Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
File: d096047a-9fa5-3441-a949-ac54a874b69a.roa (raw, json)
Hash identifier: eUjKWp3tG9EJnmY+N1jljb1RJmv+GqN5EmeiIfjGvz4=
Subject key identifier: 56:33:59:09:AE:68:3D:AD:45:66:8A:B9:90:65:DD:8A:B4:F0:B7:F5
Certificate issuer: /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial: 010D0C9F4328584824FA893090AB365725A50500
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 27316
IP address blocks: 207.165.229.0/24 maxlen: 24
207.165.238.0/23 maxlen: 24
209.56.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:89:30:90:ab:36:57:25:a5:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=628fc941-6d63-40d3-b642-9ad21cdd77c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:82:9e:e4:0d:cf:d7:65:e8:35:b0:3a:eb:
fd:9d:9c:09:65:f4:4d:fb:53:2d:da:aa:5a:e8:e1:
34:81:1f:89:bd:a3:da:cd:a2:29:06:64:16:6c:ff:
2c:3b:e8:10:72:0a:ef:80:0d:20:b4:06:d6:f7:3b:
72:04:f9:4f:30:38:7c:ba:a7:90:89:5f:f4:99:c4:
41:8a:f8:51:9b:08:b3:ad:39:d1:1e:8f:49:df:2d:
a3:9e:da:8c:d4:dd:e7:08:9f:6c:78:10:7e:93:43:
de:12:19:74:85:2d:84:62:51:ab:4a:fa:b4:e1:43:
d9:ab:7d:0b:8a:97:de:d4:b6:e9:d6:e4:50:cb:d1:
f3:8a:54:b9:c4:26:be:c4:3f:8e:95:95:9c:2d:a1:
0b:9d:f6:55:09:06:fa:0a:f5:d5:27:0c:3d:04:54:
40:8a:b5:9f:6f:c1:c7:f8:d2:84:95:26:83:d0:0f:
0c:be:43:97:e1:58:1e:a4:ec:0e:c5:82:d2:38:b6:
52:6a:7a:ea:c8:40:f6:c9:1a:34:5b:77:0f:0c:8a:
b3:0c:b1:75:a6:88:c8:e6:b1:ee:87:35:cf:5b:3e:
73:ab:bc:dc:b9:71:a8:1b:28:c2:7a:db:4a:97:90:
0c:73:0e:1e:c7:29:91:b2:d9:bc:95:ff:b1:0a:84:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:33:59:09:AE:68:3D:AD:45:66:8A:B9:90:65:DD:8A:B4:F0:B7:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
X509v3 Authority Key Identifier:
keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
sbgp-ipAddrBlock: critical
IPv4:
207.165.229.0/24
207.165.238.0/23
209.56.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:56:70:e8:f6:74:8f:98:51:ea:2d:b7:1f:65:0e:da:f5:af:
e2:f1:56:a0:00:07:42:1c:68:6a:2c:42:94:5f:50:cb:00:a6:
53:14:66:2a:ed:9e:d5:c9:40:be:7c:af:93:00:f9:2d:b4:51:
55:e5:59:a3:5e:2e:78:fd:99:bf:8e:2a:6a:38:cd:c7:3b:9f:
1e:ce:2d:27:35:9b:50:7d:d5:8a:06:85:6f:72:c7:8b:df:6a:
e9:6d:6a:dd:a3:e6:49:ce:14:28:95:4a:76:c3:52:89:19:bb:
5f:d6:17:7b:62:bc:fe:46:31:50:37:47:bc:ba:e8:66:01:9e:
4d:04:e9:7d:5f:5b:a1:13:21:20:d5:74:aa:f2:b4:1f:25:a0:
6a:cf:08:06:14:c2:af:9a:8a:9b:a2:35:01:fa:31:a8:c5:8a:
24:9e:de:70:12:68:d9:c4:37:fb:bd:a9:1d:32:de:a0:2a:77:
36:22:31:79:55:ac:84:6e:96:ff:a2:0a:85:45:04:02:91:e7:
e3:2b:7f:95:0f:f6:a0:8d:f3:3e:49:df:16:50:a2:2f:7d:76:
ba:26:97:42:6e:c3:f9:ab:bc:17:a5:bf:e8:53:8c:64:aa:ca:
78:3b:d3:26:43:01:da:dd:b2:04:f4:fe:12:3c:a6:d4:bf:8e:
27:c9:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:04:23 2025 by rpki-client