Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/df1b97c6-e9e0-3890-9005-82d844d80642.roa
File: df1b97c6-e9e0-3890-9005-82d844d80642.roa (raw, json)
Hash identifier: 0ZjlEcYSamKkg7y52Y5H5laSM0fhy3QLSypV0WvHMy8=
Subject key identifier: 80:2F:E1:1C:E7:10:2C:9C:5A:15:EF:5E:9C:B2:BD:0C:E5:EA:DC:BB
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848A16FD7B756CB8CAF19245800
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/df1b97c6-e9e0-3890-9005-82d844d80642.roa
Signing time: Wed 22 Jan 2025 15:57:23 +0000
ROA not before: Wed 22 Jan 2025 15:57:23 +0000
ROA not after: Tue 22 Apr 2025 14:57:23 +0000
asID: 5769
IP address blocks: 207.253.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:6f:d7:b7:56:cb:8c:af:19:24:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 22 15:57:23 2025 GMT
Not After : Apr 22 14:57:23 2025 GMT
Subject: CN=396d8d48-618b-4bbd-a26c-961ef48edc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:59:c8:5b:0c:0d:59:55:e5:77:fa:16:55:
ea:1d:7c:6b:39:85:9f:d4:ba:59:47:68:b2:e1:89:
50:6f:3b:09:e1:3d:14:4e:04:1f:03:33:37:38:3c:
8a:a6:c1:be:03:93:1e:63:a1:88:00:26:31:73:3f:
c2:23:24:f4:d8:e6:8d:d0:5d:63:d6:95:c6:66:4c:
6e:3e:48:ce:83:23:5a:a1:7f:85:eb:43:13:43:a9:
75:7f:b4:9b:78:4d:c2:fe:2d:f8:b1:a8:d6:4c:c9:
0d:66:96:4f:05:82:90:27:99:c3:28:c7:cf:9a:b3:
ef:62:14:32:df:27:a2:c4:e2:26:59:b5:30:41:b6:
3e:dd:ee:d8:cf:96:9d:9e:fa:ab:81:bf:93:a7:49:
0c:b6:9f:86:e4:50:89:10:52:72:4e:77:1c:26:61:
1a:bc:6b:ea:3a:83:ed:20:67:f2:3e:7c:09:42:a1:
78:c9:13:a7:c7:fc:3c:c1:7e:72:55:4d:9a:8c:f1:
47:2d:34:2e:66:de:fb:da:5f:f8:eb:54:c2:93:62:
61:ab:eb:a8:cf:81:32:1b:d2:c2:c5:d1:bc:f9:11:
32:e5:66:d7:d2:fe:bc:e9:6f:09:88:73:f3:cd:b2:
a2:15:a3:ff:60:e1:8f:ea:43:2c:82:16:80:7a:47:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2F:E1:1C:E7:10:2C:9C:5A:15:EF:5E:9C:B2:BD:0C:E5:EA:DC:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/df1b97c6-e9e0-3890-9005-82d844d80642.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
207.253.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:ba:d2:15:63:3a:3f:fe:af:45:ca:fe:fe:6b:f7:29:9f:79:
c8:40:18:63:a8:e1:0f:86:03:e7:f4:50:18:0e:b3:87:f2:9b:
e7:c9:8f:5a:da:3a:e1:c7:f3:bc:7c:fd:47:36:27:f8:0f:4d:
38:b3:dd:a4:42:b5:9d:24:df:93:ae:32:ae:19:6c:2c:3e:54:
33:a9:bb:55:90:6f:98:0c:f0:9b:a2:1b:f6:69:58:99:cf:15:
b6:8d:02:d3:14:a9:9a:30:db:0a:4a:c5:52:83:ed:44:6a:65:
33:ec:53:60:17:56:2d:33:4d:bf:f0:7d:8b:df:b5:26:fa:30:
5b:4d:b1:db:1a:51:c8:2b:c1:9d:61:dc:58:5c:50:5b:43:ff:
91:09:94:8d:d9:55:85:ee:bf:70:de:2c:4f:f8:3d:5a:e3:24:
9f:cb:96:17:d6:98:ce:f0:f0:c4:4e:d7:86:2f:81:5c:05:c6:
ae:fb:75:79:c3:e2:d5:53:c4:d9:af:40:a1:08:84:e1:39:ff:
2f:a4:27:cc:00:c3:6a:26:fb:8d:eb:d1:a6:2a:a5:49:2b:8a:
74:96:48:06:3f:06:66:dc:8a:70:e5:d2:0a:1c:af:4e:64:18:
da:99:0a:66:f6:70:c4:af:9f:79:68:19:2c:76:8a:14:2d:dc:
75:6a:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:29 2025 by rpki-client