Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa
File: b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa (raw, json)
Hash identifier: qgwPAJB8iZ/17uowXtY9uLMNDL35nzTnWTIJ2R5bWoM=
Subject key identifier: 3D:BD:73:FE:B2:BD:8A:F3:39:70:D8:59:24:23:61:10:AE:E0:B5:2B
Certificate issuer: /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial: 010D0C9F432858491AA6B8C04248CE4C072C0010
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 199925
IP address blocks: 64.72.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b8:c0:42:48:ce:4c:07:2c:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=8b5cf3d5-484b-45fb-b083-d53a4cd0a8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:7f:37:23:b2:02:08:53:be:85:94:80:27:
b9:a0:f4:24:e3:94:93:04:12:93:95:7c:78:d8:fe:
c0:72:87:08:25:34:4d:d4:f3:06:25:0c:57:3b:3e:
73:1f:53:69:ee:d9:47:1d:e4:8f:36:11:6f:c1:93:
28:2d:9c:7f:8b:79:d2:fd:65:92:c6:5f:60:f0:d6:
81:d8:f7:85:f9:fa:fd:82:58:d0:c2:1c:9c:18:6d:
0e:6d:bf:0c:2d:59:c2:a5:c5:4e:1f:79:29:05:25:
4b:37:f3:3b:c1:84:fc:a5:a0:85:89:b5:fd:da:ff:
00:e3:02:57:83:78:7f:73:f0:68:d0:bf:a7:5b:d4:
af:2d:1f:7f:c5:7e:02:26:2c:d5:30:02:36:00:f2:
7e:9a:92:5e:93:76:04:59:10:c7:8e:37:92:f0:9b:
dd:9a:be:ad:1d:a8:57:06:09:2e:7f:a1:d8:cb:e7:
3d:93:42:1a:9a:df:83:22:77:7b:8a:fc:d1:f7:a8:
09:08:34:c3:15:1b:b1:e2:69:e0:69:4e:64:8f:e8:
26:e0:f5:a0:ab:3e:cc:48:bd:1d:b3:08:62:ec:87:
b6:a4:e9:99:9c:a1:f0:28:28:c2:89:24:52:9f:cd:
cd:54:44:79:f2:06:54:d9:5f:df:c9:64:ae:4f:3a:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BD:73:FE:B2:BD:8A:F3:39:70:D8:59:24:23:61:10:AE:E0:B5:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/b9b8f250-67c9-38c1-a5a6-50a965b89ffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl
X509v3 Authority Key Identifier:
keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.72.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:7c:10:18:a4:37:73:62:6e:4a:43:35:32:57:b7:a6:fe:5c:
9c:f2:80:da:d9:76:68:5e:14:4a:7f:47:4a:b3:1c:0c:7a:63:
01:0b:77:8e:75:35:6d:f2:ad:39:e1:21:0c:2f:62:8d:43:ca:
dd:d6:1d:ad:1e:68:01:e1:98:c4:5e:27:9d:c3:2d:7b:3d:1f:
ab:01:ba:6c:a9:05:c9:b8:f1:6e:2a:09:01:87:4b:cb:71:2f:
9b:6c:9d:36:c4:4f:c3:84:46:b9:49:93:cd:05:97:7f:a6:e9:
87:e6:82:f8:5e:9d:23:bd:1f:f6:48:aa:d2:b8:1a:3a:20:30:
2e:f0:a1:7f:b1:7c:db:75:a7:8f:50:c9:65:ba:20:d1:1e:5e:
9b:3e:30:2d:e4:29:8e:32:44:c0:de:3f:8e:0e:11:ac:71:6d:
d3:5c:ea:6f:0b:e1:1e:d7:03:1d:30:bc:43:d8:e8:21:fc:3a:
0b:6f:10:92:ec:39:56:fc:41:88:a7:b6:66:fc:98:26:c2:20:
95:f9:38:14:4f:8f:f6:a6:54:f4:f1:63:66:28:6a:c7:f4:67:
5a:5b:24:87:b9:63:f2:17:5a:d4:77:ee:b5:bb:82:07:b9:c1:
84:d9:d9:a5:79:7a:cf:0b:6c:49:64:02:d9:79:fe:1a:7d:2f:
e1:7c:41:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:50 2025 by rpki-client