Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa
File: 65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa (raw, json)
Hash identifier: h7225qfh5bKDSAbHzeQgTON1d3CgBxH5V/SLN2d3oyo=
Subject key identifier: F1:DB:28:67:DD:06:C5:71:FE:30:1E:CA:D0:C5:4E:88:96:C8:B7:75
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F43285848B6261560776C240FE7E9A360
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 33686
IP address blocks: 208.107.248.0/22 maxlen: 24
208.107.252.0/24 maxlen: 24
208.107.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:15:60:77:6c:24:0f:e7:e9:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=e76412f2-a454-49cf-88ef-0c9f1c46090e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:25:67:bd:81:24:cc:80:51:a4:e1:4c:d7:02:
25:e2:e4:80:ed:47:31:3e:6a:cd:47:3f:25:72:fb:
34:b2:ef:05:6e:a8:45:b5:00:ff:f7:bf:b8:20:bf:
33:c0:0d:e5:be:b0:1c:8e:b2:a9:09:8b:31:1e:d5:
36:19:be:2a:1b:ba:e1:36:40:14:59:5d:a2:7a:8d:
94:e1:8e:a1:df:89:fd:bb:32:76:a7:cd:10:43:55:
92:f7:5e:83:a5:82:c4:53:ee:9c:92:bf:d2:41:fa:
e7:c3:97:8b:a3:fb:35:e2:0e:ee:e7:51:ab:c1:15:
d3:45:99:a4:88:6e:43:0b:ec:50:99:31:bd:f7:f7:
1e:83:5a:13:81:6d:02:1e:f3:b9:cc:2c:25:65:56:
9f:39:64:83:eb:de:25:bc:11:8b:a7:bd:3a:34:9b:
aa:0c:10:80:01:26:3e:5c:ac:53:dc:41:ed:d5:14:
5e:c6:62:58:9d:f0:94:06:b6:45:65:1a:24:72:2b:
c9:2e:cb:f8:6c:44:09:6a:79:44:fd:89:bb:32:35:
59:f1:6e:83:3f:4e:da:4c:e2:36:57:14:37:d2:7a:
e6:e9:c9:2a:de:8d:68:08:86:5d:f4:9c:e0:1e:34:
98:3b:fe:ce:23:7e:dd:7b:b1:7f:a6:94:61:12:6f:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:28:67:DD:06:C5:71:FE:30:1E:CA:D0:C5:4E:88:96:C8:B7:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/65547dad-4b1a-39f9-b5d4-578f9cd3a09d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
208.107.248.0-208.107.252.255
208.107.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:ef:bf:cf:23:dc:a4:f2:21:b0:fc:38:e3:5f:6f:be:9c:95:
1b:94:16:50:84:77:eb:85:3c:1c:e9:70:34:4c:ca:48:69:37:
52:f5:dd:13:0c:1a:fb:aa:ad:9b:54:87:75:c6:72:ef:f0:c2:
15:97:0a:8e:ce:2d:35:c1:29:ba:b4:62:16:6b:da:64:e7:c3:
1c:95:6c:89:52:c1:4f:a2:a9:e8:db:11:53:c8:6c:66:90:7c:
c0:fb:6b:78:a6:e1:66:fd:35:d1:7a:bd:be:70:f3:87:70:c4:
d7:7a:32:73:21:73:1d:38:9b:3d:7c:25:54:10:96:ed:95:ce:
1c:2a:e4:33:c0:e5:80:5f:e1:1c:cc:87:6a:89:db:7b:0f:48:
b5:51:eb:ac:1c:ae:4e:c8:36:6c:98:e1:94:69:5d:07:ab:f8:
47:e4:37:d4:f6:10:26:1e:93:58:04:c2:d5:24:2e:00:cf:ec:
a4:8e:54:c1:ac:97:ef:1b:ba:b0:11:2c:43:20:db:94:d0:dd:
f5:c6:13:5b:8b:44:fe:af:4c:cb:97:fc:c4:c5:71:2f:cd:66:
9f:8b:06:64:d8:3b:bd:b2:32:1c:95:2c:67:3a:e7:96:d5:63:
f2:94:69:7a:2a:79:2e:2c:c7:eb:5b:18:a7:fe:84:19:91:ec:
6b:73:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:49 2025 by rpki-client