Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa
File: 79d8abae-3316-3d89-a2d0-f12238f8acbe.roa (raw, json)
Hash identifier: nWgkgr7sbL+hNvcZIhoIWmI4P+GgHERNTGKVipbsVM4=
Subject key identifier: 95:50:B0:14:71:4A:97:8E:F9:4D:90:D0:90:C7:06:C3:74:42:43:74
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F432858494B6413AE91EC9A26255EE800
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 25934
IP address blocks: 207.42.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:13:ae:91:ec:9a:26:25:5e:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=467f29af-76df-40fa-8d25-d40e3ee51a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:55:7e:b7:7c:4f:6f:ac:c3:ff:69:1e:dc:
56:0e:f9:ca:79:9b:a2:c4:ed:0b:f1:74:07:e2:3e:
cc:34:53:6c:02:28:24:08:91:3e:0a:af:dc:1c:a5:
66:50:17:ec:e4:1a:bd:64:04:6b:e3:68:36:f3:0d:
26:1c:51:a4:c8:48:09:22:01:55:12:d6:10:3d:3c:
00:c0:cf:2b:21:de:9a:1e:53:05:be:9f:b9:46:56:
0a:0b:6d:e8:a8:fb:ff:d1:aa:d5:dd:2a:49:ed:9f:
95:a0:84:c8:a4:90:3c:04:25:8d:c6:b9:ce:ea:c8:
f9:69:74:3c:cd:1f:c4:b9:52:da:c6:12:f1:69:62:
fd:f9:b4:9a:e3:20:f7:37:d5:c5:c0:e5:a0:93:a0:
94:57:ff:77:c6:71:33:c7:c0:d2:0b:63:c5:56:a4:
4e:b9:8b:0e:28:d2:cc:bd:1d:93:51:ab:a5:6e:d7:
f3:6d:d0:c5:01:76:c0:7d:70:f4:5c:e2:f0:73:84:
8f:c4:ad:f9:c2:4a:01:62:5c:0d:c0:7e:85:43:16:
12:4e:44:69:7c:f4:df:c0:51:1e:7e:60:61:cb:4c:
44:53:ce:fe:85:42:9a:31:05:25:0b:f1:c8:3f:87:
3a:e7:1d:7f:75:b8:d0:6e:ac:6b:9c:42:8c:1b:a8:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:B0:14:71:4A:97:8E:F9:4D:90:D0:90:C7:06:C3:74:42:43:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
207.42.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:dd:cb:5d:00:b3:a0:bb:ce:63:b3:45:9e:cf:ea:ac:b2:8c:
ad:38:ad:23:90:58:d7:ce:fb:9e:a8:fa:a0:41:1a:ae:26:64:
bd:64:3c:25:6e:a0:9f:d1:57:8d:62:dd:b1:23:08:3c:c0:ce:
9b:cb:f6:ea:d7:fc:bf:8d:cd:dd:27:be:13:88:be:e2:0f:5c:
a4:54:0a:bc:85:41:8c:2a:1d:02:09:f7:a5:5d:3d:4f:33:89:
3e:af:ee:bd:4d:a8:04:ca:d0:5f:52:07:0d:be:bd:12:05:0d:
3e:b2:ea:f7:96:21:49:ad:f0:dd:9f:1a:bc:19:28:82:99:9d:
bf:47:a4:fc:4c:dc:77:ca:89:12:96:bf:e0:00:47:ca:6f:9e:
98:8b:7f:a7:d8:a6:f6:b1:43:8d:f2:96:0c:90:ac:a8:61:78:
de:8e:cd:39:19:44:b9:8f:37:dc:ed:fe:53:2b:7d:39:dc:d0:
3d:37:5e:eb:05:d0:fb:5a:b4:65:ad:91:ca:32:a2:f8:64:a7:
a7:66:28:29:e5:76:de:33:ac:c4:b0:4a:af:9d:44:33:56:ae:
42:3a:cb:ad:9d:de:5a:3f:5b:bd:5a:bc:01:dc:6e:3f:e5:35:
bc:8c:4f:5a:8d:f3:ed:03:af:9d:c7:ce:fa:ab:8c:d2:30:fa:
01:a6:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:53:20 2025 by rpki-client