Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/225967f5-4a5e-3c09-8cbc-de91c827c531.roa
File: 225967f5-4a5e-3c09-8cbc-de91c827c531.roa (raw, json)
Hash identifier: JXxYxCQqKax5dBZIIEQX6I4+0Vp+7RsNMeoo0SFKg2o=
Subject key identifier: C7:27:E6:6A:1A:C4:DC:E1:9F:9B:39:FB:3F:80:98:96:C7:83:2E:BF
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F43285847DE69EC6833B9FD9C716821C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/225967f5-4a5e-3c09-8cbc-de91c827c531.roa
Signing time: Wed 13 Nov 2024 19:22:50 +0000
ROA not before: Wed 13 Nov 2024 19:22:50 +0000
ROA not after: Tue 11 Feb 2025 19:22:50 +0000
asID: 203
IP address blocks: 207.37.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:de:69:ec:68:33:b9:fd:9c:71:68:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Nov 13 19:22:50 2024 GMT
Not After : Feb 11 19:22:50 2025 GMT
Subject: CN=3bf7a150-2a8b-4b9e-a000-19c5d891c561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:95:6c:01:d9:0a:12:db:16:50:32:4a:48:
3d:83:14:ce:f6:8e:ca:a9:dd:97:9f:93:d7:19:73:
0d:59:3a:63:2d:2c:1b:8a:64:7a:f6:ab:6c:49:13:
bc:57:82:3c:5a:d1:55:38:46:ed:4b:36:8a:f0:2f:
b9:5b:5b:bd:97:e3:bc:48:7e:1d:b0:c3:9e:2f:6c:
10:06:45:3b:f5:3c:ec:ad:e2:df:86:dc:64:91:a1:
d7:82:0a:4f:c9:4b:f9:3f:6a:d0:05:aa:f3:06:00:
21:30:2a:2b:f9:57:38:e8:a3:1c:d7:55:b1:05:db:
6c:a7:14:38:47:de:22:22:91:fa:7d:8a:c9:79:51:
19:b2:3c:7a:00:c6:39:84:9b:6c:8a:af:3c:b7:41:
69:4e:21:12:02:be:0d:5c:9f:44:70:ce:ea:74:a4:
95:fd:ba:b5:2a:55:be:2d:48:75:f3:69:b0:0a:53:
0c:02:2c:1c:8a:57:1b:cd:03:a0:b1:d2:ef:49:e3:
4f:8a:01:7c:e3:3e:1c:38:b4:3d:cb:87:36:49:67:
05:52:6c:19:45:5d:bc:50:bb:db:24:92:81:0a:19:
ad:10:97:42:c6:95:1b:a9:50:ee:21:3d:60:ff:3c:
3b:24:a1:5c:18:fe:d0:c6:83:75:46:6d:e9:80:ac:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:27:E6:6A:1A:C4:DC:E1:9F:9B:39:FB:3F:80:98:96:C7:83:2E:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/225967f5-4a5e-3c09-8cbc-de91c827c531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
207.37.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:75:f2:19:11:a0:a0:91:94:60:e8:62:44:18:a2:0e:66:90:
54:86:d3:91:50:d7:fc:b9:b5:e8:6c:06:e4:9a:5e:d7:6a:67:
0c:d0:d5:b6:c2:1e:ae:db:b0:9a:e7:5a:21:bf:31:d9:05:43:
c4:7b:1e:04:76:1a:65:c4:27:cd:4f:31:84:ed:e4:21:55:a1:
a4:c4:3c:b7:75:d7:0a:19:74:16:32:01:ce:98:43:2d:d2:f0:
e1:77:83:e7:8f:3e:80:ca:09:c5:6f:bb:77:5d:36:a9:4c:f1:
83:a0:e5:ef:45:56:1d:14:dd:08:cb:45:b3:9e:e8:aa:da:5e:
ed:27:a2:96:4d:b5:6c:46:90:a3:18:fd:73:bc:f1:53:b9:a0:
e2:ed:79:89:85:cb:69:58:a8:6e:7a:d9:2f:a6:39:c8:f5:c7:
9f:96:bf:da:43:fb:9b:bf:b9:15:72:94:91:1c:af:31:17:2f:
05:65:9f:87:ef:44:e2:4a:f5:7d:8f:c6:0e:0a:77:3f:c5:6f:
5b:a7:dc:0b:fb:a9:cf:a1:4f:3c:ab:22:ee:12:9b:6a:07:64:
33:63:46:16:e5:06:13:a8:c7:f4:8b:49:5c:ae:3f:8e:ac:aa:
1b:e7:32:49:ba:90:4b:76:1e:d5:95:86:72:f6:24:a7:82:4a:
9d:33:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:41 2025 by rpki-client