Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa
File: 8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa (raw, json)
Hash identifier: dTKdb3R4AiBv1BLPmM2GSesZilkEBW1JjDCFtkfwaCo=
Subject key identifier: D8:E8:12:09:5B:B6:38:EC:B8:B4:54:1A:20:1A:48:7A:E1:A6:8B:7F
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848159FED59379D8961783BA700
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 12491
IP address blocks: 207.226.32.0/20 maxlen: 24
207.226.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:ed:59:37:9d:89:61:78:3b:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=0f652fa7-ba2a-4bde-b634-d3b47d80cb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:fc:be:bf:3e:fe:e4:13:fd:28:1b:79:4d:
fe:e0:9a:8a:e2:55:ae:8f:13:9c:c7:7c:1e:37:f3:
44:b3:67:ef:6b:b7:86:ea:1e:81:0c:37:d1:63:5b:
ff:9a:2c:f0:5d:72:92:17:f6:e1:5a:45:51:d8:fd:
43:a2:a4:a4:a5:cc:42:80:95:e0:b0:8a:98:93:cf:
ae:44:ae:a0:c8:6b:da:78:c7:7e:1f:e7:14:21:54:
bb:33:c5:86:fc:0d:44:7b:df:e3:82:56:8e:22:d0:
e3:27:1b:24:f3:18:74:f4:33:4b:4d:af:30:23:ff:
7c:13:fd:23:6d:47:46:6c:ee:39:d1:63:08:20:e9:
f7:fa:5c:07:c3:c3:d2:83:32:e3:8d:49:5d:85:28:
7f:96:ff:5d:14:c4:0c:58:a4:70:9a:a5:71:34:b8:
60:96:9e:a6:5c:5f:6a:64:58:75:af:84:bf:88:16:
1e:4d:da:ec:f1:df:03:b1:b6:53:d3:2e:6c:38:33:
ef:8d:6c:0b:77:bd:dd:c3:59:61:ea:d8:d1:7e:db:
de:06:e2:f2:74:7a:a7:e4:77:97:a3:fd:6b:e9:54:
4d:dc:3d:6e:04:7b:81:b9:58:2b:2e:32:bf:ca:fa:
1e:a5:3f:0d:e9:e7:e2:3c:f6:7b:cc:95:28:03:a9:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E8:12:09:5B:B6:38:EC:B8:B4:54:1A:20:1A:48:7A:E1:A6:8B:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
207.226.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:ac:94:eb:80:1a:b4:57:21:39:ca:dc:ad:16:a7:2b:a3:87:
59:b4:a1:c4:82:3b:43:fa:5c:48:90:4f:ae:be:30:42:b7:aa:
37:61:45:11:99:a4:dd:ec:6e:01:a6:15:a0:9f:69:eb:5b:75:
c6:b0:30:92:9d:26:8e:c5:7c:96:50:ba:19:f2:34:3c:d2:04:
b2:0e:1f:4d:f8:f3:d2:ce:33:b1:83:41:08:2d:56:e1:9a:35:
98:ee:f6:3f:44:b8:25:bb:99:89:8e:ab:ee:05:f7:59:9b:d3:
65:8c:8f:5d:1d:c2:5c:87:39:7c:44:6d:e6:b6:1b:92:11:36:
e3:39:3a:3e:96:f0:38:f1:66:64:80:ec:2e:14:42:11:1f:d5:
c4:8a:e8:43:c9:c0:8f:5c:c2:53:df:8d:c4:d2:4e:59:ca:8f:
8e:b9:f7:7c:2f:55:98:09:57:c0:1f:f4:cc:c8:7a:c9:1a:83:
a8:2b:da:70:21:18:22:de:ed:98:23:6d:b3:25:58:a1:5d:24:
20:4d:57:8a:35:51:c3:ba:d6:26:a4:ef:9e:05:30:59:0e:ea:
dc:15:33:1e:d8:51:c6:f4:0a:b6:bd:b4:84:2f:88:eb:b3:03:
d7:56:5e:e7:b8:8f:07:d5:5b:8a:f5:3b:a3:fe:b5:0b:bc:19:
91:6a:cc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:35 2025 by rpki-client