Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa
File: 12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa (raw, json)
Hash identifier: EalXaDyqtxuwspwcdnooRh4hEGLQACbIZNR6YGpZLE8=
Subject key identifier: F8:62:37:DC:68:E5:EE:91:8D:00:15:7D:94:9C:14:EE:5F:27:2B:B8
Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial: 010D0C9F43285848854B4F291FA8A251B049A700
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 7029
IP address blocks: 207.170.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:4f:29:1f:a8:a2:51:b0:49:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=f2fb3bd3-953c-4118-a65e-320305b64519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:cf:eb:c1:bf:1a:44:02:06:be:86:35:37:
8a:69:9b:3b:17:28:be:ce:e4:5a:d3:37:fe:16:63:
ad:76:a9:2e:40:fc:5d:35:b6:c4:7b:24:22:4c:e8:
02:38:b6:b5:4e:0c:fa:42:da:77:17:8a:ff:a8:c6:
12:37:e1:6f:7a:56:8e:4f:ef:e6:aa:02:d9:62:ce:
6e:53:61:83:66:cb:b5:e7:1e:99:3d:ad:43:20:dc:
09:fa:c3:54:d7:e3:eb:c3:63:79:93:dd:a0:cf:e4:
43:87:e4:e9:93:0e:73:e4:c1:c8:08:fc:25:e2:23:
cb:2b:e2:20:0b:3d:7e:74:af:a5:b9:1c:32:1d:d9:
fb:6f:28:71:89:4d:4d:20:68:3a:62:0e:33:f0:b2:
9a:8b:0e:ca:91:1b:a8:c3:a6:fe:87:fe:e9:ff:0e:
3c:39:eb:53:a1:e2:27:6d:b2:6d:0d:47:7a:8d:7b:
1c:1b:1e:3a:27:6f:d9:dd:31:5f:da:75:81:1b:8d:
2e:b0:b6:27:e9:c2:ed:99:b1:6b:8c:57:a6:ca:66:
71:70:ce:31:24:13:25:e1:ca:6f:6e:aa:a2:70:3e:
fa:70:ee:69:b5:c4:a1:54:1d:1f:63:2e:75:c7:9c:
21:67:15:15:7c:06:80:be:96:4d:81:8d:f9:32:7a:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:37:DC:68:E5:EE:91:8D:00:15:7D:94:9C:14:EE:5F:27:2B:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/12b22e24-9cda-31d3-bb47-2ac0bbbaa092.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
X509v3 Authority Key Identifier:
keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
sbgp-ipAddrBlock: critical
IPv4:
207.170.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:90:29:ba:87:e2:aa:db:04:d6:d4:69:89:71:e6:9d:d6:4c:
9e:5c:c7:74:a4:1e:ea:85:48:99:9d:24:a7:94:e7:82:05:1e:
0d:4d:e1:ad:47:23:9d:2f:11:fa:28:e3:09:c9:35:4e:71:ef:
45:a1:22:13:28:62:5b:6f:cd:f0:c8:6b:7d:af:91:f8:b2:f5:
9a:2a:b6:3f:a0:dc:72:19:e3:e4:e0:c8:30:f4:1a:25:2f:7d:
58:e1:8d:30:bc:d5:c1:60:e0:04:5a:eb:37:33:cf:93:ee:08:
f7:34:ae:fb:3c:7b:c5:0e:47:80:37:e4:30:e0:32:32:04:cc:
01:e9:06:d6:4f:87:32:27:5b:96:20:cd:d0:60:9e:e0:16:42:
13:e3:0d:b0:31:96:98:93:13:f2:1c:ba:ea:08:0f:6c:c8:19:
c6:4c:b0:cd:37:59:76:38:c7:54:f0:db:9b:c4:76:01:12:b0:
f5:e2:01:c9:63:d4:85:48:19:e1:f6:79:86:91:4e:ea:b9:8e:
08:35:47:f6:77:9f:47:ad:b9:42:df:e4:dc:d4:ac:c0:c0:c2:
71:1b:c1:c6:cb:6a:b0:eb:6f:61:8e:cf:6a:50:48:2a:78:a1:
56:bc:e9:3b:40:6b:bc:64:af:30:91:70:76:2a:e0:4c:1a:57:
cc:8a:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:05:19 2025 by rpki-client