Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa
File: ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa (raw, json)
Hash identifier: Fmk+TgjiP28m/dubIJT3m0k6u+4n5HmiwLQJ3X5JecI=
Subject key identifier: D0:CA:24:4E:DE:61:B4:73:F0:34:F0:AA:9F:D9:F5:B5:AA:C3:0F:0A
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848143A7C5045F9A859352A1480
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 3491
IP address blocks: 207.176.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7c:50:45:f9:a8:59:35:2a:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=9b63f2eb-3706-4000-afb9-1ba3b9a202fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:02:cb:20:3d:08:40:97:93:f1:d6:99:31:
34:7c:62:48:ae:da:86:6a:e2:d0:40:60:cd:9f:da:
3e:f1:33:a7:4f:c6:c1:8d:52:87:c7:ab:01:9c:65:
5d:35:c1:d5:78:aa:63:90:4a:22:c0:24:c7:27:6b:
53:f9:4e:e0:9a:87:74:7b:07:ec:39:c1:44:85:b9:
e0:93:38:41:ae:b4:ec:53:27:a7:dc:3b:d6:7e:1c:
88:57:5e:35:40:31:c0:90:7d:83:34:61:1a:ed:99:
af:5f:a7:5e:04:e0:0f:c1:72:30:5d:d4:1c:08:47:
7b:93:6b:23:2c:7e:c3:96:4e:b1:ef:23:ba:a1:c5:
8c:04:fb:83:23:4b:86:b4:2e:ae:f6:54:92:53:d9:
b2:99:a8:20:2f:5a:63:45:de:55:96:fb:2f:f5:ba:
64:7a:57:8e:f0:19:4d:aa:47:3f:8b:01:fb:2e:71:
e1:eb:fe:a8:c0:37:75:12:2a:d7:bb:27:d7:65:ef:
30:aa:ae:df:2d:ee:34:72:f1:f8:b5:dc:89:61:cd:
4e:00:6a:f5:fc:bd:31:87:6a:a3:f7:99:f8:9b:c9:
df:09:59:43:1e:51:51:f2:03:cb:6f:d6:c5:1e:1a:
cb:d8:bc:8d:d1:b7:95:73:84:c3:fb:a5:1e:45:18:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CA:24:4E:DE:61:B4:73:F0:34:F0:AA:9F:D9:F5:B5:AA:C3:0F:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
207.176.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:de:38:ab:a1:24:a7:4e:d1:07:26:2e:b0:44:40:e6:61:b9:
a7:fb:26:df:85:ee:a1:52:f5:4c:b8:b7:01:78:22:49:d3:50:
23:2c:b8:00:d1:2f:62:f7:f4:f9:9b:60:6b:b3:23:a2:92:38:
a5:87:f9:e5:7e:14:a8:1d:0c:55:3e:6f:6a:f2:ba:d3:ab:cf:
54:d7:59:2e:a2:40:f0:5d:16:54:18:4a:aa:03:80:97:c4:5b:
1f:db:8d:8c:4d:58:4a:f7:82:ed:96:97:69:6b:df:03:d3:df:
01:4f:b2:8e:b4:bd:98:ab:a4:f4:6b:4e:28:fb:b5:de:22:ac:
21:f8:03:69:78:9a:5b:89:e0:be:ed:17:b9:2f:cb:b9:9c:dd:
eb:42:0d:45:14:74:aa:2c:1b:70:a1:0f:86:41:bb:db:67:40:
21:07:40:b3:7f:2e:28:31:8a:47:ef:91:04:6b:0b:75:50:bd:
20:2b:23:08:eb:61:b3:d7:e8:9c:a1:5b:83:37:bf:12:0f:aa:
9c:30:0b:d9:1f:8d:64:eb:f6:33:df:84:03:f1:aa:22:64:5d:
62:37:e6:0e:be:fc:1b:f5:9c:c9:c8:c1:cb:f2:cd:fa:c0:6c:
60:61:cf:ef:46:a8:19:6d:d7:d2:a3:09:35:d5:bb:d0:7e:3d:
42:68:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:16 2025 by rpki-client