Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa
File: 58d3ac33-0e55-33d0-824b-807ad470e8d1.roa (raw, json)
Hash identifier: BXgNVD5fp8FpQ7tEJoumzZUjdqqKFl2Z+dUq7D8NMbc=
Subject key identifier: 92:E8:26:5E:D4:1B:5E:D7:03:44:EA:EB:AE:F5:29:50:19:E4:D8:E9
Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial: 010D0C9F4328584851A584BB8C83AABAC6EE4360
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 22015
IP address blocks: 207.237.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:84:bb:8c:83:aa:ba:c6:ee:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=0796558e-e297-4a37-afef-0fa3ba1e67c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:52:6f:de:fe:3a:56:29:83:4e:bc:ff:fd:
7f:9a:4a:f8:f7:43:97:0e:5e:e7:8a:0e:f4:51:17:
32:90:04:d6:92:39:bf:d0:d4:a6:fb:48:1b:c2:db:
f0:8d:31:f1:a7:47:3d:3d:7f:d1:c9:75:75:9c:ab:
ae:ef:c5:83:9d:f7:5d:8d:64:5a:c0:ec:2b:b4:95:
a7:f8:23:9d:4e:30:a4:94:aa:91:77:67:7f:f7:ab:
70:c1:17:2a:19:f4:ef:b2:6b:76:e5:32:83:00:36:
30:56:03:a0:14:6d:e3:31:b0:c1:43:bd:2d:a9:8f:
da:5d:e6:b1:e5:f6:81:0e:dc:ea:0d:12:18:ac:d4:
ad:27:0f:b0:08:e9:55:7f:ab:12:01:38:32:ea:aa:
a7:01:f6:6b:04:35:b5:a3:41:28:d8:58:04:0e:65:
b4:53:3c:b7:ea:97:c7:b0:bb:ef:e5:40:9f:4c:a0:
da:d0:fb:d4:e2:01:6e:a7:6c:7b:80:dc:4b:e7:40:
48:71:e8:30:05:01:08:80:76:09:35:6e:1f:5a:4d:
d1:74:99:87:89:a2:21:e8:06:70:af:83:6c:5a:2c:
f4:1d:cf:ed:00:e1:30:0f:6c:22:b6:64:a4:48:00:
ab:37:bb:13:58:e6:c2:ac:c6:d1:cd:c7:93:d3:11:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:26:5E:D4:1B:5E:D7:03:44:EA:EB:AE:F5:29:50:19:E4:D8:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/58d3ac33-0e55-33d0-824b-807ad470e8d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
X509v3 Authority Key Identifier:
keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
sbgp-ipAddrBlock: critical
IPv4:
207.237.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:b5:bc:4f:17:0f:15:c6:2e:08:6b:8c:29:2f:02:d3:5e:95:
5c:93:42:02:18:f3:26:bf:c4:69:3f:d5:cc:f3:bf:0c:47:b2:
69:03:05:53:f1:f9:97:6f:75:8a:7e:3c:4a:ee:54:7a:81:29:
e0:8e:a6:50:bb:08:5a:05:4a:8d:c3:d5:5f:06:16:4d:36:7d:
df:37:3e:56:5b:12:82:39:69:03:90:e3:72:d2:25:ad:8d:bf:
4f:29:58:5d:7e:05:f7:fd:ce:20:40:f9:67:45:c5:9a:f6:14:
02:11:60:64:4c:f3:08:5c:1f:a4:ae:ed:38:28:0d:1d:cc:34:
54:fa:14:40:e0:dc:5f:09:f6:98:5a:a8:6a:38:bf:79:3d:70:
39:74:ac:08:6a:74:98:4e:91:c3:78:62:40:9b:dd:9d:65:ff:
9d:53:5b:5a:48:c8:72:11:f6:4b:dc:fd:b8:3e:8f:11:12:1a:
46:52:31:8d:4b:9d:21:16:9c:5a:0d:41:82:07:eb:d5:c6:b0:
6a:4c:3d:1b:be:3d:e6:92:ed:f2:93:83:08:62:49:8a:fc:62:
e7:1a:03:51:69:15:49:f4:51:bf:61:96:c2:28:1f:fa:0e:f5:
fe:37:12:e8:80:da:0e:2a:c2:f8:c5:38:4c:cc:f7:21:66:d8:
1b:c2:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:34:03 2025 by rpki-client