Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/fa7de386-946f-3fd2-80ff-439e4566d9cf.roa
File: fa7de386-946f-3fd2-80ff-439e4566d9cf.roa (raw, json)
Hash identifier: hbiKMY24Q+f91sv9wP2FI43Dmprmq4nuc4lBnwocjKA=
Subject key identifier: D4:BE:56:28:89:1D:4F:3E:B7:AC:C6:B8:38:98:F5:FB:A9:34:6F:0F
Certificate issuer: /CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Certificate serial: 010D0C9F43285848DA70F73045AAE8BE024648E0
Authority key identifier: 6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/fa7de386-946f-3fd2-80ff-439e4566d9cf.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 174
IP address blocks: 207.174.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f7:30:45:aa:e8:be:02:46:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0eb2de-e5e8-4108-870e-8cbbff39885d
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=4bf77be3-1114-4c5b-8784-4bcafe224ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:0b:e0:97:f9:90:92:e6:da:73:ed:36:d1:
e3:58:8e:93:e0:e8:4d:f6:50:e1:5e:de:8b:5b:dc:
83:66:22:e7:05:51:cd:d2:6a:59:af:ef:d5:96:a6:
7c:e6:65:04:6f:43:16:27:a9:7b:4a:82:55:7a:64:
d0:73:7a:2f:49:41:eb:52:2d:60:22:9d:45:c5:a9:
de:75:a2:35:76:bf:94:e6:70:8b:c3:bb:67:1e:cb:
db:0b:74:d1:d2:c9:83:70:a8:e8:a6:6b:7d:ed:b2:
8d:82:d8:e4:b4:ba:d5:6f:da:e9:b3:94:2b:14:3e:
c0:3e:2c:65:a1:4b:3d:92:82:6b:45:f4:e4:b0:e8:
b2:61:e2:7c:4a:81:7d:84:a1:a1:d3:f2:6b:96:67:
a5:a6:14:50:ee:b9:94:93:c2:39:b9:77:ef:c8:90:
7c:0b:78:be:fc:d4:b1:0e:82:bf:bb:ae:47:a3:4e:
d3:b3:68:91:80:80:2f:bc:8f:73:36:27:a6:b5:64:
fe:01:35:18:96:ec:45:da:2a:1a:64:3c:71:91:fc:
eb:e9:09:5a:08:38:20:9d:4f:b4:a3:2e:19:ad:c6:
a8:aa:2a:33:81:e2:2a:de:da:7c:14:19:40:73:55:
a1:cb:c5:a6:77:93:a4:69:f4:98:82:aa:75:e6:fe:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:56:28:89:1D:4F:3E:B7:AC:C6:B8:38:98:F5:FB:A9:34:6F:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/fa7de386-946f-3fd2-80ff-439e4566d9cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d/cc0eb2de-e5e8-4108-870e-8cbbff39885d.crl
X509v3 Authority Key Identifier:
keyid:6C:28:11:4B:C2:E3:4A:9C:81:97:DA:33:48:7B:1E:AF:4E:77:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc0eb2de-e5e8-4108-870e-8cbbff39885d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:14:e3:27:4b:2a:a8:3d:63:d9:c9:49:75:61:b0:5b:11:c7:
dd:3e:8a:d7:24:73:60:2f:9c:eb:01:06:6d:68:83:17:e3:0b:
8e:ab:44:2f:a9:70:1c:2d:bc:71:66:27:be:58:85:2e:31:ca:
d6:5b:5a:f5:50:07:09:dc:1c:14:f9:cb:5d:b0:f9:6a:62:38:
5b:c3:12:69:8b:70:22:16:10:dc:71:c7:9e:02:21:1f:eb:d5:
98:72:6a:86:da:43:02:52:80:88:4d:d6:a2:0b:ad:de:c1:44:
0c:9b:5f:86:95:97:0b:71:3a:6c:f5:37:bd:38:eb:8b:0f:dc:
c4:23:3e:b6:35:5e:0b:bf:9e:e3:42:50:2d:25:2a:0c:22:ea:
0a:c9:97:26:5f:5e:ad:14:25:0d:a2:49:13:28:88:37:35:29:
9c:54:00:4d:82:69:31:ad:7f:92:27:73:3e:9f:90:bf:c0:29:
74:19:c2:c3:0a:20:f7:2e:cb:bf:b2:c8:a0:fe:ea:6a:3e:73:
b3:12:11:e9:7f:65:14:6b:06:b4:45:8f:f8:a5:02:89:a1:39:
80:91:03:03:c9:cd:50:9e:79:63:3a:b2:db:d1:ee:73:ac:6a:
40:8f:98:0f:6e:0b:63:fd:89:45:72:08:fb:2a:00:e6:53:b5:
f6:a5:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:06:58 2025 by rpki-client