Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516/c18bc40a-8930-344e-b80c-33c58f0e6a50.roa
File: c18bc40a-8930-344e-b80c-33c58f0e6a50.roa (raw, json)
Hash identifier: CcjIEBt4mUk5tKnR2pVBC6dpYg7GbupNfQ/iqu5ktWw=
Subject key identifier: 17:46:5F:0F:B5:D5:4E:D1:34:98:F6:52:B0:72:BC:5C:88:14:2C:B9
Certificate issuer: /CN=85c974cf-758f-410e-af74-d203a4baf516
Certificate serial: 010D0C9F4328584930DE5F6045A53F14FCA27080
Authority key identifier: FE:C3:FB:3A:7F:79:36:30:A7:37:06:EC:C8:A5:50:FD:AF:EC:E8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516/c18bc40a-8930-344e-b80c-33c58f0e6a50.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 11700
IP address blocks: 137.207.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:5f:60:45:a5:3f:14:fc:a2:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c974cf-758f-410e-af74-d203a4baf516
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=08ab5a85-26ab-4fb2-97b1-655fb461406b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:e7:d9:2c:e4:c9:67:41:c0:25:bc:aa:80:
64:81:37:06:28:e2:10:68:04:fc:82:3e:b5:0b:21:
ef:65:a7:41:f1:a9:e3:88:1e:c8:bc:2f:80:b0:e7:
6a:7a:2c:25:71:ce:f0:44:44:20:5e:90:d9:3e:28:
54:5c:ae:6a:45:f0:2b:c3:c3:1c:8e:9b:f0:81:da:
12:bb:4f:55:80:41:de:12:dc:ad:20:4d:d7:87:87:
c1:3e:ba:32:c6:b6:29:a5:55:5a:2a:72:29:db:3b:
4d:0a:04:55:34:09:71:e6:39:75:73:5f:49:f0:08:
d2:6c:09:94:4f:88:28:8a:19:56:92:f6:c3:c2:cc:
a6:47:cd:23:14:e1:a7:66:ab:c1:d4:fd:3d:bf:e8:
54:b8:53:98:55:32:8d:a8:8e:ca:be:8a:6e:6c:7a:
5c:62:7d:0a:d6:ae:90:86:49:f2:c4:41:67:c1:3b:
5a:6a:f4:40:b2:ab:25:1d:a5:e2:ad:98:93:94:ce:
87:5b:9d:cf:34:aa:02:af:23:1e:e3:1b:a3:e9:b1:
03:fb:77:0f:45:07:c3:b0:23:85:aa:c5:4a:ca:86:
e0:84:68:07:15:78:45:44:6d:e7:fe:99:ff:5c:ff:
3e:3e:14:29:51:99:51:e2:12:59:56:99:02:d7:8f:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:46:5F:0F:B5:D5:4E:D1:34:98:F6:52:B0:72:BC:5C:88:14:2C:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516/c18bc40a-8930-344e-b80c-33c58f0e6a50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516/85c974cf-758f-410e-af74-d203a4baf516.crl
X509v3 Authority Key Identifier:
keyid:FE:C3:FB:3A:7F:79:36:30:A7:37:06:EC:C8:A5:50:FD:AF:EC:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516.cer
sbgp-ipAddrBlock: critical
IPv4:
137.207.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:c5:08:77:21:96:53:2d:38:21:8a:a2:ca:4e:21:62:7f:42:
98:e3:14:2f:50:a7:66:af:e3:34:5f:b1:08:69:eb:40:c7:cf:
56:7b:ac:bb:26:24:bd:7d:97:28:03:ea:22:36:83:80:1d:9f:
66:79:17:2b:83:64:c2:9c:e2:b6:a4:9b:51:e5:aa:41:e3:ee:
f8:fa:d8:51:db:5d:27:69:06:3b:91:bb:ce:62:00:80:e4:62:
4a:9c:e4:79:78:15:58:fa:b8:0e:c2:54:90:61:c3:1a:b6:8d:
ca:6f:c0:b3:2a:78:d5:3d:c7:9e:f4:b9:06:3e:ad:39:5e:76:
45:ac:61:97:c6:72:de:63:01:a1:4c:90:29:f6:b4:2e:cb:c1:
d9:cb:29:d3:61:42:e1:3c:6e:07:57:c9:40:5d:e9:fb:d3:ac:
17:92:a9:2c:09:8a:35:1f:d1:b0:bd:41:23:6b:6a:fe:5c:ee:
de:c4:79:d2:6a:03:db:6a:c9:37:1c:da:41:75:c4:56:61:0c:
b3:0c:1e:a7:2b:9a:00:55:23:01:c5:b0:ba:e3:04:76:30:d7:
eb:08:13:63:b7:00:9b:f6:6d:c9:ca:79:12:5d:40:f1:a4:ec:
f0:fc:64:db:f2:45:c3:a4:a0:ca:84:f8:40:31:89:f6:ab:0f:
4e:39:41:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:05 2025 by rpki-client