Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa
File: 42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa (raw, json)
Hash identifier: UW6RNYWJ9+BKyWezp77AxzIQvdIbH8fM/UYbF+d2slA=
Subject key identifier: 95:F7:4F:B2:BD:47:15:5D:1C:58:82:BF:76:45:DC:98:D4:FA:13:E0
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584898D60A4F7AE86C7419ACE000
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 13536
IP address blocks: 207.136.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:0a:4f:7a:e8:6c:74:19:ac:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=3fce7db6-a433-47c6-905c-eb928fda405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:a1:4a:90:93:72:73:03:56:79:3e:3f:b1:
fe:49:5b:75:fe:66:0c:e3:4a:2b:83:4a:7d:9c:f8:
dc:44:62:32:c2:5c:af:a7:b2:cc:06:72:e6:cf:fb:
25:f0:64:2b:91:da:f2:c4:c4:00:e6:34:e1:f9:f5:
6b:cc:b8:c0:da:4f:d5:6c:59:57:14:b3:0d:5a:65:
ef:e5:ac:7b:69:66:8c:59:5c:1e:f8:d3:7c:cf:89:
c3:1e:8f:37:8f:8f:84:63:c9:8c:0c:29:da:c9:8d:
25:57:09:bc:88:cb:23:e0:61:ee:10:ce:55:b1:d2:
4d:a4:83:9d:78:58:48:f0:ca:b7:81:ff:25:66:98:
fb:c2:ec:9c:2d:a5:89:80:53:63:ff:95:f9:f3:ac:
85:6f:5d:68:b2:96:78:be:9e:21:02:63:29:94:77:
d9:7b:fb:c9:bd:2b:26:4b:7a:0d:ce:99:34:d7:a0:
6e:e4:0b:97:f0:d3:9e:7d:c3:00:e5:06:1e:60:5c:
32:91:75:f8:60:0d:2b:05:0f:d6:25:0a:ca:8b:d3:
3e:f4:13:51:34:d0:e2:f2:46:0f:63:d2:c4:cf:e8:
09:47:bd:72:18:47:9b:4e:d2:48:70:ae:95:0d:3b:
0d:c9:ec:58:b6:34:10:0f:ac:7b:71:4d:25:62:22:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F7:4F:B2:BD:47:15:5D:1C:58:82:BF:76:45:DC:98:D4:FA:13:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/42abb8fe-6b4f-30e9-a73a-88d6247422fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.136.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:0c:e6:52:d7:32:cc:ac:43:40:0b:93:b1:56:1f:66:ad:36:
3a:5c:0c:d6:dc:2f:e0:e9:63:d1:7b:a7:6b:e4:f1:02:d8:f7:
84:f7:3c:08:25:9e:82:6c:4b:78:c4:2d:3b:f1:15:8a:93:6a:
87:ee:59:a9:6d:a7:10:73:06:d4:df:28:18:39:85:8d:ee:e4:
ca:40:f6:9b:39:37:66:6b:6f:47:c1:aa:75:8d:dd:9a:b9:8b:
29:a2:ec:35:80:c7:8e:91:68:66:cf:2b:6e:87:b4:58:e2:a8:
92:fd:7d:91:00:4f:38:2c:44:ff:6f:cc:6d:15:57:92:bb:d9:
80:51:68:cb:c8:02:5f:3f:9d:62:43:92:77:c0:2c:7f:8d:f0:
72:17:38:28:fa:d6:42:ef:66:92:9c:26:0c:34:74:7b:f7:04:
6f:db:9d:c2:d6:04:65:bb:84:2b:ee:65:a9:f2:cf:e0:25:40:
8e:0f:27:65:6d:bb:94:22:7b:5c:98:36:1b:ca:91:76:ad:c9:
67:b0:1c:9f:00:04:bf:be:43:81:72:97:d7:7d:c2:7b:27:5c:
3d:c2:35:2a:ba:39:45:64:19:33:ce:df:0e:54:21:a7:41:d7:
99:ba:e5:a0:f0:71:da:e9:ee:98:46:e8:0d:2d:03:75:4a:76:
13:c7:c4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:20 2025 by rpki-client