Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
File: 9ecd159a-1f96-32de-b9d1-11893c413104.roa (raw, json)
Hash identifier: TkWGMo6AiOrhUdiNc7zC43nODp5+cFozl8/CakS7jaI=
Subject key identifier: 17:30:98:06:0B:B4:E0:51:CA:22:0B:CF:66:05:68:36:07:42:04:76
Certificate issuer: /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial: 010D0C9F43285847FB1A249EE063C3D446D41B00
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 397606
IP address blocks: 207.174.68.0/22 maxlen: 24
216.152.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:24:9e:e0:63:c3:d4:46:d4:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=2f258319-58ac-4327-aadd-96717d930f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:4c:82:92:9b:c5:a8:15:cf:8f:0a:12:b0:
41:a3:24:6d:92:0b:a3:cd:77:73:f0:3b:78:f6:31:
e8:f1:28:c7:f5:54:73:9e:0b:02:fa:5f:d4:3e:a3:
4a:06:d5:03:d7:5f:8e:e8:2d:8c:88:bf:06:6d:40:
ad:5c:b0:70:3d:d1:8f:71:5a:5c:54:c7:85:09:cf:
3d:2b:bd:5b:f1:61:be:6c:10:87:0c:7b:66:7b:9a:
3e:eb:8d:8f:72:be:4f:f4:d0:4e:60:ca:e9:88:3f:
79:fd:8e:b6:1c:6e:5d:74:b8:3a:1d:1f:23:61:47:
d8:42:ae:86:1f:3a:18:da:18:69:db:9b:a4:36:8b:
05:8e:be:c3:19:e3:19:17:eb:b2:4f:3a:ad:e5:04:
9b:1b:f5:7e:40:9e:76:43:7e:74:82:d2:9c:64:1f:
07:3e:2e:08:a6:e6:9c:e2:4d:cb:5a:a5:96:f1:de:
c1:85:91:c6:32:fa:9e:44:02:b6:47:14:77:9a:bd:
3d:31:c6:dd:db:66:3b:d4:a7:59:65:b9:19:05:67:
49:f8:25:d3:62:40:26:76:62:d0:a0:2e:59:26:3f:
44:d7:ab:0c:fe:00:4e:01:9e:25:79:e4:3d:56:0a:
f3:9f:5a:10:08:ce:d0:a7:e7:cd:9d:f2:bc:33:c4:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:30:98:06:0B:B4:E0:51:CA:22:0B:CF:66:05:68:36:07:42:04:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
X509v3 Authority Key Identifier:
keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.68.0/22
216.152.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:ae:38:59:8c:0a:32:5f:0d:8e:ac:be:1b:f5:e9:8a:7e:e7:
2a:3f:94:a2:df:de:3b:02:21:ce:dd:69:a4:b1:88:42:fd:3c:
8d:41:55:3c:22:14:f4:74:6e:1d:95:bd:00:4d:63:7f:27:b9:
35:a6:e2:53:0b:4b:cb:bb:79:be:41:93:44:f6:68:c2:7d:f0:
ea:af:ac:eb:a5:f6:5e:db:ae:ae:b0:52:d7:ae:d4:8b:0e:cd:
ab:c5:2f:7a:73:e0:c6:c3:60:48:31:d9:f0:08:b1:ee:b6:76:
36:29:b0:3b:c2:ff:78:5a:29:26:40:4c:ba:fe:14:09:09:6c:
5a:05:4b:6f:e7:2b:12:59:2f:5b:32:e7:26:a4:e9:19:77:73:
b6:91:17:2e:f7:c2:56:16:0e:c8:b8:4c:35:ea:7c:a8:4c:fc:
62:ff:86:21:bd:dd:bc:ce:7c:74:12:1b:40:e2:89:d9:aa:73:
44:a5:74:2a:0d:3c:e1:66:f1:6d:4c:40:25:8e:9b:f4:f5:fe:
61:a7:2c:7d:a6:3e:67:91:51:13:09:d3:7b:ed:69:d5:01:23:
66:30:64:ba:ba:99:b7:01:ff:83:50:4b:96:99:66:e7:f5:ea:
20:de:64:f1:3c:08:0c:2c:1e:57:ee:cc:3a:6d:58:17:42:a0:
c8:bb:6c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:35 2025 by rpki-client