907a1871f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:8f:70:1e:0b:8a:0d:7f:c6:24:1d:42:68:
57:bb:32:21:d6:81:96:1e:8a:98:58:1c:20:eb:48:
ed:a0:fd:9c:ba:fb:dd:89:80:7e:44:f0:89:23:80:
94:c0:cb:0e:8d:c4:8b:a2:a8:6e:35:6a:3e:a7:2a:
ea:90:8c:05:f3:ba:4a:f1:ea:4c:57:b8:e0:ae:9c:
92:ae:b3:66:b0:f5:f7:91:39:0c:95:26:5a:36:62:
a6:f0:58:09:a7:84:a1:b5:de:20:19:fa:e7:db:bc:
8f:a7:33:b9:d3:c7:80:2b:57:24:2f:de:c7:e0:1a:
d1:20:6f:86:f6:7e:0b:b0:ee:76:27:29:66:37:57:
34:7c:52:c7:08:f7:81:50:22:35:1d:c6:cf:69:7d:
cc:e0:9a:45:af:e9:a6:d5:11:ba:17:2d:d3:40:53:
a9:6b:9d:04:bb:64:fc:99:8d:cc:e4:40:84:45:d0:
ef:5b:43:86:3b:e4:78:72:72:3f:26:b9:ae:83:ce:
20:e6:33:ab:f5:26:fe:da:7d:d4:cc:67:a1:b8:68:
d9:28:98:dc:57:9a:29:ae:ce:99:d2:ca:ca:45:b3:
03:1a:80:18:97:b3:fa:07:6e:98:f7:04:49:4e:4e:
73:7c:9a:4b:44:89:81:e3:a8:db:f6:72:28:ee:b7:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:71:44:B6:A6:7F:F0:0D:E7:BF:70:C2:A6:2C:CD:62:AE:27:73:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b8e0bd29-1d94-3ef0-9318-cb524389cd58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.96.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:70:5e:97:e0:f0:0c:0b:9f:ae:01:14:32:29:b2:25:99:89:
64:67:2c:26:e2:1a:b8:f1:d4:ca:39:f8:29:d4:a8:71:58:66:
2c:ee:7a:aa:52:52:44:0a:d7:b2:a8:21:1d:81:35:16:56:0f:
f0:50:1e:29:d9:03:7b:fe:6f:6a:57:d5:0c:21:9e:a5:5d:64:
09:65:f5:05:6a:ec:23:5c:78:e5:33:47:9c:bc:11:6f:ce:03:
21:fd:ab:7b:13:ad:12:0c:27:c5:72:59:4a:ed:84:bc:79:ca:
c4:f5:8d:3d:70:7f:7b:6d:b0:07:92:1e:ab:5d:76:c7:70:2e:
08:3c:9f:af:ed:12:0c:ce:54:d7:1f:fa:d2:de:5e:1f:c7:0f:
4e:bc:bf:ce:19:0a:59:f5:ad:e6:cd:4f:ee:de:8f:38:9c:6d:
f5:4a:38:52:5c:b1:4b:4c:42:26:d6:0d:2b:d7:57:6d:5f:c6:
03:9d:3a:01:d7:05:18:51:1d:9a:7d:d5:74:56:53:c3:a2:ad:
8b:84:9c:f9:5b:b8:d1:d6:c6:d1:85:5d:16:00:bb:b8:a1:a7:
1a:04:80:11:c8:48:c5:34:16:29:9f:d0:27:ab:fe:9b:df:0c:
c7:b5:3e:6e:92:2d:16:22:ff:06:1b:b8:c1:0d:74:81:83:da:
26:56:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:48:42 2025 by rpki-client