Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa
File: 21ef65b0-89b3-3b33-8192-e464535e916c.roa (raw, json)
Hash identifier: Sw+jLDmvjLO5TNm0cXtoZ0Jbn6IWEWJ5MfYfYMQzpAg=
Subject key identifier: 42:DB:84:EF:BB:C6:3A:EB:13:0B:0B:02:F8:F7:72:FE:C9:4B:A6:11
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285848D210F833CC725881DE30C000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 7029
IP address blocks: 207.222.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:10:f8:33:cc:72:58:81:de:30:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=0db66d7b-9db8-4200-a21e-eabc79d08ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f8:fe:c9:ca:ab:fb:61:e5:dd:ea:25:32:e1:
3c:4b:7d:b0:21:4b:c1:af:57:12:a3:71:e3:97:2a:
9b:9d:94:8d:3c:6b:e3:98:0c:be:59:25:fb:8a:8a:
ac:06:dd:51:da:30:33:9c:e0:82:a3:24:23:b1:e3:
24:ac:3e:3b:73:a3:45:cd:7b:da:33:d3:e4:c9:40:
fe:ca:bc:9e:d8:8e:1e:26:3f:36:15:09:ab:63:2b:
9f:5b:1b:24:ec:21:5e:2a:58:1d:93:11:54:a5:96:
df:a6:dc:f7:e5:39:66:1f:26:bd:bc:cd:e2:04:cc:
9c:cd:8d:fd:77:7e:6a:ac:f4:87:87:62:a5:15:8b:
19:d7:56:7d:8d:1d:bf:7c:70:93:43:fb:52:a6:75:
d5:73:12:67:e9:c2:29:cc:c0:9b:45:31:73:87:07:
13:d1:57:cc:da:06:77:e1:15:37:bb:ae:6c:8e:6a:
88:b3:16:7b:cd:d8:6c:eb:83:f7:0f:b8:0a:52:1a:
12:d3:31:54:ac:c7:cd:9b:22:0c:5e:41:f1:03:40:
1b:fb:b5:72:9c:3b:7d:07:f9:ba:fd:5b:9e:d8:fd:
0d:93:77:88:59:35:75:80:6b:b5:c5:ca:cf:9f:6c:
86:1d:b6:83:66:ea:e5:6e:ea:93:ef:67:60:1a:4b:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DB:84:EF:BB:C6:3A:EB:13:0B:0B:02:F8:F7:72:FE:C9:4B:A6:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.222.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:98:f3:73:03:2c:97:d7:f1:83:c5:80:fe:61:86:a2:c6:e4:
1f:e5:27:69:88:e4:ed:62:0f:26:4d:23:aa:9e:7f:6f:16:71:
80:d2:d9:ec:97:7e:bf:a1:5d:c8:ca:de:7c:e5:30:dd:e0:26:
df:f6:c4:ca:3a:3a:02:7b:aa:59:8d:93:d1:4b:ee:6f:0a:4f:
d4:bf:65:2a:2f:55:ca:bd:ab:be:ba:0a:27:2c:f9:60:61:96:
ad:40:66:00:a3:5d:01:bc:b6:b8:c5:21:64:c3:3b:76:bc:43:
a6:29:3f:e2:46:55:ee:ff:ef:87:be:00:dc:bc:b4:92:c3:77:
37:c4:d1:47:94:b9:86:3d:b3:67:0e:d3:cb:79:c2:0e:c1:95:
77:ee:43:06:99:38:1e:65:d5:a2:98:95:aa:01:1c:82:3b:6d:
fd:88:71:51:0c:af:b3:4e:ca:44:47:56:9c:34:a6:b3:66:a6:
64:86:b8:8b:48:2a:e6:7f:c8:60:91:16:73:c3:60:ef:70:51:
30:f7:f0:91:cf:1a:1c:82:d0:22:cc:70:7f:b1:63:c4:5d:ad:
15:b4:01:58:95:3d:a5:b8:7d:63:09:b3:a9:b0:07:88:dd:a9:
d7:41:53:40:30:b9:1b:41:0b:04:ba:d7:bc:3f:66:ef:8d:81:
c5:10:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:02 2025 by rpki-client