Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1f661ae6-4a58-3738-a1b5-c868347ed91c.roa
File: 1f661ae6-4a58-3738-a1b5-c868347ed91c.roa (raw, json)
Hash identifier: 5iQiFTDGaJ9OpvgO5DQwXPLuxr5COtX8EV0C7xBZFHI=
Subject key identifier: 73:33:79:BA:B9:C2:6E:60:52:4C:68:4D:C1:81:42:E5:9E:9F:F7:08
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584898D60A1FC8D569519E98DB80
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1f661ae6-4a58-3738-a1b5-c868347ed91c.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 13536
IP address blocks: 207.136.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:0a:1f:c8:d5:69:51:9e:98:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=269e65c6-2587-42aa-aff9-d1218b1bae28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:68:4c:93:46:2b:ea:4a:31:26:ea:aa:d0:46:
7f:41:ca:42:8c:45:8d:3f:65:c9:68:9d:ab:a3:94:
a1:60:56:6b:13:0a:b5:c5:75:cc:67:77:8b:10:ce:
a5:16:26:de:36:48:e7:fb:68:f2:dd:d4:38:11:91:
f9:f8:a2:6e:0c:55:5f:aa:5e:ae:90:5c:ce:15:35:
d4:85:27:3f:a7:57:a7:63:3f:18:f7:11:e2:ee:85:
16:0e:c5:ce:2c:06:01:bc:f5:af:69:fd:c9:34:c6:
6e:f3:2f:81:3b:84:4c:ee:74:a8:d8:aa:b9:b3:a7:
df:81:82:62:b4:4c:09:cc:0d:0c:49:df:af:6c:80:
8d:1f:b4:94:7c:89:ca:82:69:72:fe:7d:36:fb:75:
b2:95:8a:53:92:c2:42:05:82:75:72:c8:2b:da:51:
84:a8:08:e8:e8:f7:32:96:a7:82:7a:a3:b7:bf:aa:
e5:a7:a0:6d:7b:96:30:7b:5f:97:25:2d:54:71:c0:
ad:49:22:25:94:a1:8d:6f:28:3a:4d:0b:50:7e:ce:
b2:e9:af:4a:7b:6f:17:1e:56:3e:f0:fa:5c:f0:8c:
58:b5:b9:0b:ed:65:39:43:af:54:83:08:e2:ce:a4:
48:fb:5e:b1:a1:4e:af:2c:d0:67:9d:28:4b:fb:2b:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:33:79:BA:B9:C2:6E:60:52:4C:68:4D:C1:81:42:E5:9E:9F:F7:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1f661ae6-4a58-3738-a1b5-c868347ed91c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.136.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:87:9f:f8:9c:f0:99:eb:be:e9:61:c2:1c:f7:dd:08:83:80:
98:6a:90:93:98:28:1b:ee:da:06:de:f6:bc:1e:b4:58:0d:de:
d6:0b:7e:a0:bf:49:a4:f4:8f:7b:86:86:7d:55:d0:39:e8:37:
d6:67:10:7e:80:bd:88:6f:97:48:0f:30:22:fe:78:99:8d:e6:
d2:b0:ff:c3:7e:4b:91:5a:0c:c1:2d:1a:f1:3b:40:66:22:48:
91:b5:83:be:cc:14:f3:fe:39:7f:cd:c6:1a:c8:dd:c8:20:68:
f4:b7:a2:b5:8d:7e:0c:50:6e:6f:1b:d6:dd:e2:10:69:52:55:
85:f3:de:6c:5b:f4:78:2e:50:11:70:61:ec:d7:29:66:e4:d3:
24:14:a9:d0:0b:10:9c:d8:a0:c6:6b:3d:01:a0:ad:d0:1e:d0:
99:71:df:9e:08:cf:0a:a1:6b:75:bb:e9:b1:59:25:75:85:e7:
40:07:1d:30:6a:de:1a:fd:65:3a:1b:42:a3:8a:b4:72:ec:88:
84:dd:cf:72:74:d9:f6:cf:82:bf:10:1e:30:d2:2f:cb:eb:74:
a3:51:f1:39:b2:2a:dd:91:ea:b7:19:c7:8a:04:73:eb:ed:bc:
34:5e:c5:97:ee:b5:9d:63:f6:42:b6:57:5e:87:04:73:d0:2b:
1b:30:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:19:35 2025 by rpki-client