Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a4c4834-cf8a-32d7-b594-07e8357b5836.roa
File: 0a4c4834-cf8a-32d7-b594-07e8357b5836.roa (raw, json)
Hash identifier: Rnoq7jegHxfWHqjJJpV00+TbbbLzayBSmR0hZpOY9zs=
Subject key identifier: D2:58:D2:BA:43:FB:AB:14:BB:6C:0A:75:D4:C7:C3:89:57:37:0C:62
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848B626176DCCF217A8A11DC380
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a4c4834-cf8a-32d7-b594-07e8357b5836.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 852
IP address blocks: 207.194.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:17:6d:cc:f2:17:a8:a1:1d:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=9c8b5406-a940-4dfd-9bc1-5ef5fc52836c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:d5:0a:7c:c2:b5:2c:01:3c:aa:d7:05:0f:
63:47:37:00:ea:1f:d8:27:4d:f6:1d:cd:e9:72:f3:
7f:73:e2:4f:15:ea:bf:26:1f:ed:30:42:ea:da:c6:
89:67:a0:5f:ca:7c:4b:9c:e1:12:85:36:d2:ce:28:
d7:81:4e:ca:73:fb:fa:09:4b:ba:ac:43:7b:65:ad:
0c:c0:c1:a8:91:eb:0e:94:d2:be:b4:f4:00:7e:f2:
ee:4e:70:44:74:73:77:ac:d4:54:54:3a:52:89:eb:
31:20:ac:62:85:41:a2:45:11:6c:c1:d7:a5:86:03:
9c:85:ab:79:57:21:f1:7a:50:45:aa:ba:04:72:25:
b3:27:d5:b2:8e:c2:bb:15:74:df:77:25:61:80:c4:
29:79:15:f8:03:49:99:6e:d9:81:9d:30:32:d2:85:
c0:5f:5c:91:47:c7:a4:ec:44:a8:a0:e1:83:8d:04:
71:96:39:03:4d:8b:4d:ce:00:dd:f4:94:12:7e:d8:
c8:8b:06:f0:cf:77:ff:da:48:e5:21:32:e5:0d:47:
27:e0:77:d7:63:81:2a:8a:0c:c8:b3:2b:ab:99:66:
42:63:88:68:f5:ce:ae:22:e4:6a:09:51:91:0b:ea:
23:97:96:fa:bb:5b:0e:05:56:b3:93:07:f2:e2:32:
b6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:58:D2:BA:43:FB:AB:14:BB:6C:0A:75:D4:C7:C3:89:57:37:0C:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0a4c4834-cf8a-32d7-b594-07e8357b5836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.194.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:0e:87:b7:0c:03:35:65:62:64:7f:06:b2:93:95:81:68:a2:
be:22:44:a0:c5:df:32:05:ef:5c:8f:8d:55:72:05:19:a4:66:
00:7b:fe:36:85:25:1e:92:22:08:f6:ad:93:f3:fb:b6:46:9e:
8b:8a:22:25:18:4d:a7:e8:18:0a:c9:e9:9f:ec:a4:9f:f6:fd:
74:cb:ca:57:49:79:ed:f9:33:34:58:8c:ce:53:c1:fd:53:d2:
a6:fa:58:f1:5c:46:4a:b6:74:b5:c2:7d:1c:d7:e0:9f:b4:b0:
ab:ef:05:67:23:c8:0e:28:28:b8:45:5c:e1:8f:c3:8b:ce:ae:
1a:0e:2d:3f:4c:e7:d1:ee:63:c4:33:e3:27:22:5e:83:0e:eb:
e1:03:cd:dc:db:c0:30:20:fc:bf:9e:5a:a2:a4:42:f9:8a:99:
e4:9a:fd:12:20:87:05:65:82:e7:9b:38:06:cb:c5:39:9f:de:
5a:8a:c9:bb:2d:a3:65:bc:40:11:e5:be:b7:ce:06:cd:38:b4:
28:c2:24:f0:66:95:dc:af:0d:56:20:92:b5:c1:87:2b:e3:e0:
5b:27:b3:9e:df:5e:54:54:dd:75:7e:31:e3:c7:d8:c2:b3:59:
37:a4:16:66:ce:ed:dc:df:57:47:4c:1a:8b:bd:c9:61:63:3b:
d6:de:99:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:20 2025 by rpki-client