Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
File: d096047a-9fa5-3441-a949-ac54a874b69a.roa (raw, json)
Hash identifier: CKFSFQwP+Hmw2XbsG5zLyS1pIxmEGzIPlIaiTTuTIrQ=
Subject key identifier: 58:7C:D0:89:D0:2A:12:5A:7E:96:BF:13:06:5D:D2:7D:F2:BE:4B:CC
Certificate issuer: /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial: 010D0C9F4328584905B6AF693909613170DD1170
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 27316
IP address blocks: 207.165.229.0/24 maxlen: 24
207.165.238.0/23 maxlen: 24
209.56.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:af:69:39:09:61:31:70:dd:11:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=212aedca-5650-4e1c-8d09-47741a8fd216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:50:2f:e5:0a:1b:0d:b3:9c:4b:e2:73:03:
9a:10:17:16:5e:bc:7a:95:db:d6:a4:bc:7d:ee:de:
13:3c:9a:ab:c7:01:21:51:47:50:74:b5:f4:b6:c2:
07:4f:52:4f:16:bb:c0:51:f1:65:6b:ba:82:2e:2f:
88:64:72:db:de:33:01:8e:32:09:6d:37:66:2e:29:
c5:fb:9c:2f:50:1d:b9:80:c2:ab:ae:23:7b:4d:0c:
63:29:39:68:58:83:2b:80:d2:92:23:25:46:d9:7a:
a6:18:64:0e:6e:17:01:12:28:70:43:48:01:d6:71:
42:5d:45:79:ca:43:6a:41:bb:23:f3:fa:26:92:17:
d1:ce:bd:2d:0d:01:a6:68:7f:f5:cc:82:ab:24:39:
56:e6:16:1e:87:6c:96:36:8d:92:34:2a:0a:2e:2f:
57:c2:2a:4a:aa:f2:42:18:82:03:05:92:86:c8:68:
c2:7f:08:c6:a6:bc:dd:bb:a4:11:48:b0:84:d6:59:
49:f2:d4:1e:5f:8c:ea:26:b7:1a:ad:a5:6b:f0:38:
db:52:f0:7f:0a:47:50:f8:75:75:4c:94:4a:11:ee:
2c:2d:63:19:54:90:3c:60:23:c6:e1:da:08:a1:31:
b2:28:97:5a:a2:3c:e9:13:2c:9b:f7:26:33:37:6f:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7C:D0:89:D0:2A:12:5A:7E:96:BF:13:06:5D:D2:7D:F2:BE:4B:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
X509v3 Authority Key Identifier:
keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
sbgp-ipAddrBlock: critical
IPv4:
207.165.229.0/24
207.165.238.0/23
209.56.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:64:17:59:89:79:e4:cb:f3:fe:74:75:a7:8a:01:ff:63:db:
60:57:d8:6d:fd:1d:3a:c4:2e:bc:a9:98:c1:b0:76:7e:7d:af:
66:69:3b:0b:61:11:ff:99:43:40:13:61:40:af:ae:c8:11:32:
89:4a:1a:b9:e0:fb:32:df:d9:e8:f7:85:f4:6e:a3:ba:40:81:
8d:9e:29:1d:c5:cc:19:ce:b5:9c:01:13:08:4d:17:be:9c:f8:
3e:45:ec:d9:32:64:f8:a8:bb:94:32:07:c0:a2:79:8c:0c:74:
f4:ab:66:2a:41:62:50:30:57:ab:ad:16:59:a4:fb:b5:40:a6:
dc:1a:7a:5b:42:95:1b:31:6a:c0:7b:30:b1:3a:6e:aa:98:8f:
09:8a:a1:62:69:c7:1d:cc:89:ac:e6:75:fa:a6:f5:c9:26:fd:
45:d4:b7:fb:c7:aa:84:87:3c:68:02:c3:3e:cb:44:61:a5:54:
27:a7:08:14:dd:40:4d:e6:17:81:c4:40:35:24:41:7a:0c:28:
a3:be:0f:ef:72:3a:e2:72:af:7e:d7:b3:4d:f4:66:90:aa:8d:
2c:52:1a:44:ee:0f:b8:06:d6:09:f0:69:b4:32:08:8f:91:d2:
e4:c4:95:08:e5:d6:a3:21:e0:8a:bd:d7:8a:5a:cb:44:f2:3c:
f8:ac:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:20 2025 by rpki-client