Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8e2546b3-d439-399a-bf4a-a9108c6408f5.roa
File: 8e2546b3-d439-399a-bf4a-a9108c6408f5.roa (raw, json)
Hash identifier: RYFtAYC8FhEPLiz+M+9BDQ24cEmyCItEbzNrSuJYdWw=
Subject key identifier: 4F:C9:DD:95:5D:24:62:39:98:9B:0B:23:6C:F0:E0:B5:19:51:BD:38
Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial: 010D0C9F4328584851A584CC5C3AA5E8D88E1640
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8e2546b3-d439-399a-bf4a-a9108c6408f5.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 25755
IP address blocks: 207.172.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:84:cc:5c:3a:a5:e8:d8:8e:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=9911d9f6-7f4a-49c9-a8ed-48c268edac4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:d0:85:6b:16:d4:43:cc:d1:ff:dc:cb:a6:
9a:be:3f:b7:4d:af:6b:17:f4:a5:f8:43:97:0f:1b:
82:df:cf:cc:5f:4e:f5:31:15:99:6d:1e:55:55:d0:
41:0b:13:52:8f:97:b5:ac:36:0c:45:ff:8f:35:6f:
33:45:5e:a6:8b:4c:ef:22:af:a2:14:c7:11:9c:db:
81:7a:0b:6a:64:76:86:c7:a5:32:fa:85:64:40:da:
ff:ea:be:4a:05:78:23:86:69:73:9c:68:b1:28:27:
7b:da:bb:2a:5e:91:72:c5:4d:a8:3a:44:67:60:52:
67:3c:34:3c:72:b1:48:7e:7a:7e:1a:34:31:4b:90:
1e:bc:aa:77:9a:62:cd:00:0e:11:60:e0:99:35:54:
54:8a:a1:80:b5:b7:5a:26:1b:f3:6b:d0:04:9b:a9:
ef:13:1a:42:82:31:a1:dd:7a:d6:f8:89:d2:e7:44:
0b:c5:05:39:9f:12:5a:4e:7a:03:cc:2c:9d:b4:0b:
3a:f0:b8:ec:14:17:31:e9:52:2e:2f:34:38:69:9f:
6d:22:2a:de:62:e0:b7:fc:de:f7:d4:0f:2b:0c:e3:
bf:2b:7e:ba:05:81:d5:1e:3b:5b:fe:3f:f3:69:ab:
44:7b:09:a3:bc:c0:12:b3:33:a5:ce:4f:4c:ea:e7:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C9:DD:95:5D:24:62:39:98:9B:0B:23:6C:F0:E0:B5:19:51:BD:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/8e2546b3-d439-399a-bf4a-a9108c6408f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
X509v3 Authority Key Identifier:
keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
sbgp-ipAddrBlock: critical
IPv4:
207.172.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:36:9c:47:0a:e4:27:15:a6:85:6d:d0:6e:eb:b2:d3:25:c0:
42:55:dd:06:f5:24:52:58:b3:a9:3e:28:07:0d:c7:ae:eb:b6:
8c:8e:d5:a6:ff:b0:e3:6b:44:40:14:5d:2a:e7:d4:63:8d:20:
14:f0:a6:cb:91:c8:4e:58:04:c8:26:fa:b8:f0:a0:9e:70:06:
81:3f:63:6e:0a:df:3b:ff:d4:e4:b1:57:6f:73:59:29:e8:1d:
ca:35:5f:eb:fc:16:99:14:b4:e7:ef:9c:7d:08:3f:2c:41:7e:
d8:1d:45:80:31:4e:16:14:db:01:04:66:57:ae:2c:bf:a0:e9:
64:76:be:80:5b:68:56:57:42:1a:d8:3f:57:ed:42:8f:8a:19:
5d:ac:8c:ad:36:c0:b8:ff:c4:fd:f1:b7:ee:ae:76:a7:fe:84:
67:f9:88:14:9a:0e:86:4b:ac:6f:69:c4:2d:38:e0:73:83:02:
23:c8:69:c8:1a:54:c0:59:0b:46:e6:91:48:f4:cc:e6:26:f5:
1a:63:90:72:fc:88:50:4b:d5:ff:44:7b:48:a8:c1:1b:2d:19:
dc:12:35:4b:9d:e3:66:96:16:47:5a:7b:e4:8e:cc:38:03:a2:
db:79:ea:e4:f0:bd:6b:c0:be:84:da:3b:03:85:d1:33:72:42:
1f:81:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:37 2025 by rpki-client