Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa
File: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (raw, json)
Hash identifier: D9mo2U64M3MMAqRbLb2P15cjG5ATaMiSTQiT9O5SXOg=
Subject key identifier: 2B:E0:50:46:78:93:33:4D:08:09:13:26:EE:65:55:C8:7F:CC:E7:56
Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial: 010D0C9F43285848EF613DD8F739B50EF732BF80
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 400790
IP address blocks: 207.228.219.0/24 maxlen: 24
2606:f6c0:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3d:d8:f7:39:b5:0e:f7:32:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=40bf21fc-9dcd-4664-a805-5fde0c77a10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fe:7a:57:3c:c2:7d:af:2a:f3:16:c9:46:5f:
3f:f8:88:55:c5:59:c6:e4:d0:f0:60:18:d0:32:9b:
6e:e8:a2:26:17:de:a3:50:e2:d7:dd:f9:a2:10:f4:
46:b5:f8:13:2f:91:f5:c7:19:a1:22:61:8a:27:ac:
b9:19:21:08:69:bc:67:3c:ad:a2:e5:bb:62:ed:5d:
81:5c:7f:07:80:4f:8c:fd:3c:26:f9:0e:99:0e:7b:
c8:52:28:39:86:6e:c3:8c:b0:91:3a:6c:34:75:43:
33:fb:19:73:15:92:bc:99:ce:21:f9:cb:18:86:18:
81:9a:2d:66:6c:9a:50:2a:17:5e:7a:e6:11:b6:e7:
0e:90:25:a4:92:1c:0f:b6:f6:76:a8:42:28:e1:76:
5d:97:68:9e:91:24:89:34:90:4c:b1:69:5d:6b:4f:
dd:35:c9:b4:d0:f6:7d:82:a1:0d:b0:e1:47:82:9e:
09:d3:d4:c8:8a:ba:e2:38:39:5f:b4:cf:12:c2:2b:
12:8f:16:d8:a0:64:27:05:7c:76:9d:41:9e:32:b4:
e6:21:ff:b5:bf:b0:1f:b4:d8:11:83:b0:ff:3e:93:
4f:09:19:07:6e:27:59:e2:43:c6:0b:ab:97:61:c7:
56:b2:0f:08:ae:ae:74:ed:7a:8e:b9:d1:fc:93:55:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E0:50:46:78:93:33:4D:08:09:13:26:EE:65:55:C8:7F:CC:E7:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl
X509v3 Authority Key Identifier:
keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.228.219.0/24
IPv6:
2606:f6c0:100::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:fe:9d:8f:e9:15:34:8e:e7:6d:4e:f8:9a:2d:b6:d6:ec:d2:
f8:49:62:3b:fd:fe:3b:5a:ce:6b:4c:78:bc:66:cb:c1:63:1e:
1f:14:93:1b:82:f4:10:97:b7:51:48:ed:c1:b0:23:86:84:a1:
aa:40:62:02:64:4d:8c:d1:59:87:59:85:09:bc:9d:2a:38:88:
79:a5:0f:fd:3f:f0:90:8e:01:88:bf:59:ea:f4:fb:68:af:11:
56:39:44:1c:d1:e2:87:c4:5b:a4:25:06:67:f4:f4:32:b9:36:
2f:e1:69:14:72:08:b3:4d:dc:17:03:08:44:50:57:1b:6e:0e:
0b:06:f4:41:b9:ab:0e:35:08:2a:31:84:14:81:37:92:a0:51:
0f:60:35:63:45:04:68:72:83:f7:c3:4a:11:fa:ef:69:7c:dd:
28:3a:3f:85:62:bb:c7:10:bf:0a:86:84:ac:db:be:f4:73:68:
55:a4:a3:36:1d:c3:82:af:b4:9e:60:fe:bc:d8:d9:24:72:9e:
9d:1a:46:d7:b6:35:9c:6b:eb:6d:c9:25:4c:5f:f5:e2:c8:f7:
05:0f:6f:66:00:4f:d1:53:1c:8c:ee:6f:58:9d:7c:2b:6c:5a:
0c:86:3f:a2:f9:e2:0c:84:3f:76:18:35:34:85:8e:fd:8e:ee:
1a:88:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:36 2025 by rpki-client