Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa
File: e7af233e-fa26-3293-bcf8-b64f71a0e384.roa (raw, json)
Hash identifier: KhaCcSbGnDTbt+72Syc+DpVBSMBoeg0vzBetFPoSWos=
Subject key identifier: 9A:C2:33:BA:03:07:AD:CC:76:D7:D2:60:1A:41:F0:65:90:D8:C6:A9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858492134525DF10AE46CAE6E2340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa
Signing time: Sun 09 Mar 2025 10:20:55 +0000
ROA not before: Sun 09 Mar 2025 10:20:55 +0000
ROA not after: Sat 07 Jun 2025 10:20:55 +0000
asID: 33017
IP address blocks: 207.61.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:34:52:5d:f1:0a:e4:6c:ae:6e:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Mar 9 10:20:55 2025 GMT
Not After : Jun 7 10:20:55 2025 GMT
Subject: CN=3151132a-c787-497a-9436-07c1be989794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:c2:b1:b3:90:dd:77:ea:40:5a:a5:cb:da:
87:f2:c7:9c:fa:e1:1c:55:3e:04:a2:6f:44:29:1c:
57:3a:da:20:7a:09:4c:58:9b:b5:1a:f5:c9:3e:3a:
13:91:28:7a:76:89:0c:82:1c:d4:d3:8e:32:29:68:
1e:0c:e0:38:e9:c3:e5:c8:1c:12:fa:a9:8d:d5:c8:
ca:1a:46:b2:c3:8c:80:c8:8a:f6:3e:1d:7d:0c:e8:
41:02:56:76:1a:cf:3a:6b:9a:0b:6b:4a:cb:ff:ec:
a2:f5:ea:3c:c6:05:96:63:32:04:59:28:a2:dc:49:
b0:48:63:f3:27:27:1e:63:d1:ca:3b:e9:83:40:41:
c3:a4:e2:41:b9:06:54:d9:3d:67:13:ed:58:fa:68:
d7:71:2a:f7:02:02:ba:e6:24:18:04:2a:a7:a2:81:
d3:f1:98:22:0c:2f:7c:6a:af:6e:b3:06:37:d1:61:
12:64:11:b6:c2:25:c7:33:50:62:af:3f:63:67:ec:
b6:6f:6c:37:bd:18:a4:88:28:a3:b4:d5:5e:be:c6:
5f:87:d2:41:d7:ae:cd:89:89:39:b9:33:b5:31:8c:
5e:06:a0:8a:5f:ed:6e:26:9d:8b:4d:67:6d:b3:52:
6b:06:c3:d4:02:68:c7:25:2b:78:4c:69:80:04:94:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:33:BA:03:07:AD:CC:76:D7:D2:60:1A:41:F0:65:90:D8:C6:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
207.61.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:42:d1:ae:ed:04:5b:62:da:a1:d5:0d:95:25:4d:59:2e:77:
07:01:73:56:0c:7a:89:ce:fc:c1:05:ef:94:e5:40:a6:97:9c:
ec:62:81:14:bd:93:b7:cf:26:97:91:ed:00:44:36:43:41:ca:
83:f2:b7:12:f0:99:84:d9:cb:8f:ee:3f:4e:07:12:5c:ac:d8:
ff:07:26:bd:07:72:6f:3d:ef:1c:d3:e0:ad:54:ee:ce:e4:f4:
19:59:34:2c:58:d2:d5:d3:d7:6c:e2:b1:ce:32:6d:51:94:ac:
7d:5d:e3:7d:10:d7:a6:68:80:fd:c0:34:d8:c7:cf:e2:ab:19:
5a:f9:ba:a5:8d:46:e4:e5:a7:96:84:10:a5:52:09:14:a0:6b:
4e:b2:97:8c:e7:07:62:5b:36:cd:05:44:99:12:9e:69:d1:57:
65:67:db:36:c8:db:c0:25:fa:5f:a4:d0:11:9f:f7:4b:47:2b:
73:6c:d5:c8:ae:56:2f:63:3b:f6:0e:0b:76:34:45:dc:3e:be:
39:51:f6:76:ce:6d:ab:06:8f:48:52:a2:b5:da:2f:2d:79:6d:
55:93:25:c9:77:49:80:63:8a:16:31:81:bf:64:6d:6d:ac:aa:
d3:90:9b:86:f0:a4:d6:46:a6:c3:2a:42:0a:88:48:9e:5f:ff:
4f:46:43:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:42 2025 by rpki-client