Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa
File: 956cee3a-4407-3b22-a099-0422e4180296.roa (raw, json)
Hash identifier: d1QCVYE/cfP2FS8iZbsEvqEtkiwbcsI6Ub3+yE+ebXo=
Subject key identifier: C6:E9:A2:C1:16:4A:ED:D0:B7:0D:6A:AB:AD:7A:07:81:55:F7:97:C2
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848A99625B2C783CB050404E600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 25668
IP address blocks: 207.194.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:25:b2:c7:83:cb:05:04:04:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=25cdb573-bff6-4db5-853e-56b09225873c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:28:21:59:3a:15:e3:85:94:e4:95:c7:01:
63:ae:46:5b:f1:49:65:09:3c:17:3c:0d:a5:37:b6:
20:39:ce:aa:8e:b8:d6:d3:be:6e:3b:58:be:4b:40:
05:a2:14:a6:c8:cc:74:68:85:fe:41:29:2c:a8:99:
97:bc:ee:a9:e5:57:10:7e:6f:2e:43:58:da:37:54:
03:29:71:c6:34:6e:17:db:ee:41:24:bb:2c:b7:cf:
42:85:3c:f6:9f:5e:72:38:b8:42:df:7c:12:32:d0:
e2:32:3c:61:57:e7:b4:e9:31:6a:34:4b:c9:22:91:
e6:c8:58:2c:52:12:7b:78:75:ed:31:bb:76:eb:46:
f8:c7:60:36:82:55:2e:c4:ee:e0:2c:ed:40:48:86:
bb:35:96:b1:6a:c3:90:17:c5:02:c8:50:be:b0:0b:
2e:8d:76:a1:b0:56:e9:8f:15:a3:85:0e:3f:75:6d:
25:8e:e9:a2:95:32:9b:c8:17:da:f3:46:72:51:99:
4f:e3:de:68:af:43:70:17:ae:b0:58:98:51:4c:72:
53:77:11:9d:b6:2e:52:c2:20:6e:6c:2d:b2:da:ed:
a7:ce:fb:36:a9:66:9c:9e:1d:c0:d9:f3:9d:02:ad:
0f:9b:ae:a9:bc:5b:e3:63:b4:67:32:53:f6:01:85:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:A2:C1:16:4A:ED:D0:B7:0D:6A:AB:AD:7A:07:81:55:F7:97:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/956cee3a-4407-3b22-a099-0422e4180296.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.194.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:48:3a:d0:a4:20:dc:e5:08:66:9e:c1:ec:47:60:44:f3:d9:
49:2c:d0:62:b4:70:88:27:e2:ec:18:a4:d4:d9:14:85:e5:fb:
6d:83:42:2c:5e:bd:5f:98:4f:4d:04:71:71:d9:f9:1d:0e:6f:
9f:bc:1f:ad:f4:21:28:6c:8e:0a:c0:39:eb:a4:9d:a6:57:bf:
0b:6c:31:e4:0b:a6:7f:78:26:54:95:95:9a:1d:45:7f:d8:06:
e9:03:ac:b5:53:94:c1:e5:10:8b:59:d8:ec:47:6c:56:72:5a:
5b:60:bf:4e:9e:31:b4:32:16:e9:4d:ec:4e:f8:5a:5d:9f:59:
e5:fa:66:eb:cd:d6:e0:5d:34:0e:40:95:fa:1a:b6:fa:52:8d:
c5:90:ab:98:52:9e:1c:9f:b5:27:a0:45:54:af:24:2e:74:18:
40:fc:83:24:d4:4d:cb:6f:65:d4:ed:be:f4:85:22:4c:49:81:
4e:03:54:9b:7b:b0:34:28:ed:ac:79:86:0c:06:9f:d9:9d:5f:
2d:c8:57:c8:dc:7b:8a:88:96:95:7a:49:a1:bb:21:76:78:87:
b3:33:76:20:06:54:6d:6d:27:80:95:5e:d5:1f:fc:9b:02:99:
f8:29:20:ca:a1:6f:50:c7:27:35:dc:ea:59:32:ce:81:7a:29:
fe:9c:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:17 2025 by rpki-client