Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa
File: 7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa (raw, json)
Hash identifier: ZQmmlXVz5FX+T8aBdDwUjqDUrHgDWoqnt63JplBKRDE=
Subject key identifier: 12:0D:53:7C:4E:71:D6:56:F0:BF:43:F3:55:94:5B:43:17:BA:B5:76
Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial: 010D0C9F43285849244E86BA723E16F3AB8F0F80
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 400790
IP address blocks: 207.228.216.0/24 maxlen: 24
2606:f6c0:80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:86:ba:72:3e:16:f3:ab:8f:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=9801be84-1585-406e-9e35-bd0b6f8a974e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:ff:38:a9:88:2e:47:fa:3f:bc:ec:d7:b4:
5c:2a:14:e2:08:a9:68:f7:db:57:e9:18:06:ed:8f:
fb:a4:b0:e2:d7:06:83:69:3d:01:9d:7d:ac:19:f0:
4c:38:36:6a:5e:b5:48:aa:b4:82:0d:32:7a:1c:d3:
f7:08:f7:ac:c3:e5:18:eb:ac:a7:e6:b0:f6:f6:d8:
8f:41:76:20:6f:b5:1c:c5:df:bb:7c:88:a6:b5:cb:
ff:dd:c0:a8:18:a9:08:f5:10:51:f6:6a:87:36:3a:
35:ba:a6:ab:62:8f:87:36:23:48:e8:52:e8:88:09:
05:61:46:20:ce:15:eb:e2:7b:df:11:de:ad:a4:a7:
6c:c3:6f:ff:34:91:5a:22:2b:37:db:17:35:cb:79:
55:71:d0:bd:46:40:72:45:ac:14:11:2f:49:52:3e:
c5:40:03:03:af:3d:65:af:a8:d3:4a:33:8e:47:74:
89:47:d3:a4:e6:59:ba:53:fe:c8:6e:33:fc:1e:b6:
93:22:be:c3:d2:2a:fd:99:2b:f7:57:8e:05:24:ad:
50:ec:92:46:83:e9:84:8c:bc:c1:36:dd:23:22:16:
9f:4e:17:91:9e:1e:ed:9b:9f:aa:11:99:df:a8:cb:
18:35:86:6a:51:cc:1a:61:76:2c:cf:9c:cb:8f:70:
43:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0D:53:7C:4E:71:D6:56:F0:BF:43:F3:55:94:5B:43:17:BA:B5:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl
X509v3 Authority Key Identifier:
keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.228.216.0/24
IPv6:
2606:f6c0:80::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:96:d0:06:a4:d6:f5:ba:58:1b:03:7d:44:36:a5:d6:74:13:
95:71:f7:95:43:84:a7:c6:06:08:88:aa:f3:50:61:e4:ba:52:
fd:33:7d:48:2e:d2:7a:5c:0a:2c:86:f0:cc:58:dc:83:28:17:
ae:bc:56:8d:22:64:41:62:6b:f6:74:13:13:a5:77:ee:c6:dd:
e2:cf:01:70:58:c5:49:5e:fb:85:4b:05:dd:4a:fc:46:93:b2:
c1:e3:a7:53:15:1e:71:08:95:7c:49:13:37:06:4e:1a:90:8e:
59:8d:14:47:46:e0:3a:8a:48:b8:dc:f6:2e:53:bd:3f:fb:12:
15:65:fc:d7:5b:60:40:8d:19:38:a9:83:45:05:27:d0:3f:c8:
90:29:87:d4:45:c0:21:fa:0c:24:56:4f:92:7f:54:b7:34:08:
6f:2a:69:88:e1:d8:8b:3f:3b:c1:6b:51:5a:67:c0:49:dc:64:
a4:4c:2f:3b:d5:b1:30:92:a2:75:b2:d2:03:a6:0c:9a:ed:78:
82:4b:98:e9:a1:04:28:3f:20:fb:da:2e:a9:b7:de:1b:c7:ac:
84:3c:0b:b9:ee:af:54:0d:2c:f0:d0:23:5c:76:7d:f5:61:c9:
12:45:bd:6f:e2:7a:d1:7b:8a:ff:dd:e2:78:97:71:57:58:56:
94:72:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:56 2025 by rpki-client