Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8efbb37-deff-31e6-8ae2-e195034d4c86.roa
File: d8efbb37-deff-31e6-8ae2-e195034d4c86.roa (raw, json)
Hash identifier: z7e2UmhWke29+zu8eNrkLok6KoCDWMT8wtLNzqdX3nI=
Subject key identifier: 54:60:A7:D9:65:D0:0B:A0:2F:3D:D4:F8:D4:CB:F6:93:C4:A8:BC:ED
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848A17711462C8E2B551A591080
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8efbb37-deff-31e6-8ae2-e195034d4c86.roa
Signing time: Wed 22 Jan 2025 16:11:56 +0000
ROA not before: Wed 22 Jan 2025 16:11:56 +0000
ROA not after: Tue 22 Apr 2025 15:11:56 +0000
asID: 22652
IP address blocks: 207.253.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:77:11:46:2c:8e:2b:55:1a:59:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 22 16:11:56 2025 GMT
Not After : Apr 22 15:11:56 2025 GMT
Subject: CN=bab32dab-e022-41b9-b7fa-53cb5e41cfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:7b:04:08:3d:70:f9:72:7e:f9:85:d4:03:
39:bc:f1:12:41:98:ab:30:a2:6f:69:8d:75:04:4d:
8e:00:a5:24:18:bf:37:d9:d2:f1:2d:32:ca:bf:f5:
f1:a8:59:c3:bb:64:ab:d5:07:fa:7f:4a:13:e0:fd:
29:44:4f:98:b6:17:3f:d1:36:9c:03:ad:59:52:6b:
3f:e7:09:43:2f:29:fc:ea:f0:e5:66:e6:98:f0:dd:
9d:30:b5:64:2a:a7:97:66:14:fd:f6:94:02:fc:3f:
1f:f2:c6:97:26:04:60:ca:76:9d:db:b0:b0:5e:ab:
be:4e:dd:b7:fe:b8:0e:09:1b:97:72:c2:b5:66:0d:
9e:cf:8c:e5:9f:b0:6a:74:a1:0e:e7:13:1e:f3:8c:
a9:c1:87:3a:cd:2e:3a:bc:46:6e:06:e6:59:22:be:
9e:ff:fb:1a:c7:1b:e7:32:0c:e7:d3:52:35:63:b3:
e2:58:1f:c1:34:47:c1:ea:01:01:ad:56:37:12:3b:
4d:a5:34:78:c0:67:e6:ac:c6:4a:03:31:9a:56:d4:
61:5e:a6:4b:55:37:11:49:2d:74:73:11:f4:92:01:
86:ed:4f:b7:68:04:f0:81:75:3f:6b:42:82:70:98:
34:2f:15:d2:7b:a6:f7:22:78:1e:3d:6d:f1:e9:09:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:A7:D9:65:D0:0B:A0:2F:3D:D4:F8:D4:CB:F6:93:C4:A8:BC:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8efbb37-deff-31e6-8ae2-e195034d4c86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:d1:c1:05:51:23:68:d9:6d:5b:7f:4d:c1:b8:2d:88:78:5e:
2e:35:e7:53:bc:e6:81:5d:a2:ba:ce:fc:4b:b9:6f:38:f1:b0:
df:c9:e6:42:17:7b:e9:7b:68:69:ed:8c:cb:6c:cc:57:42:9e:
4d:58:22:52:f9:2d:07:f8:e7:87:b4:af:a8:0f:be:37:cd:3d:
a6:04:79:d2:61:31:bd:0b:2a:fd:2a:32:88:1e:55:53:7e:64:
f5:ab:56:3f:0e:b7:b4:80:f9:bf:43:21:71:e5:68:f8:2e:3e:
cc:05:48:11:12:6a:27:ff:d7:20:a8:ea:4d:b5:ce:6b:4b:60:
72:e3:91:05:d1:3e:a6:d2:43:bd:35:41:e1:77:e0:5e:81:29:
02:0c:bc:06:23:fe:37:11:cd:dc:c4:58:e3:35:a4:7a:2b:fa:
b3:c4:39:56:37:85:e0:f7:d5:ab:67:e3:c4:dc:ae:d2:59:5f:
b3:06:2d:9a:59:d6:8c:8e:30:5f:a1:1d:9a:fb:d2:87:b3:9a:
41:b2:7b:3a:38:0e:db:a2:a5:42:dd:16:b0:a4:e3:85:27:6a:
9a:64:e1:4a:85:33:9f:50:d0:b3:54:6d:b4:91:d6:1c:41:c4:
fe:53:fc:46:0f:a2:54:9f:d6:59:18:de:2f:79:3c:83:28:52:
00:b0:02:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:49 2025 by rpki-client