Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
File: 7c8dea26-fd51-3016-9371-cf841d680f6b.roa (raw, json)
Hash identifier: pmiy9d2fax80MUQU1GrsWCNDRR8sg01BNEoxUiBof4o=
Subject key identifier: 42:B6:76:91:5D:3D:85:DF:71:E8:96:31:F2:5B:78:D1:00:78:CD:D6
Certificate issuer: /CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Certificate serial: 010D0C9F432858489BA0A6A0034E57C04F8C1500
Authority key identifier: E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 6079
IP address blocks: 167.253.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:a6:a0:03:4e:57:c0:4f:8c:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df054b7-0dbd-410a-8a6a-10af5728e84a
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=527424c5-2d4f-45af-b309-025e49b2b300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:7c:22:c0:73:1a:80:1b:08:2c:f6:6d:ac:
02:43:6e:9e:53:94:c1:69:4f:fa:84:28:d0:ea:43:
b5:a5:ba:fe:de:79:52:22:04:62:36:26:2c:de:f8:
7a:dd:0c:3c:af:2b:a6:68:f9:ac:01:f7:83:70:ce:
88:0f:f7:b5:26:a2:03:dc:45:ec:90:8f:d8:83:69:
ad:5b:73:2b:41:c8:8e:f4:e2:85:f6:6a:b6:55:56:
11:57:4f:bf:bb:74:59:7c:c0:8c:af:cf:99:e5:68:
31:21:91:d4:00:93:ab:ed:06:91:5f:f3:32:9e:14:
1a:1e:5a:ae:ba:4f:ef:50:7e:a9:6b:2f:23:29:c8:
2d:4c:e1:33:1a:bb:5b:c0:49:04:e6:af:1b:45:6d:
96:76:1f:f6:43:a4:37:85:ba:56:26:1f:82:7c:20:
81:ec:5a:9b:b7:3a:25:79:40:5c:8d:f6:8e:da:c7:
8f:71:a3:bf:be:6c:01:65:bd:0a:8e:9e:0d:e5:76:
32:51:75:c4:7b:c8:9a:33:b9:ad:50:5a:e3:85:66:
76:33:a6:75:b0:ca:27:d5:63:42:3e:64:5e:08:0e:
0c:1c:5a:55:f0:84:84:95:73:d5:1b:3d:a1:8e:71:
7b:e4:30:75:ac:46:9e:08:d2:a9:67:bc:ac:a9:f3:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B6:76:91:5D:3D:85:DF:71:E8:96:31:F2:5B:78:D1:00:78:CD:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7c8dea26-fd51-3016-9371-cf841d680f6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a/7df054b7-0dbd-410a-8a6a-10af5728e84a.crl
X509v3 Authority Key Identifier:
keyid:E8:FC:3B:C7:AF:20:45:D6:53:17:82:CE:52:46:98:80:E5:58:80:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7df054b7-0dbd-410a-8a6a-10af5728e84a.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ff:1e:5f:02:5b:b5:82:ad:9c:b2:1c:7e:f2:2d:e9:2f:b0:
c0:37:00:67:90:41:d5:90:fb:aa:37:5a:a9:e5:a7:a5:60:73:
92:ef:25:62:e2:05:80:32:f9:03:df:3c:66:48:3b:ee:ee:f8:
0d:48:79:1b:ca:2b:5a:1a:82:ef:60:2f:65:c3:91:cd:48:a3:
a7:2b:09:04:d1:ac:66:2d:17:3b:4e:88:35:f1:f7:1b:07:a6:
7f:ed:0b:6c:a5:7d:87:80:5b:e1:84:9f:98:ee:fb:b8:ca:db:
ae:ad:4f:73:d1:4a:e3:91:f2:ea:f0:ad:47:f4:a4:40:d4:11:
01:da:87:9e:02:86:49:9c:3f:79:c4:85:65:44:df:2d:e1:79:
a0:ff:fb:df:d1:5b:84:3e:ee:07:04:9c:aa:d6:83:7f:53:bb:
50:0b:93:88:50:e1:b5:68:6d:09:fa:3d:f8:f2:c9:a8:82:b8:
f7:b4:8d:08:8e:07:a0:b8:cc:1a:cb:80:83:37:48:99:36:38:
88:07:8e:12:59:e2:ef:70:c0:c4:3f:1d:f0:51:82:bd:a3:a6:
a0:ae:aa:66:82:f9:bb:83:86:aa:25:d6:19:c2:42:dd:20:de:
bf:58:58:a4:19:8b:d1:f3:65:59:c5:02:c2:0d:88:0a:89:0e:
5d:2b:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:13 2025 by rpki-client