Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/cf4d15d6-4c1e-3733-a01b-06894d765f29.roa
File: cf4d15d6-4c1e-3733-a01b-06894d765f29.roa (raw, json)
Hash identifier: rE0m5SYffmNpjknwbSMFCA7Fl9jxJgZUAkWDHFvjwPk=
Subject key identifier: D0:6F:B4:C7:F6:6C:2C:29:53:4E:08:80:32:2C:A7:6D:B5:A8:F8:3F
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848A1700D87330F16B6E9C9DB40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/cf4d15d6-4c1e-3733-a01b-06894d765f29.roa
Signing time: Wed 22 Jan 2025 15:57:48 +0000
ROA not before: Wed 22 Jan 2025 15:57:48 +0000
ROA not after: Tue 22 Apr 2025 14:57:48 +0000
asID: 5769
IP address blocks: 207.253.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:70:0d:87:33:0f:16:b6:e9:c9:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 22 15:57:48 2025 GMT
Not After : Apr 22 14:57:48 2025 GMT
Subject: CN=b3476f3f-2157-4bed-959e-e07d22a0cbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:4e:61:6b:8c:28:df:6e:6a:9e:54:5f:70:
54:46:58:59:5b:f3:8f:5a:54:3f:08:7b:48:dd:05:
8a:fe:33:73:5a:34:ed:24:cf:cd:b8:9a:c0:4a:95:
58:08:28:61:02:f1:fc:02:0d:bb:f6:d7:30:fb:a9:
d6:b6:5c:c6:91:50:83:91:ac:b1:03:52:45:84:a3:
0d:01:35:ec:f2:cc:2c:ff:6a:3a:fa:be:f0:c2:c5:
8b:25:b4:01:3e:f9:f3:1b:7b:c7:9d:1b:da:2d:df:
c9:f6:3a:ee:c4:52:33:e9:91:fd:a8:93:f0:2c:ae:
67:68:00:23:c9:de:c5:b8:a3:5e:66:76:e2:52:10:
33:9b:41:69:85:36:98:d0:b5:13:87:3f:b3:51:16:
19:72:98:ba:b7:15:b2:c3:34:7c:1f:86:f9:bb:1a:
de:9a:d7:73:09:46:77:f3:a4:dc:e6:7d:25:46:e2:
44:d3:c3:75:b0:ab:1f:f9:15:87:14:4b:fe:05:0b:
6d:db:15:48:1e:bb:90:37:f6:3a:08:d4:ab:4a:49:
dd:e2:c4:dc:64:8e:bc:65:4d:81:0c:1a:dd:02:02:
6d:47:6c:72:92:1f:85:9a:41:27:db:a8:11:a5:00:
ec:bc:89:a5:5a:18:f6:6e:34:27:93:2f:15:d1:fe:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6F:B4:C7:F6:6C:2C:29:53:4E:08:80:32:2C:A7:6D:B5:A8:F8:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/cf4d15d6-4c1e-3733-a01b-06894d765f29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:bc:5c:34:ea:76:c6:a5:83:13:b0:02:0a:4d:a8:63:2a:07:
7b:a2:b5:4a:34:64:70:02:b0:ac:cc:96:46:21:7f:31:e7:e8:
a0:e4:3e:62:8a:ab:b0:72:cc:41:b0:0b:af:91:48:2d:47:08:
e3:aa:a2:41:35:b6:f6:5f:4a:e1:f0:b5:52:e8:ec:8d:9c:b9:
a2:c5:56:c6:ae:bb:b1:ca:8f:4e:71:56:73:c6:b9:56:9c:8c:
1e:d0:a2:aa:19:a7:84:3e:49:56:be:14:5a:97:68:03:a9:56:
a9:b5:e9:16:01:a5:fd:7c:b7:7a:84:2f:32:84:7e:d9:3e:88:
9b:ea:b0:8b:83:a2:cf:d9:d6:d1:e0:37:75:9d:2e:26:d0:5b:
b4:f6:43:97:15:d6:af:bd:f3:4a:e9:82:4c:e0:9d:29:32:3d:
24:94:db:be:b2:71:62:2f:8f:c5:15:65:fc:7b:85:ff:d2:53:
e6:c5:e6:14:0f:24:b7:9d:d2:63:75:81:99:f2:d8:28:68:5e:
f8:5d:b7:69:4b:96:22:7f:34:82:b7:c8:24:8e:60:43:1b:d3:
83:3e:86:3d:86:4e:cf:00:b5:42:60:36:cf:ec:8b:b2:d2:90:
2a:51:69:fd:d6:d4:be:2b:c6:ea:ba:82:8d:d4:ae:9e:dc:b0:
54:50:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:55 2025 by rpki-client