Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/b6c422eb-8a88-33c7-b75f-566f8b2bc49f.roa
File: b6c422eb-8a88-33c7-b75f-566f8b2bc49f.roa (raw, json)
Hash identifier: 4bLsspzhxajaWc7UXWApDLA8Xw0kuxD/wzneGDRMDzc=
Subject key identifier: AD:C7:3E:4A:84:B3:AB:F6:17:48:63:43:27:5D:1C:C2:56:AA:00:E7
Certificate issuer: /CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Certificate serial: 010D0C9F4328584863CB146DE262201EEDDDD500
Authority key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/b6c422eb-8a88-33c7-b75f-566f8b2bc49f.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 134176
IP address blocks: 207.228.200.0/24 maxlen: 24
207.228.201.0/24 maxlen: 24
207.228.202.0/24 maxlen: 24
207.228.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:14:6d:e2:62:20:1e:ed:dd:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=c7f68418-2a47-423b-be0e-194bfa5b37e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:57:93:c7:ed:d2:b5:23:03:d4:8b:85:ec:7f:
06:1b:7d:1c:6f:23:9c:f5:89:2a:b2:09:f8:28:ee:
62:e3:da:55:4a:df:85:a3:f2:7b:50:81:dd:2d:da:
52:ec:d7:76:bc:d4:37:46:c6:e8:4c:d8:b0:7b:f4:
38:55:71:d2:bb:80:0f:23:f5:92:75:b7:b1:8e:fb:
0f:08:d5:28:da:14:87:34:8d:95:52:b1:51:4b:84:
3f:13:f5:88:b4:52:89:5d:f2:bc:1d:d0:8e:d0:05:
72:62:4e:15:fc:e2:12:59:88:49:8d:15:ed:90:28:
ee:74:7b:42:69:95:53:58:b7:e6:cd:21:ad:5e:11:
c7:c9:d4:ce:e9:ff:0f:6e:29:73:9f:53:84:5b:4e:
55:33:e6:64:59:33:c8:27:d5:bf:08:79:91:cb:ba:
a6:19:98:d8:5b:2b:c8:fc:2f:09:89:76:d0:a1:24:
52:c7:33:b8:9e:ae:6d:d7:24:e5:be:2e:10:41:3d:
03:d4:8a:65:df:37:02:b0:c4:67:bc:20:02:03:74:
8e:c3:e8:23:c2:c1:f9:fd:0b:30:51:e3:cf:f6:e1:
03:c3:25:77:8f:e6:7f:75:cb:e1:0f:05:fc:88:04:
9c:eb:fa:93:d4:93:d5:40:f6:7e:a0:a0:7d:34:25:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C7:3E:4A:84:B3:AB:F6:17:48:63:43:27:5D:1C:C2:56:AA:00:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/b6c422eb-8a88-33c7-b75f-566f8b2bc49f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl
X509v3 Authority Key Identifier:
keyid:5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
sbgp-ipAddrBlock: critical
IPv4:
207.228.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:7a:a0:de:b4:99:32:62:3c:30:ab:2d:47:a5:b6:fe:24:db:
da:84:71:01:79:3b:b2:73:68:50:5c:99:cc:09:a2:98:94:70:
61:5b:cd:9b:57:ea:6a:04:f3:0e:52:14:ad:f4:29:a4:e2:b0:
b4:b7:95:70:45:91:11:5c:bb:fb:fa:a1:5d:8a:64:0a:54:e2:
c7:ba:35:95:e3:c9:f8:cd:27:b9:8a:8c:ad:d6:3a:1e:af:53:
26:c0:fc:83:08:cf:10:07:f0:89:ff:95:5a:ee:fd:fc:e5:be:
b9:42:ce:7e:b0:cb:92:d0:8e:69:ac:d9:89:01:0c:96:d8:5c:
3d:7f:e9:41:5a:cd:f6:ec:34:b6:50:5f:7a:6e:85:1d:6e:89:
e6:2e:85:70:e5:06:20:e4:02:c6:2d:9c:52:c5:b6:bf:b1:df:
7a:ac:ae:8d:ba:da:fc:32:6a:0b:06:14:2c:5a:8d:64:4a:cf:
65:b4:f6:ff:cd:d2:a8:dc:c0:97:54:97:e1:e5:6c:4b:2a:90:
26:3b:1d:20:13:f2:c6:68:0f:72:72:01:8f:0b:d7:64:28:5c:
92:91:93:49:c3:3f:65:79:4f:b8:eb:0c:0b:b2:0f:90:e1:ac:
ee:2d:3e:a7:02:88:19:4a:bc:aa:b9:ef:3e:9b:c6:44:df:f0:
32:e3:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:00 2025 by rpki-client