Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0505ed-ca13-371b-a655-7b8b073cc777.roa
File: 9d0505ed-ca13-371b-a655-7b8b073cc777.roa (raw, json)
Hash identifier: JUIckSJOn49sJbcnrVDE3By4mUBfzTanNX6D8/wt/fw=
Subject key identifier: 45:41:6B:BA:DE:BF:2B:56:F7:BE:0F:E3:85:16:D5:50:9B:EC:82:80
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848ADC60B4E1C80A270FD000180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0505ed-ca13-371b-a655-7b8b073cc777.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 15247
IP address blocks: 207.194.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:0b:4e:1c:80:a2:70:fd:00:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=9c4ecf36-3f0b-4905-8dfd-95c882dce117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:a3:6c:f7:af:73:e3:15:77:cf:50:3a:20:
d7:85:17:13:e7:9c:3b:fd:7e:1f:51:e2:03:1d:19:
af:ca:12:09:70:4e:85:8e:d0:fe:82:af:d3:13:0e:
64:4b:ab:53:dd:08:e9:4c:41:64:9a:d0:e1:d8:a0:
07:1a:30:96:fd:19:d9:e3:d7:6d:8b:16:33:e3:43:
90:43:86:6c:e9:47:ab:23:bf:b6:ee:2c:29:59:03:
eb:c6:28:bc:6e:5a:80:e3:8c:a2:3b:f0:29:9b:e8:
dd:d0:5e:1c:fa:87:db:46:dd:c3:db:96:c3:9e:cd:
66:4a:f4:db:db:15:9b:2b:a7:c2:3b:a0:95:f3:44:
f6:fc:3b:21:bf:39:05:bd:fc:5a:88:8b:c6:8d:f0:
98:b2:78:1f:c5:6a:57:12:4c:3d:cf:f2:c8:85:8d:
9d:ac:29:0d:37:4d:69:9e:15:d2:b9:5d:3b:76:c2:
d7:60:2d:fd:6a:96:da:ff:0e:f0:a6:21:ae:10:60:
74:51:9b:ff:02:a6:b3:86:8e:3e:95:62:ce:d2:18:
4b:a8:2b:1b:c9:2a:8a:ab:27:7f:1d:32:6d:29:25:
5f:9c:c3:1e:45:62:8f:7e:73:55:98:b0:48:6c:ad:
43:92:f8:79:e3:a4:91:87:50:67:84:54:61:52:e7:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:41:6B:BA:DE:BF:2B:56:F7:BE:0F:E3:85:16:D5:50:9B:EC:82:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0505ed-ca13-371b-a655-7b8b073cc777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.194.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:7f:18:40:9b:f6:64:5a:2c:57:ca:8a:1a:bf:73:93:a3:dc:
e3:87:ef:a5:46:21:eb:ec:84:1d:96:b9:8b:7a:36:64:49:71:
8c:66:c0:a6:1a:64:fa:75:21:0b:f5:f1:09:37:35:67:74:fa:
cd:e5:80:14:e9:1b:41:87:18:4a:74:e1:6e:8d:ba:81:32:a1:
e7:e6:57:80:83:ce:dd:df:c9:35:43:16:94:0b:22:d0:cd:f9:
76:0e:e2:c1:b1:a8:db:6e:2c:b3:a9:03:cd:0e:70:31:b7:d9:
cc:1c:1a:32:47:37:e2:c8:9c:35:91:07:b2:fc:1b:72:3d:1b:
80:16:ec:02:1c:88:bd:4e:8e:be:7d:65:0b:e9:46:73:39:be:
0b:1a:5c:e5:f9:0d:a5:cd:43:01:b9:51:c8:25:fe:9a:3a:04:
22:8c:e1:61:b4:47:c6:2d:61:97:b9:7f:24:c9:74:d2:87:c9:
0a:b9:d2:e1:d1:b4:eb:85:58:00:2b:19:a9:75:a2:e5:32:d0:
61:fc:cd:49:4c:bc:1b:15:7b:23:49:a1:62:22:34:81:18:eb:
04:89:92:5c:e1:35:e7:35:4b:4b:35:0d:cd:4b:51:9c:9e:8b:
ad:fe:26:d4:68:d3:24:6c:4c:51:ba:cb:27:98:fc:81:7e:6f:
b2:c3:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:38 2025 by rpki-client