Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d026be99-1cce-306a-9800-7c2d9aa87a80.roa
File: d026be99-1cce-306a-9800-7c2d9aa87a80.roa (raw, json)
Hash identifier: bHh3mfvp5q87KUGsYaIBSW378w7bJxVzu1I9QkzW820=
Subject key identifier: 61:C5:58:74:75:0A:E5:FE:18:81:D8:05:A9:46:61:FD:CA:6A:A1:78
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848239554B9537F115D3928E580
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d026be99-1cce-306a-9800-7c2d9aa87a80.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 701
IP address blocks: 207.86.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:54:b9:53:7f:11:5d:39:28:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=847d6a9c-5d75-4424-a164-5f9fe08dcc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:65:f0:82:62:61:76:e8:de:62:7d:89:1f:
18:1f:2d:13:bb:6b:8a:7d:a5:81:1a:03:50:6c:a0:
81:36:03:89:a3:42:a7:bf:3e:45:cf:ff:0f:39:5d:
f4:cd:bd:e9:11:f6:ce:1c:78:1c:8d:01:07:18:46:
b4:56:db:29:57:b8:a0:11:39:37:3b:4e:c8:f6:61:
4b:63:a9:00:42:21:5f:d8:14:a3:7e:75:b2:1a:a6:
1d:53:04:f9:05:32:98:fc:e0:db:75:a6:84:b5:7e:
03:7b:02:a5:e0:14:cc:a2:ab:86:af:dd:a6:ca:55:
ea:ce:6d:c5:2d:8c:0a:4d:14:70:59:93:10:8a:06:
5e:ad:c7:0f:d1:fa:1f:e4:e7:2a:97:d9:f3:4c:7c:
76:fd:c5:4c:f1:86:13:a1:2c:ca:24:34:3e:13:f3:
35:cb:94:8f:d6:d7:9c:00:99:34:ff:0b:d5:d7:47:
61:9c:1d:15:d9:f6:51:cd:92:55:23:50:0b:b8:9c:
52:a7:c9:9b:d3:2c:e8:7f:32:0d:33:12:82:0d:1f:
56:bf:ce:24:5d:a1:d7:d3:16:59:f2:e6:f0:69:01:
45:16:73:ff:95:61:85:ad:bf:3a:a3:c5:e5:78:be:
09:e5:2c:c5:37:b2:a9:3a:2e:5e:db:7e:5b:6a:19:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C5:58:74:75:0A:E5:FE:18:81:D8:05:A9:46:61:FD:CA:6A:A1:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d026be99-1cce-306a-9800-7c2d9aa87a80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
207.86.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:9f:4a:b0:e7:c0:09:64:f5:91:40:e1:f8:89:ae:2c:ca:08:
c9:45:5e:b4:77:60:4b:47:b6:95:44:19:44:db:ea:c1:61:35:
74:c1:68:06:01:57:b7:7b:0d:ce:d8:d4:8a:ff:fe:eb:5f:c3:
f7:f0:a6:bc:17:eb:8d:15:b4:e4:a7:5d:a9:d3:12:ab:b2:f9:
b4:1c:56:72:f9:3e:20:ab:e0:8d:28:cb:93:38:f9:1e:bc:76:
65:12:11:5d:f4:21:fd:ba:79:a1:73:c0:35:7c:91:e1:6b:e7:
42:b2:34:2a:b7:f9:2d:b1:d2:cc:08:3c:70:bc:83:e1:b7:e7:
f2:e2:99:cb:73:41:ce:e8:01:1f:55:06:a6:43:95:0a:f2:8a:
92:d5:33:31:8f:31:da:01:9b:66:7a:46:2c:81:6a:9c:4e:34:
d6:d1:57:1e:c7:33:03:60:8c:c6:7c:a3:3b:ca:fc:11:5b:bd:
fa:95:97:aa:0d:d2:8b:fe:e2:86:04:8f:30:92:a8:28:1e:ff:
b6:20:fb:83:a8:b3:d0:53:b2:c0:1b:cf:fa:18:1b:3a:b7:a4:
95:d6:bf:c6:89:fb:eb:d9:e0:74:63:8a:72:f2:8a:ff:cf:9c:
07:c9:c9:8d:ac:5c:a7:31:5e:d9:24:e3:22:fe:ab:55:1b:4c:
fb:b2:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:04 2025 by rpki-client