Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/32861bd5-72c3-3e4d-b5b2-39b32ee6bfe0.roa
File: 32861bd5-72c3-3e4d-b5b2-39b32ee6bfe0.roa (raw, json)
Hash identifier: gRXZCvxF+3ilCsRzTnRd3Exc4SGcqcWVuvIIcxPkBPc=
Subject key identifier: 85:6E:11:EF:14:C2:AC:B8:18:38:96:D7:B0:E8:20:1F:55:54:EA:84
Certificate issuer: /CN=7d07cbba-57bd-49fa-a417-c19f23af1ce3
Certificate serial: 010D0C9F43285848D4DB963832881518B02ACF80
Authority key identifier: 1E:4F:1F:6C:A5:3F:41:04:8F:0D:8A:43:64:DB:66:79:09:8F:6B:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/32861bd5-72c3-3e4d-b5b2-39b32ee6bfe0.roa
Signing time: Mon 10 Feb 2025 02:00:38 +0000
ROA not before: Mon 10 Feb 2025 02:00:38 +0000
ROA not after: Sun 11 May 2025 01:00:38 +0000
asID: 210
IP address blocks: 137.190.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d4:db:96:38:32:88:15:18:b0:2a:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d07cbba-57bd-49fa-a417-c19f23af1ce3
Validity
Not Before: Feb 10 02:00:38 2025 GMT
Not After : May 11 01:00:38 2025 GMT
Subject: CN=7e200712-205f-4985-8c5d-95915000145f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:62:a0:65:6f:d7:16:84:45:47:e5:d3:f3:
15:a5:61:62:cc:a9:fa:8d:2d:40:c6:f6:05:9e:f6:
a2:5f:7d:1b:26:51:33:7d:ec:b6:31:25:f2:44:9b:
37:07:f8:53:c4:92:5e:3d:26:cb:2c:fe:55:5d:95:
52:b5:79:b9:67:48:b0:5e:97:73:62:fb:07:ad:96:
d4:89:c5:84:c0:90:7e:db:15:8b:dc:cf:ef:fe:88:
6f:ba:81:56:82:b2:b8:0b:47:5e:36:80:20:17:76:
0c:3d:0e:bf:b6:bc:b2:86:64:89:41:29:a7:f5:99:
7d:a6:6c:25:ea:72:80:0a:97:f9:6a:28:bc:e8:e8:
7c:53:ca:a5:7f:90:e7:b4:63:ba:1f:e9:83:fb:0a:
23:8e:cb:48:48:25:19:af:4b:83:ab:4f:11:33:3d:
85:9d:2c:dd:24:58:7a:6f:74:7c:ed:9c:93:3a:73:
70:c8:d0:b6:ae:a7:3c:6f:c2:8a:6e:e1:61:2a:0a:
57:bd:29:4a:bd:87:d4:57:a8:77:98:41:9e:69:4d:
dc:fc:12:06:0f:a7:3d:82:63:1b:33:88:ef:62:1a:
1f:a9:16:4c:11:08:5d:20:8f:ab:fc:80:b9:ee:29:
5e:61:d7:51:d5:e5:9a:88:7b:44:bf:f0:22:58:e7:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:11:EF:14:C2:AC:B8:18:38:96:D7:B0:E8:20:1F:55:54:EA:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/32861bd5-72c3-3e4d-b5b2-39b32ee6bfe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/7d07cbba-57bd-49fa-a417-c19f23af1ce3.crl
X509v3 Authority Key Identifier:
keyid:1E:4F:1F:6C:A5:3F:41:04:8F:0D:8A:43:64:DB:66:79:09:8F:6B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3.cer
sbgp-ipAddrBlock: critical
IPv4:
137.190.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:35:62:af:eb:02:37:5f:18:2a:60:51:8b:12:33:f8:e8:71:
12:a6:3e:91:2c:f5:4d:c3:ed:ca:86:26:9a:cb:87:6a:20:89:
ea:56:ab:2d:96:f2:69:f5:dd:2d:cc:20:51:2f:39:3a:04:04:
a5:7a:2e:21:e6:87:1b:85:b6:cd:90:c2:ec:d5:14:8c:d9:0d:
d4:89:76:6f:55:f7:ec:3c:17:80:d4:90:90:84:18:96:10:2f:
30:21:a4:d8:66:fb:1b:c0:4c:a2:60:0d:d4:ec:bf:67:37:30:
1e:d9:25:bd:ef:14:e7:7a:10:08:53:cf:36:99:81:1e:de:8e:
d3:54:b0:72:da:17:5b:95:89:5e:da:58:d4:97:ed:cd:d4:a0:
1b:e6:ab:0f:3c:73:45:69:f0:0b:1e:5c:ed:db:ae:9c:99:56:
15:b7:41:92:89:8a:83:df:ee:c9:42:dd:a4:98:86:dd:c2:a0:
f1:6e:2a:ed:4d:5f:a7:a0:22:a6:8a:fe:14:b4:9f:84:e6:7a:
79:b6:6a:fe:f9:46:49:0a:3f:11:e0:b4:b7:dd:6e:8d:ca:c3:
98:4c:a2:b0:14:68:70:42:c1:1d:b8:60:fe:49:57:45:9a:a8:
9a:fe:ae:c9:ed:72:31:78:49:8e:9b:77:3d:cb:d1:4d:d9:d3:
6e:ee:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:01 2025 by rpki-client