Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/f15fa1f0-c4c4-3ec3-8fbb-9a077b1cf904.roa
File: f15fa1f0-c4c4-3ec3-8fbb-9a077b1cf904.roa (raw, json)
Hash identifier: KW8B9mXmBiqHpeuqXBqqjbGgrqnMmFQHsErguisLdFk=
Subject key identifier: 49:D0:F9:A9:D5:A3:AE:DB:11:FF:A2:77:DC:23:A1:43:A8:53:1A:A8
Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
Certificate serial: 010D0C9F4328584916D3B03DF75A4B1F539BC020
Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/f15fa1f0-c4c4-3ec3-8fbb-9a077b1cf904.roa
Signing time: Wed 05 Mar 2025 17:08:08 +0000
ROA not before: Wed 05 Mar 2025 17:08:08 +0000
ROA not after: Tue 03 Jun 2025 16:08:08 +0000
asID: 8075
IP address blocks: 97.107.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:16:d3:b0:3d:f7:5a:4b:1f:53:9b:c0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
Validity
Not Before: Mar 5 17:08:08 2025 GMT
Not After : Jun 3 16:08:08 2025 GMT
Subject: CN=80807237-2f95-4665-bf30-d403f1dfe866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:aa:2c:27:40:3d:bc:63:5b:0d:4d:83:c4:
47:a2:5a:83:1c:3e:88:35:f9:1b:a5:d3:a4:c3:ab:
88:90:84:d9:e7:e0:d2:f8:07:32:9d:1c:67:27:e9:
08:3f:45:61:19:63:c5:3a:0e:e6:46:43:98:20:95:
fc:4e:22:6d:aa:e1:30:5e:98:a1:b2:f3:e1:b2:b5:
c5:57:d7:6e:4b:3a:45:ff:5c:ce:be:56:01:5a:8e:
e3:6f:cd:e4:cc:59:2c:51:e7:72:80:15:d0:38:6f:
f3:31:98:c6:da:f3:76:19:df:74:a3:cc:7d:dd:67:
0d:76:26:47:5c:f5:dc:88:59:4c:b0:57:cf:ba:a9:
42:3d:db:59:7d:fd:ed:bf:eb:73:84:44:ad:70:23:
78:73:17:70:34:21:72:13:fe:96:33:f5:23:12:00:
46:83:29:16:0d:c0:f0:3b:72:a0:5e:54:12:06:83:
1d:e6:d3:9c:4e:d7:27:34:cc:ca:ed:63:da:a8:a5:
4c:df:4d:e1:19:f6:d8:6e:17:18:28:04:82:c2:3b:
54:05:9a:cb:35:c5:42:1d:d9:60:4e:af:f0:cd:cc:
fb:05:2c:cd:f5:54:6b:44:1f:63:29:fe:61:fb:b7:
1d:4a:5b:a4:0a:67:15:71:d9:db:b4:d2:4e:3a:55:
c8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:F9:A9:D5:A3:AE:DB:11:FF:A2:77:DC:23:A1:43:A8:53:1A:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/f15fa1f0-c4c4-3ec3-8fbb-9a077b1cf904.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl
X509v3 Authority Key Identifier:
keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
sbgp-ipAddrBlock: critical
IPv4:
97.107.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:4e:87:e6:b7:b2:5d:a0:2b:82:13:2c:52:16:d9:69:c7:78:
0c:7e:b9:1b:d5:01:78:11:a1:79:e9:43:d5:c3:a7:56:b1:97:
fb:a9:9d:29:50:04:c1:fb:7c:30:d1:ea:35:6b:2b:d9:04:94:
05:03:2d:ff:56:f5:28:06:76:06:9a:f1:e4:e3:bc:56:d6:30:
43:56:70:18:32:d6:19:ac:ad:6f:8e:8e:bc:55:d7:17:6e:9c:
1b:ad:f0:82:1b:f1:37:54:d9:ed:3b:be:b1:fa:6f:1b:f4:75:
23:15:c5:2b:ad:4f:c7:5f:ec:ba:d5:39:87:72:06:c5:c9:35:
eb:94:c6:42:f9:bd:ca:29:f8:34:62:cb:05:69:c0:6d:2c:5e:
1d:85:c2:b6:52:7a:58:ba:8e:3a:76:01:49:44:35:83:94:05:
be:37:64:03:45:e4:ef:68:c8:73:35:fb:8f:09:70:c3:9f:00:
9c:91:46:96:a5:a5:9f:21:b1:e7:bf:36:1c:26:13:5e:a5:c1:
23:ac:00:b2:f0:2d:95:d6:da:08:ac:1e:4d:75:0a:45:e2:2d:
e6:ee:27:f6:14:7e:fa:79:8c:e6:dd:a7:67:6d:6e:63:95:d4:
3e:d8:1e:a3:35:cd:5a:3c:ef:36:02:45:24:ae:41:5b:94:86:
cc:5a:71:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:04:59 2025 by rpki-client