Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/de3fdd00-d655-39db-8f4e-e0e97e9907a4.roa
File: de3fdd00-d655-39db-8f4e-e0e97e9907a4.roa (raw, json)
Hash identifier: 76CMXZfXexPyWDBO6vHydmmVWwiAoqFC/+bGzTYfhSQ=
Subject key identifier: 8A:81:72:A5:94:1C:45:61:0A:A7:71:C3:26:BB:8F:0E:05:F4:27:36
Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial: 010D0C9F432858484EDABDF3BF2A9A9D4B8CF900
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/de3fdd00-d655-39db-8f4e-e0e97e9907a4.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 376
IP address blocks: 207.162.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:bd:f3:bf:2a:9a:9d:4b:8c:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=1e230835-3870-49ec-8623-dc43dc70c180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:16:2f:c5:2d:65:3f:9e:c0:74:77:fd:46:
b8:4c:5c:0f:cd:67:da:69:90:8e:fd:d2:b4:49:ff:
d9:e1:53:3e:f6:cd:b0:30:0b:7e:dc:c3:da:32:2d:
ee:1d:e8:1e:a8:68:be:c7:2b:cc:c7:79:d1:73:f9:
9e:18:77:a9:41:6f:50:da:35:5e:77:db:e7:74:12:
a3:de:20:eb:cf:e9:f6:15:2d:ef:c2:b8:9c:f1:07:
c3:5e:01:f0:5b:12:23:73:09:d1:2a:65:e1:13:57:
45:06:7b:72:d0:af:5b:9e:49:63:d5:eb:21:95:a2:
08:3c:72:01:f0:a9:5f:8a:c3:37:b0:1e:4f:8f:21:
af:e1:57:ea:91:d3:74:17:9e:de:fc:02:5b:bf:50:
0d:22:1c:a6:c8:f5:42:2b:32:9d:9a:33:42:be:d8:
21:88:82:1b:86:44:5b:15:75:20:1c:da:31:e8:a5:
91:03:4f:7f:80:cd:ec:66:22:f5:0d:38:40:6f:0d:
85:76:15:c5:dc:51:17:f2:6b:20:f7:c9:fa:8b:85:
8c:0e:95:8b:66:d7:c2:89:4b:3b:7d:a8:53:93:e1:
15:33:59:0f:e4:99:1a:bf:65:81:1e:b9:3f:67:ed:
a9:94:51:53:9a:b4:e1:da:69:7d:42:ae:ed:38:30:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:81:72:A5:94:1C:45:61:0A:A7:71:C3:26:BB:8F:0E:05:F4:27:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/de3fdd00-d655-39db-8f4e-e0e97e9907a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
X509v3 Authority Key Identifier:
keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
sbgp-ipAddrBlock: critical
IPv4:
207.162.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:ea:63:97:ec:50:1d:aa:92:6b:44:e3:35:41:45:f6:36:dd:
33:e4:37:ed:cb:21:98:86:30:01:db:94:69:ba:0e:fd:2e:a8:
a6:9a:0c:f0:31:e1:b6:b2:63:a7:4a:41:be:72:5b:c6:9d:5e:
6b:06:89:d2:58:91:89:98:2c:f2:c3:fb:47:85:51:71:b2:70:
0f:68:80:bd:be:11:2c:b4:67:55:e8:b6:4b:43:d7:9f:1a:75:
2d:3f:da:3e:8c:83:97:fe:37:d5:ba:91:38:fd:fc:2e:79:13:
d5:78:29:75:b8:9c:01:ef:0a:92:b5:10:80:aa:be:d9:65:4e:
7c:a4:2a:d0:74:02:21:f3:02:a9:08:ff:79:cc:ca:13:40:b5:
40:61:fd:59:97:4a:d9:35:1d:0d:40:17:7a:1f:65:66:de:17:
4a:c3:5a:c5:d1:cf:fa:a0:80:b7:8e:0b:36:0d:b9:c7:2b:db:
0a:80:9a:e7:4a:e8:a6:aa:8a:f8:3e:1c:92:a8:97:01:c5:93:
a0:b4:cc:9c:e7:51:7e:60:32:db:32:40:27:7e:10:78:ce:ec:
8b:ab:29:28:7d:65:8d:74:4e:dc:80:8e:e9:b1:73:a7:10:ea:
c4:5d:6a:45:f7:51:12:ad:33:66:0f:2f:d2:a8:4a:0f:08:6a:
c2:7d:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:37:01 2025 by rpki-client