Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/68c1cbd8-4b03-3695-8aee-4eb788b4b98a.roa
File: 68c1cbd8-4b03-3695-8aee-4eb788b4b98a.roa (raw, json)
Hash identifier: /R00iOUhUO/jj4UE7HnvkAGxtM2y16GXimIy55u7EBs=
Subject key identifier: A9:BD:A8:47:2D:B6:5D:7F:E5:B4:7C:AA:C1:01:6D:0D:29:49:A4:B2
Certificate issuer: /CN=4e08a47f-8ddd-473c-bb7b-011963e78626
Certificate serial: 010D0C9F432858491D7174439A1B8251DE5EFD80
Authority key identifier: 5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/68c1cbd8-4b03-3695-8aee-4eb788b4b98a.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 14618
IP address blocks: 207.66.105.0/24 maxlen: 24
207.66.106.0/24 maxlen: 24
207.66.107.0/24 maxlen: 24
207.66.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:74:43:9a:1b:82:51:de:5e:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e08a47f-8ddd-473c-bb7b-011963e78626
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=861ca355-d0ee-4250-840f-e166621995ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:6e:96:25:1d:ff:41:c2:49:c8:a6:56:c7:
10:22:b3:cb:08:72:6e:05:3f:6b:c7:75:71:ba:7a:
0d:f6:5f:d1:b2:e2:7c:af:c8:f0:68:f7:96:c0:ee:
cb:32:80:b0:31:ef:68:1c:0d:36:7e:21:a4:54:e1:
17:fe:90:c0:f1:34:6d:1f:8c:4c:7f:c1:99:b9:a4:
30:6b:13:de:9c:8b:28:30:53:52:3d:76:ff:f1:01:
04:ae:48:77:d9:bb:10:f8:2c:e3:8e:08:1c:a8:12:
b9:8d:66:36:62:b4:c0:7e:3f:ba:fe:50:f0:cd:1d:
1f:74:7f:41:dc:ca:9d:c4:a4:cf:d6:87:92:b1:ea:
40:92:bf:85:db:bd:dc:a4:b2:de:e6:40:b2:12:88:
22:5a:91:cf:21:a1:16:bd:48:b2:e7:7d:01:fa:b0:
67:80:c6:c8:35:79:93:50:9e:6d:cd:fb:b9:b1:14:
6a:c8:12:a8:a9:c1:04:fa:a4:da:e1:fb:df:06:b3:
eb:36:d0:3f:3d:15:fb:72:11:35:3a:61:30:a5:6a:
a1:cd:81:98:68:cb:97:e2:4b:a8:77:67:4c:da:bf:
53:68:43:c0:32:17:de:f6:81:70:a4:42:df:63:c5:
db:ae:e9:99:c2:84:b3:fa:c9:7c:42:04:91:57:51:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BD:A8:47:2D:B6:5D:7F:E5:B4:7C:AA:C1:01:6D:0D:29:49:A4:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/68c1cbd8-4b03-3695-8aee-4eb788b4b98a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl
X509v3 Authority Key Identifier:
keyid:5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
sbgp-ipAddrBlock: critical
IPv4:
207.66.105.0-207.66.108.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:c0:35:26:60:9e:ad:14:3b:35:8a:76:ef:dd:25:7a:ef:f7:
77:05:0e:27:8d:02:2f:bd:2d:e8:96:ab:27:38:5f:d0:9e:57:
00:a8:1a:3f:99:0d:7d:67:6a:e6:10:34:a5:4b:ce:67:95:7b:
d1:7e:ee:bf:85:d1:f7:39:43:6a:ce:6b:e7:91:c3:6f:01:ec:
49:f0:fc:01:e3:b6:88:6d:ff:bf:18:2b:ae:55:56:7a:00:5f:
6b:30:59:5c:b5:fd:5b:cc:02:ab:5a:a9:00:b9:29:4d:ac:73:
14:25:15:af:3c:92:29:3b:fd:16:ae:7d:4c:28:43:25:b6:1a:
7e:70:b3:c1:81:49:64:42:9b:64:da:40:21:e0:fe:f7:f4:9a:
df:2a:bd:3d:cf:61:fa:78:1b:a5:61:49:63:e0:f7:9b:c5:50:
dd:f9:7d:5d:37:da:44:75:e6:5c:29:61:0d:78:d9:32:2e:b2:
28:19:78:5c:16:52:73:a9:e8:24:68:a2:9a:53:21:c0:43:61:
98:f2:5a:1b:ce:e9:ed:13:0e:c5:ca:95:bf:23:17:f5:86:b3:
37:24:19:7a:89:46:8f:59:a1:f5:e2:8a:a6:81:7a:7c:c8:f7:
f5:18:99:80:0f:74:76:57:7a:bd:3f:1e:ec:44:67:8d:54:04:
cd:d6:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:13 2025 by rpki-client