Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa
File: 7617a713-113a-32ec-a9f3-7445af2d9726.roa (raw, json)
Hash identifier: NtgmL4MEuHvrsZV6pCCTk7ToWLnGej6yWc0nEspZNkI=
Subject key identifier: FD:F5:7A:00:05:56:EB:3E:5F:99:22:DC:B2:60:86:C4:B8:A9:B3:30
Certificate issuer: /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial: 010D0C9F432858489BA0A6609E2AABC8E249B300
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 6079
IP address blocks: 167.253.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:a6:60:9e:2a:ab:c8:e2:49:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=5bf6707d-58bc-49bc-91c9-854c808c4958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:62:89:77:70:c1:39:b2:be:a8:f7:ae:19:
6d:71:36:c0:f5:71:c8:6f:93:eb:8e:17:a7:21:91:
e7:e6:50:ad:71:d6:41:0a:a9:5a:89:f3:31:97:33:
c2:c6:74:de:2b:d7:a1:8c:4f:1e:13:6b:68:71:bd:
6f:06:ab:40:4c:19:48:46:80:58:1a:0f:16:1a:69:
b4:e9:f7:45:8b:f0:1a:e0:41:ad:fc:08:cc:bf:3b:
bc:dc:20:e2:bd:af:cc:37:31:eb:a4:3a:f9:dc:c1:
59:e2:98:3e:5b:93:82:67:c5:a5:b4:62:0e:49:c2:
f9:0c:4c:3b:d3:3f:ae:6e:e0:9c:ff:87:41:cf:10:
df:bc:ed:75:f9:ef:c1:fd:a7:d5:ce:c1:e5:96:63:
41:a9:5a:07:1f:44:a9:0d:d4:84:d5:cd:0d:99:04:
68:07:9d:2b:02:2c:45:80:09:ac:fc:25:27:34:a0:
53:dd:a1:d5:b7:28:bb:07:e0:2d:bf:e8:7b:bf:16:
60:ba:6e:f6:ef:2a:90:8e:5b:c8:55:15:e7:b4:5e:
3d:1f:9b:9c:f4:35:f4:b0:b9:42:e8:98:c4:5b:ee:
30:55:d1:2a:cc:fa:32:14:bd:b5:56:6f:69:9b:af:
0f:9d:1b:e4:f1:26:88:36:ef:b1:85:50:2e:da:47:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F5:7A:00:05:56:EB:3E:5F:99:22:DC:B2:60:86:C4:B8:A9:B3:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7617a713-113a-32ec-a9f3-7445af2d9726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
X509v3 Authority Key Identifier:
keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:dd:c7:9f:f0:79:dd:93:fb:1e:3a:f8:94:77:2a:e1:81:c0:
eb:84:15:53:0b:ad:94:73:64:47:78:1b:b2:9e:a0:2d:5e:9c:
8c:39:f8:73:c5:58:39:4f:12:6b:59:b5:e7:1d:8a:11:58:5b:
5d:15:7a:da:ac:69:ea:4d:b3:dd:df:be:89:fc:bb:9d:f9:1f:
75:08:58:3a:77:7b:cf:e4:7d:43:20:01:07:f2:ca:f1:8e:94:
54:43:49:56:e4:35:36:2e:84:cf:8b:1b:36:3f:2b:10:fa:1d:
a5:5a:3d:72:fc:41:cf:fa:bd:bf:19:83:bc:c8:4a:e5:20:cb:
cc:b7:04:5b:99:36:e4:de:b5:36:86:47:ae:03:32:2e:63:b5:
2f:cb:8b:32:fb:a1:c8:8c:0e:aa:fe:51:2d:26:fb:f1:e8:8a:
00:3d:49:e4:9e:17:ea:c5:44:aa:b2:54:2e:d7:11:4a:2d:5f:
2d:d3:9a:d8:fa:d1:df:d5:6f:d8:49:ad:4b:fd:fd:a7:28:08:
20:cd:fb:b4:8c:c3:dd:c5:13:3e:5a:d7:37:eb:41:a8:7a:30:
0a:b1:3b:b4:48:1e:de:a6:78:99:5f:85:da:c5:13:8e:bd:46:
0f:31:93:60:5e:d4:49:56:71:4b:14:4d:fa:9c:5d:37:26:20:
2c:c9:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:19 2025 by rpki-client