Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
File: 9ecd159a-1f96-32de-b9d1-11893c413104.roa (raw, json)
Hash identifier: orYWCV1p7Tpl1PhCb7orwg1eVmvd6/+mzkyjLTxaPIQ=
Subject key identifier: 52:30:B4:8D:54:B7:21:A6:D7:98:E9:22:43:83:6C:ED:E7:10:3C:CB
Certificate issuer: /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial: 010D0C9F43285848DA70F7751DE29414B4A43860
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 397606
IP address blocks: 207.174.68.0/22 maxlen: 24
216.152.68.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:f7:75:1d:e2:94:14:b4:a4:38:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=56f50b87-5c10-427f-97db-01dba94b456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:78:b2:01:4a:c9:5c:91:0e:83:3e:bc:0c:4b:
bb:08:84:d8:9d:0b:33:3d:46:43:d0:e4:08:59:02:
f6:2a:50:ef:52:3d:b4:3a:8b:b2:8d:29:96:d0:0c:
e3:64:0f:d1:9c:dc:58:f1:a2:e7:e5:4e:b8:f9:07:
b3:f6:46:71:ed:db:50:13:d0:50:69:52:35:b0:95:
e7:b8:a2:69:bd:ef:42:03:0a:25:5e:0a:da:d6:18:
5b:f4:45:49:f3:81:2c:3e:de:df:99:2f:ed:a5:46:
15:c3:bd:6f:96:39:3b:a5:0c:ba:58:78:fd:af:f1:
2e:33:eb:9c:46:9e:9f:73:14:44:37:5f:c0:cb:a9:
db:54:b3:c5:ab:a4:27:01:ad:09:62:db:6c:53:b4:
c7:1a:56:39:e9:cd:e2:9b:65:ad:19:cd:9e:0c:e9:
50:27:67:22:2f:5c:82:55:19:4a:1f:41:46:49:92:
4c:2f:bb:fa:69:b4:75:0b:d7:c9:62:96:09:1d:68:
b6:32:3a:ef:2a:b3:e3:fd:10:90:a3:b2:d6:ee:98:
cb:03:8c:89:26:75:65:8a:8d:46:d6:3c:20:8e:10:
81:98:4f:65:e8:1f:72:a7:c3:1d:71:c8:e2:68:82:
f9:4d:31:40:bc:98:11:3e:24:15:ea:85:54:62:03:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:B4:8D:54:B7:21:A6:D7:98:E9:22:43:83:6C:ED:E7:10:3C:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
X509v3 Authority Key Identifier:
keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.68.0/22
216.152.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:14:2c:9d:8f:4b:18:f1:b6:88:bd:b8:56:f5:25:53:a7:0e:
0d:ea:7b:29:74:e3:bf:ba:91:55:4f:8c:cd:50:e6:3f:64:0c:
08:e8:dd:9d:60:1b:32:e1:7e:25:e5:ec:8b:24:e4:8c:42:e3:
c4:cb:51:59:cd:d2:b6:59:0f:5b:87:fd:9c:bb:56:e1:e8:95:
ca:67:62:45:2b:ad:40:48:2f:f8:97:52:6e:19:09:8c:61:6f:
b8:8f:d6:4c:93:a2:38:c6:1e:f6:ec:95:ab:ce:31:46:a7:3d:
24:81:14:28:db:eb:22:ed:b5:38:75:01:94:11:14:4c:a2:e9:
20:37:96:8b:39:a8:06:19:5a:35:71:92:15:f8:6f:2a:fa:65:
da:3a:e9:a3:76:2d:43:66:9a:2e:54:b3:f4:be:10:c4:29:32:
f6:9f:d4:ef:21:1f:fb:e3:02:9c:db:59:5d:11:0a:7e:43:e2:
ac:d1:37:23:6d:08:3c:45:a1:71:ac:7b:dd:7f:1a:e9:6d:d4:
cc:ae:b7:1c:42:e0:3f:b1:0c:e8:72:1f:da:f8:f8:ca:de:17:
f7:b3:46:a0:14:c1:84:9a:85:0b:33:05:e7:56:a9:8d:39:9a:
25:28:cc:fc:03:4b:4c:e2:15:9e:0b:2c:08:a0:3a:c0:39:9a:
ad:79:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:25 2025 by rpki-client