Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a2e9d3bf-ea22-35f2-a3fe-286991185f9d.roa
File: a2e9d3bf-ea22-35f2-a3fe-286991185f9d.roa (raw, json)
Hash identifier: 52/0nOsnqXIU5VkyRkQ1YONUJROOCFTUManpi4FVFvA=
Subject key identifier: 1C:D9:7B:EB:B9:32:4D:1D:D9:C8:7E:57:A3:A7:64:A2:0B:6C:9A:76
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848A16872B41614AE07B2F75D00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a2e9d3bf-ea22-35f2-a3fe-286991185f9d.roa
Signing time: Wed 22 Jan 2025 15:42:29 +0000
ROA not before: Wed 22 Jan 2025 15:42:29 +0000
ROA not after: Tue 22 Apr 2025 14:42:29 +0000
asID: 395075
IP address blocks: 207.253.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:68:72:b4:16:14:ae:07:b2:f7:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 22 15:42:29 2025 GMT
Not After : Apr 22 14:42:29 2025 GMT
Subject: CN=2e8e2629-d192-48d5-8200-a27a29c3d9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:82:79:02:32:e7:2c:d5:a0:1c:78:b5:34:
6a:05:72:1c:37:8e:49:d1:aa:34:bb:2f:ed:3d:e1:
db:b6:17:af:56:ce:f4:ba:50:c3:b9:8f:0e:51:f1:
6b:f1:8b:4e:75:9c:a2:5a:43:02:fb:6f:26:3f:61:
56:a5:ea:45:de:e6:a1:08:1d:64:27:40:14:18:4a:
b6:b0:12:8d:0c:a9:96:ec:e0:3c:01:5a:47:bf:a6:
1e:00:44:fb:aa:3c:a8:15:94:05:15:f5:e8:17:01:
84:2f:f3:4e:88:e0:ba:72:46:67:00:b2:61:34:39:
ce:23:59:63:e5:42:10:17:be:a9:be:7c:c8:b5:9b:
92:33:4d:e9:5c:93:01:90:22:2a:55:1e:de:ec:13:
df:bd:64:2b:31:e4:04:da:b7:fe:ca:be:fc:1a:c7:
d4:8e:f9:7f:31:15:8a:cd:8e:a3:7c:82:bd:36:93:
60:d7:8b:de:88:a5:4b:58:3c:c4:21:6d:89:8b:63:
36:b9:b6:77:cc:f1:8f:a3:c8:f3:c3:00:52:20:4b:
f9:77:9b:85:0f:2e:f3:83:58:25:d9:2a:62:4e:a9:
e5:5b:17:91:b1:77:4c:99:29:16:8c:4b:b5:bb:3a:
ea:b2:a3:7b:bf:27:3f:a6:95:8b:fd:1b:f6:4a:df:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D9:7B:EB:B9:32:4D:1D:D9:C8:7E:57:A3:A7:64:A2:0B:6C:9A:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/a2e9d3bf-ea22-35f2-a3fe-286991185f9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:74:c9:6c:4f:5e:63:eb:2b:6f:95:3d:74:84:ed:6b:00:59:
0e:61:86:d2:03:a1:da:6b:ff:fe:29:de:9f:1d:95:36:7e:f4:
9e:45:0a:4e:cd:ac:60:e0:d4:a7:12:8d:90:09:25:9c:33:ed:
18:41:c8:d2:38:3a:8b:6e:26:10:9a:f2:7a:89:c2:52:be:5a:
c8:ba:d7:5e:02:bd:cc:60:5c:f2:09:01:5d:87:31:9a:70:84:
88:7f:cd:ac:5c:e6:d4:98:91:9c:73:b0:15:dc:d9:d8:bf:df:
a9:46:3b:72:fc:fc:9a:1c:45:de:27:1a:b4:ea:c4:61:2a:0a:
71:4a:4a:0d:40:41:c8:0d:79:77:e5:5a:d3:aa:e4:e0:7e:54:
2f:3f:29:23:e9:c1:37:ea:6b:f9:73:20:b8:9c:54:f9:24:0a:
58:cf:77:e0:ea:c1:2f:34:53:ab:25:95:62:f4:f5:96:fe:73:
b9:05:51:3b:b8:e9:cc:6b:1e:50:d2:ac:64:5d:75:78:36:5a:
e2:0c:14:38:fa:cd:d7:a8:1a:ad:ef:33:70:0d:12:29:a4:95:
74:7a:74:a3:81:58:47:a1:44:8f:75:20:01:c4:b9:f9:51:61:
ef:b9:fb:a9:ba:79:c7:07:9a:e2:d4:30:b8:29:79:86:ce:a6:
e2:62:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:21 2025 by rpki-client