Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa
File: 43923168-7671-34ef-8e05-2404a6ab8830.roa (raw, json)
Hash identifier: W/mvCYsRKY1ZWAgio9s2s21iGo95IEe1Qo0tx9VGRjo=
Subject key identifier: B2:52:5D:05:DC:45:7F:84:88:09:07:27:62:DC:68:E2:3F:49:F5:22
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F432858483E1AACCE9584004E1AD5FAC0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 398068
IP address blocks: 207.41.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:ac:ce:95:84:00:4e:1a:d5:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=fcf8eb39-1016-41c1-93ac-a64e7d5e0ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:a5:b5:e1:1c:fa:7d:ae:64:38:50:7a:52:
2c:9a:b1:9b:8b:1c:ca:97:0f:b4:5e:d4:3d:ca:09:
36:aa:dc:59:4d:c5:55:e1:d1:47:ac:83:35:f5:bb:
d1:9b:77:e4:d2:0e:be:db:6d:52:d2:2a:67:e0:4f:
8f:28:51:57:3f:19:1b:85:7f:2e:5e:f0:75:1a:c7:
d0:a3:bd:6a:b2:3f:83:df:48:73:bd:df:51:ed:6b:
64:41:78:42:2c:67:5a:82:4f:26:7a:f9:4d:14:8a:
58:df:9b:5a:fe:d0:ba:9c:0f:c3:e4:eb:b3:2f:34:
16:76:f7:c8:67:05:79:b2:9b:ac:a2:0e:a0:98:ef:
6f:8d:a4:25:9e:35:c2:3a:36:75:3b:b7:2e:0e:8d:
24:97:4a:c7:68:70:d5:5d:4d:e6:cb:51:80:c7:98:
75:cd:a9:9b:f7:c6:01:d5:81:2f:be:e4:fd:84:c6:
86:31:69:21:fb:33:89:cb:aa:2e:0f:b4:3c:fd:05:
3e:e4:66:7a:0c:64:44:f6:c4:cd:7a:fa:58:ba:9f:
f1:82:87:7c:85:d1:40:a0:aa:33:ef:02:b7:1d:75:
85:93:80:f9:e2:31:3f:dc:99:50:35:05:2a:fa:d3:
a0:2b:18:8c:53:16:13:70:6b:3c:c0:02:c9:fd:8d:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:5D:05:DC:45:7F:84:88:09:07:27:62:DC:68:E2:3F:49:F5:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/43923168-7671-34ef-8e05-2404a6ab8830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.41.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:a4:b1:f6:0a:a4:06:8c:6e:b0:4c:72:2d:ad:32:9d:a3:a3:
e8:49:0a:08:07:ea:10:14:3a:ee:e0:12:f7:60:da:bb:4c:7f:
b1:c5:47:36:40:3a:44:a0:0c:d0:66:7a:2a:92:68:ae:31:53:
6e:ef:23:7a:a1:78:d5:70:8c:5e:fb:e9:2b:ed:73:fa:25:1d:
15:08:bd:e8:fc:1f:7d:1c:41:52:a8:a5:df:3b:de:1e:2b:95:
5e:29:f5:f8:77:59:cd:dc:66:41:b5:0c:cd:3e:f9:99:50:4f:
98:3c:6e:db:44:10:af:38:9a:2c:82:0a:81:9f:0e:86:76:be:
50:27:33:01:43:6d:e0:aa:8d:12:84:5e:b3:b3:4b:e2:40:ca:
25:14:57:91:9c:81:53:5c:2f:d7:bb:75:57:96:7e:71:f1:67:
25:7d:6b:c7:c7:60:49:91:cf:4d:32:56:65:79:ce:5a:b1:39:
c0:8a:c7:e0:bd:10:2f:41:f6:17:30:74:56:51:38:be:c1:a5:
2e:1b:e1:a1:5a:6b:e0:43:2d:73:37:94:ce:26:a9:95:3a:2c:
11:a3:a2:94:df:c2:b7:31:cb:49:a8:0a:86:f0:20:30:49:dd:
b4:7e:bc:d7:00:c9:0d:94:c5:2e:51:67:0d:8d:9f:10:5d:df:
f7:12:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:49:56 2025 by rpki-client