Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa
File: 33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa (raw, json)
Hash identifier: zaalO9XnWssjwiapxlDNUppJbBmMNN3sXi04UotYy9c=
Subject key identifier: 90:54:A5:05:59:A5:61:91:55:C1:AB:B5:C5:38:8D:6A:AF:72:15:21
Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial: 010D0C9F432858486EF5BFC66B4DF36171B4A780
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 207.202.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:bf:c6:6b:4d:f3:61:71:b4:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=a16bfe6c-e0eb-453d-9f27-3a402fb63fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:54:e4:13:8c:50:d7:fc:22:08:29:22:af:
dd:7a:1e:fd:90:53:da:1a:3e:25:0b:4a:33:6f:01:
3e:b1:bb:fb:5a:dc:45:be:9a:80:f5:f0:ef:d6:cf:
ae:45:76:a8:a9:e4:7e:ba:75:23:e1:65:95:98:62:
77:26:a9:41:fb:54:72:38:3d:54:33:20:7f:9d:44:
0d:0b:32:96:f3:d7:72:6a:2e:1e:95:e1:46:6a:22:
e7:f9:fd:2a:45:4e:8b:3c:67:f7:65:59:a1:52:1c:
66:bf:98:30:28:c9:c3:83:ad:ee:fa:45:00:e4:63:
4c:52:3a:a9:2c:f6:f7:e0:3f:19:f2:25:be:db:d5:
9c:5f:2d:1c:c2:64:b4:5b:c0:6e:7f:82:2e:9c:4a:
06:66:76:41:5b:b2:b9:55:76:99:14:17:d3:5c:bc:
a4:a8:32:4e:8c:9b:06:f6:49:c2:0a:3a:5c:b6:90:
07:54:c5:8a:b6:c0:4a:59:1a:e8:6e:72:c2:0a:4f:
af:b6:7a:0d:fe:e5:dd:ae:06:c3:b6:e0:ff:a9:0b:
b2:27:7b:fc:b3:12:f7:ea:8f:dc:8d:27:3f:53:fa:
44:14:be:47:a1:91:e9:db:1e:bb:af:c0:1f:ff:64:
3d:6c:5a:71:6c:59:9f:be:08:b2:64:37:53:ca:8e:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:54:A5:05:59:A5:61:91:55:C1:AB:B5:C5:38:8D:6A:AF:72:15:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
X509v3 Authority Key Identifier:
keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
sbgp-ipAddrBlock: critical
IPv4:
207.202.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:d7:9a:6f:b5:58:88:d6:67:68:8b:f9:c9:93:f1:82:a5:8d:
09:0c:c5:04:3a:98:bd:5d:a1:7e:ed:62:a4:50:47:14:8d:dc:
b1:8d:5f:d9:5e:73:49:b9:01:ef:2c:04:40:7f:24:aa:ad:96:
fb:82:f7:6b:9a:04:21:96:ac:90:e6:f5:0a:04:d8:e2:ba:f7:
8e:c4:d0:4d:96:3b:2e:22:bd:81:4d:11:17:a0:95:95:5e:be:
17:d1:35:ee:8a:87:cf:c5:4d:77:26:45:31:9d:47:59:47:54:
e3:e8:a7:4e:a1:4b:2e:bf:5c:6d:dc:ce:46:70:08:90:cb:85:
a4:34:e9:b4:f9:10:e0:d2:bf:b1:6f:b2:31:b8:61:d7:83:e2:
4b:48:21:ea:4a:95:3f:bd:72:c1:f8:0c:0b:0c:e3:c5:f7:fe:
8f:f0:8d:82:66:54:52:eb:be:67:b7:3f:3a:42:19:3a:2b:81:
f8:b3:b7:da:2b:28:c5:32:33:99:af:f8:e0:77:37:40:40:ea:
97:dd:9e:73:a6:5f:d8:71:6f:9f:da:f1:4d:b9:d4:30:60:cb:
f1:b4:39:38:3d:93:93:57:3f:05:00:f3:dd:69:fc:ad:71:42:
29:23:c1:e4:10:7d:b0:12:d8:88:3f:da:5c:b8:9f:2e:f7:fb:
53:00:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:19 2025 by rpki-client