Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/595a435f-0d5d-30e0-ace7-337993c7ecc1.roa
File: 595a435f-0d5d-30e0-ace7-337993c7ecc1.roa (raw, json)
Hash identifier: ozeedS7hkpwkkWl6BWS3T/Uj2DT4RPitIDyX8pIzM8c=
Subject key identifier: B8:E7:91:E5:F7:B6:5E:FF:0B:6B:33:9A:0F:F7:8C:62:27:28:BE:C2
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581BD744DB2476119054400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/595a435f-0d5d-30e0-ace7-337993c7ecc1.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 75.107.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:bd:74:4d:b2:47:61:19:05:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ea6e21e4-910a-4ff1-82bb-d68620bf8709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:3a:1f:09:14:3f:90:95:7d:cc:1d:be:1f:
15:4e:54:1b:ab:48:e4:32:e6:34:39:03:e8:da:fb:
2f:83:1a:78:06:e2:9f:6e:54:47:83:10:a0:3c:46:
83:e0:3f:aa:b8:f7:b1:ed:04:ea:fb:11:14:74:47:
4d:aa:70:c0:6b:d5:6b:ff:df:25:bd:1c:8e:96:1b:
8f:e9:dd:13:95:82:11:1e:bf:8c:19:f9:b3:54:49:
01:e0:cf:e4:ef:05:9c:b0:7a:17:c0:cd:fe:35:38:
22:03:c0:f5:09:e9:6c:08:50:53:1c:1f:0b:6f:38:
ca:3b:ca:5c:ec:8d:2a:a5:ef:60:41:5a:3e:26:5c:
f4:d6:55:95:ef:5f:4c:64:3a:4e:9d:e7:8b:69:69:
c1:88:30:5f:1a:12:64:51:af:95:11:d8:79:ca:c8:
ee:44:6f:4a:6a:77:fc:b2:14:c5:cf:f7:61:b3:ef:
34:cb:d2:85:90:2f:45:f1:4f:55:41:7c:ad:28:9b:
a3:2d:2a:a3:39:2a:c4:24:c6:b2:41:43:cc:57:24:
51:4f:7a:5b:c5:6d:c6:79:06:24:d0:c2:d8:30:75:
d5:10:6f:21:31:b1:1d:e0:58:93:8b:df:91:aa:3f:
80:1c:8b:81:b4:ad:d8:4d:bf:fa:42:40:23:16:4b:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:91:E5:F7:B6:5E:FF:0B:6B:33:9A:0F:F7:8C:62:27:28:BE:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/595a435f-0d5d-30e0-ace7-337993c7ecc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
75.107.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:6a:f0:e2:02:5e:a6:3c:cf:23:8d:88:07:9a:43:f9:36:cd:
fd:31:d1:e1:8a:12:14:41:ef:c6:cb:fd:cf:fe:d8:f7:c4:60:
9a:89:74:fe:97:e9:b7:5d:5a:64:b9:06:fd:c9:53:7e:c1:6c:
d0:17:be:93:60:05:75:1d:e8:48:13:08:0f:7c:3d:58:ef:e7:
47:3c:32:d3:1e:3e:f7:76:14:0e:b1:a0:ff:82:52:e5:90:28:
f5:28:e7:7d:92:78:ba:af:eb:d9:eb:f7:70:83:3c:98:87:7d:
a5:0f:5e:f8:55:b7:b4:75:a9:6d:be:fa:9a:5b:44:ab:39:52:
a0:64:b8:07:0d:d2:a0:73:cf:62:60:e8:d5:45:a6:10:c7:bd:
f3:fd:b9:03:c9:16:cb:a6:3d:fd:2c:53:22:71:34:9a:f4:1a:
d6:7f:64:69:79:aa:f8:be:8c:75:7a:e9:dc:f4:ad:2b:73:12:
e3:ca:da:86:6c:a9:1b:64:79:b5:d3:b9:b2:53:ef:99:22:a9:
1c:6a:3e:ce:be:54:8e:f5:1b:20:f4:f9:87:a0:8e:b5:31:0b:
ae:2e:16:c2:21:5e:cd:63:4f:87:17:a2:7b:1c:f6:80:ef:08:
0f:cd:83:34:c9:c2:1b:46:16:4c:da:c4:0b:b3:0a:e2:c8:e6:
db:aa:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:27 2025 by rpki-client