Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/de756b51-9fe8-3f81-b919-b5aca3c06502.roa
File: de756b51-9fe8-3f81-b919-b5aca3c06502.roa (raw, json)
Hash identifier: 12VAjjXohXq+VZFOmIjZJRPSGmfKtr3rNfAJkzoFsOU=
Subject key identifier: C1:E3:E8:BE:D5:29:A6:7E:FC:22:CB:79:4A:38:60:D0:C9:A3:D5:2C
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584890F957F587120D68FE98AA80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/de756b51-9fe8-3f81-b919-b5aca3c06502.roa
Signing time: Thu 16 Jan 2025 18:25:41 +0000
ROA not before: Thu 16 Jan 2025 18:25:41 +0000
ROA not after: Wed 16 Apr 2025 17:25:41 +0000
asID: 395075
IP address blocks: 207.96.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:f9:57:f5:87:12:0d:68:fe:98:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 16 18:25:41 2025 GMT
Not After : Apr 16 17:25:41 2025 GMT
Subject: CN=30065d4f-bb2f-4ed6-b79b-3e9ba3648f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:3a:22:de:de:f4:0c:1a:36:a5:d0:ab:cf:
af:99:63:b2:bc:36:8b:af:f8:35:73:57:bb:a5:6e:
74:14:d8:a8:c6:a4:94:01:f0:d8:3e:58:a0:bb:a1:
2e:2a:a3:58:60:c6:c0:f7:b8:36:c9:80:62:86:25:
d2:1a:09:4f:2e:8c:9c:03:d2:d9:12:b5:b5:a9:5d:
b4:74:38:4a:b6:89:f9:86:97:35:90:e0:31:69:39:
c1:22:d1:21:be:86:1c:23:79:e1:5c:b5:4e:cb:25:
ac:c5:81:72:92:7e:25:ac:ed:17:1a:4f:5c:b8:4c:
c4:a8:b9:63:1a:b7:f2:ba:16:26:c4:be:00:d5:cb:
d6:d1:ea:7a:41:e6:e8:05:7b:b5:a5:42:d5:95:0b:
52:2c:bf:2a:be:70:88:4e:8d:fe:53:e7:6d:4f:42:
f9:cf:d8:26:0e:9b:47:7e:b6:4c:49:8c:01:b5:ee:
fb:64:7e:da:8b:9b:16:8e:fb:62:18:64:04:8e:08:
79:de:08:24:88:89:19:82:3a:71:ea:77:c2:b1:d0:
32:6c:4c:60:f4:e4:a5:ff:cc:06:81:23:62:52:56:
9c:7a:13:ba:01:73:84:41:20:06:e7:8e:cb:02:57:
d9:42:5f:72:3d:6e:36:ff:9a:3a:21:d0:36:7e:e6:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E3:E8:BE:D5:29:A6:7E:FC:22:CB:79:4A:38:60:D0:C9:A3:D5:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/de756b51-9fe8-3f81-b919-b5aca3c06502.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.96.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b1:a6:32:27:44:02:67:9f:a5:20:6d:ec:8c:7d:ae:5f:ba:
42:16:9c:b5:93:21:92:0f:a0:bf:18:ad:fd:8e:69:e9:4d:d0:
12:aa:bc:00:06:36:e3:42:62:d7:c7:87:ff:48:ef:7e:af:3a:
78:4c:05:3d:a9:2e:d5:12:e7:82:8d:7b:72:35:3e:8c:be:f4:
eb:3f:6d:46:71:4b:64:29:f9:5b:f1:19:31:74:de:70:7b:cf:
23:a2:a5:f7:b2:30:db:1a:bb:ef:e1:9a:77:7d:16:ea:10:6f:
ca:2d:5d:94:e3:0d:ac:c7:a4:24:7c:fc:bc:6f:2b:3d:8c:01:
51:da:36:9e:ed:db:80:d5:12:b0:f8:fb:23:c1:8f:11:75:71:
90:30:71:aa:2a:73:79:dd:19:c5:76:53:5e:d0:54:de:b0:78:
7a:b7:b7:9a:de:76:4d:15:b0:c9:98:36:ce:05:22:22:e9:c4:
35:7d:8c:b6:3e:03:88:a7:ea:e8:c6:1a:76:39:b5:f8:ba:08:
ef:71:d9:d3:76:d3:76:77:02:91:ed:9f:52:e4:75:6a:e6:0e:
bb:f6:4d:2e:0d:80:1b:49:b8:2d:01:13:24:7c:7b:71:ae:31:
d1:12:05:b1:69:5c:c9:5a:f4:6a:04:9a:60:75:38:b0:d1:e8:
42:63:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:23 2025 by rpki-client