Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/abbd744d-41b2-3061-ada3-50c06894699b.roa
File: abbd744d-41b2-3061-ada3-50c06894699b.roa (raw, json)
Hash identifier: XNnV6KJ2JjwFbFPak+T7qXwiS1Zt+mRuXK82dz9/M7E=
Subject key identifier: 7D:97:AD:65:20:48:95:6F:71:80:D3:4F:D5:36:F3:76:E7:F0:D7:D3
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848ADC608A056042867A957F700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/abbd744d-41b2-3061-ada3-50c06894699b.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 21723
IP address blocks: 207.34.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:08:a0:56:04:28:67:a9:57:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=58e5ae3e-105d-4947-ada7-b878fd384c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:a6:c0:65:eb:83:33:a9:ce:33:73:81:c2:
46:ba:ff:9f:ef:fc:a1:6e:d2:76:d9:a2:d8:ae:d8:
28:ef:2a:2a:d0:b5:69:5f:c1:a4:6b:1d:b3:15:f6:
21:0e:b5:aa:58:d4:6c:56:3d:1c:9e:32:e3:53:f7:
a6:79:1b:30:aa:18:bd:4e:c6:ad:dd:1c:2f:b8:d2:
7b:93:ac:94:c2:17:03:53:ad:36:87:4e:da:c6:d5:
03:e4:20:9f:fb:69:9a:c7:c6:69:45:d9:74:d5:3b:
fb:9d:91:14:5b:5a:d3:b5:14:03:7c:d3:59:0a:b0:
f9:4c:03:0d:e5:41:df:39:d9:4e:3c:8d:d4:73:b6:
40:ab:66:14:f4:35:77:14:5b:4f:7e:66:fe:f8:af:
36:7d:60:b2:a8:6a:52:5b:dd:ce:9d:a7:58:5b:22:
c1:f8:d0:ca:85:66:ed:5e:bf:94:9f:a0:82:79:45:
52:25:00:34:31:19:86:64:1f:83:ca:80:72:55:03:
11:e2:1f:26:44:03:ea:54:c0:7b:6a:3a:ad:09:6f:
52:6c:ab:7a:15:f0:11:08:02:68:ca:27:35:51:f3:
02:a0:6e:36:ee:de:f0:f5:2b:18:3f:9e:28:a7:d9:
ab:26:73:c5:2c:af:89:16:e8:1e:58:ce:61:fb:55:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:97:AD:65:20:48:95:6F:71:80:D3:4F:D5:36:F3:76:E7:F0:D7:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/abbd744d-41b2-3061-ada3-50c06894699b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
207.34.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:77:24:ad:7b:49:9c:de:05:af:7c:50:77:3a:17:99:b4:fe:
e0:a6:5a:a8:df:be:4a:58:48:75:24:30:5e:db:5e:41:05:86:
32:ec:26:e0:64:cf:22:e8:fe:4c:9f:fc:2c:39:68:25:47:45:
93:4b:2f:37:fd:43:f1:ba:4f:94:e9:f2:d3:6e:26:2e:6b:cd:
cb:1b:b6:da:33:ae:dc:6e:d2:a3:01:b0:3a:55:6d:34:27:2e:
c4:2a:69:dd:46:3c:75:c2:b1:14:44:4e:de:f1:d6:c2:d8:f8:
3c:60:6a:09:cb:36:7b:1d:b6:e6:d6:d0:e1:f3:7a:90:20:fa:
6f:2e:ed:dc:71:58:02:1f:b4:3f:66:50:75:74:65:53:68:1f:
ce:1b:62:58:5b:de:96:24:01:2f:7d:30:19:49:ce:4f:38:3a:
3a:25:fc:ef:3b:71:05:02:4b:a1:f8:4d:7d:97:6c:35:98:02:
d2:e5:6b:64:0c:cd:e3:e2:c4:c9:ad:22:30:6a:6d:44:d9:7b:
5c:6c:9e:09:37:b9:a2:37:bb:51:0b:18:63:e0:30:0c:44:e7:
5e:a9:b1:42:6a:e0:c7:59:cf:d5:38:3c:5c:66:6f:e1:f7:4d:
d3:5d:11:d1:f8:32:bd:0e:ea:f9:82:b2:c0:93:94:bf:ec:98:
bb:f2:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:26:11 2025 by rpki-client