Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa
File: a9b294af-ddbd-365a-bb3f-75c215c307a2.roa (raw, json)
Hash identifier: IWoDCsZA6zJEBz8sm/jzFJ3bMaxtZ8plH0l6qi97eOo=
Subject key identifier: 51:73:9F:9C:33:5D:BD:81:31:09:AE:15:C8:A7:05:EC:91:7D:D5:54
Certificate issuer: /CN=c3a9f614-c620-42e4-acad-b328d6a97099
Certificate serial: 010D0C9F43285848ADC60750C664734577558B40
Authority key identifier: CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 207.188.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:07:50:c6:64:73:45:77:55:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a9f614-c620-42e4-acad-b328d6a97099
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=35b2c515-442c-43ad-b96d-07280a0be704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:82:78:ee:c8:c8:b9:a3:33:6b:21:3e:fd:
b3:09:23:33:d1:ac:4a:b5:bc:8b:b1:dc:ca:d1:83:
bf:50:98:e6:4d:12:f2:5f:61:d6:b9:e3:1f:df:91:
40:6d:26:79:13:59:4a:ea:6c:b6:43:45:2e:9a:5b:
8b:70:28:9a:4b:6f:cc:11:b0:2a:c6:f6:e8:3c:04:
d9:42:00:dd:0f:04:f9:4f:80:f2:d2:30:0d:06:fa:
5d:af:30:70:d5:a5:4e:96:f6:64:03:82:c3:77:70:
55:20:2a:2b:2e:98:5e:dc:5e:a5:3e:cd:84:ef:9f:
41:51:91:ab:fd:0d:be:b7:34:2d:48:ad:02:c7:b3:
f0:e1:05:c3:60:eb:ad:7d:e4:06:a9:fc:86:4c:32:
3a:40:58:9c:a5:ea:71:c5:0a:83:06:28:8e:3a:66:
bb:11:61:1d:1e:86:10:55:03:38:b4:ff:e5:72:88:
08:f8:04:27:92:1d:ad:52:f2:fa:6c:e6:5c:01:1f:
f0:a9:fa:d1:cd:26:5d:39:16:7b:1d:2b:10:b5:4c:
90:35:0a:da:4e:16:f2:b1:8b:17:45:ec:5d:44:06:
16:7b:4e:a9:e8:5e:9d:0b:3d:09:8b:a7:e5:67:0b:
ff:d0:34:78:b9:6d:4e:8e:e8:e9:1d:e1:b0:60:20:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:9F:9C:33:5D:BD:81:31:09:AE:15:C8:A7:05:EC:91:7D:D5:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl
X509v3 Authority Key Identifier:
keyid:CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer
sbgp-ipAddrBlock: critical
IPv4:
207.188.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:45:e4:66:34:80:b8:17:1e:32:97:ae:48:6a:21:5a:3f:a0:
8c:b7:16:97:4d:8c:0d:45:26:f3:9a:57:9d:ce:0d:2d:4f:df:
ff:82:ae:c1:60:16:48:71:0e:23:b9:f6:66:4d:8f:ab:96:69:
b9:9d:54:af:2d:84:9a:10:5d:90:d4:bc:19:5e:75:1b:78:0a:
36:07:74:9c:cf:b3:bf:d9:dd:96:4a:ee:7f:ce:1f:04:ee:92:
0c:50:4e:67:60:d2:73:3d:95:2e:8d:20:db:96:18:0e:bc:63:
a5:3e:a4:45:d5:86:9a:50:92:3e:f4:f0:30:40:09:14:aa:5f:
ba:34:cf:c2:3c:2a:1e:8f:70:0d:95:13:35:60:d8:6a:cd:08:
88:52:f1:b5:3e:6d:84:1b:16:10:a3:88:d3:68:21:d5:1e:a7:
0f:eb:27:fd:8c:40:2c:bc:b8:5f:c8:fb:78:88:1e:de:67:67:
ee:d6:a2:55:7e:3b:9a:51:43:d0:92:1a:f0:3a:da:e7:8c:4d:
0a:5e:01:46:9e:86:98:df:64:5e:7d:a2:0e:fb:a4:42:fc:cc:
cd:fb:f6:bd:f8:df:09:ea:35:3c:28:d1:e8:e0:1e:b3:01:c5:
bf:62:5a:23:00:f6:26:17:2e:cc:cf:52:b1:94:2b:6f:7b:d4:
8a:d5:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:27 2025 by rpki-client