Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c987ed1e-5acb-3914-a6d6-c2e1d5bd595e.roa
File: c987ed1e-5acb-3914-a6d6-c2e1d5bd595e.roa (raw, json)
Hash identifier: 7vtxZDG8t38Gt710b956xAHsT+3lRRIbMK0wKfM2dds=
Subject key identifier: 59:7B:6F:02:C4:26:E4:7A:2A:33:E0:B5:F1:4F:B0:EB:73:5F:8E:C0
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F432858417736989BE27FF8423AA90900
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c987ed1e-5acb-3914-a6d6-c2e1d5bd595e.roa
Signing time: Wed 05 Apr 2023 12:00:00 +0000
ROA not before: Wed 05 Apr 2023 12:00:00 +0000
ROA not after: Wed 30 Apr 2025 04:00:00 +0000
asID: 174
IP address blocks: 207.223.182.0/24 maxlen: 24
207.223.183.0/24 maxlen: 24
207.223.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:77:36:98:9b:e2:7f:f8:42:3a:a9:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Apr 5 12:00:00 2023 GMT
Not After : Apr 30 04:00:00 2025 GMT
Subject: CN=0beee050-b730-4612-a78d-6ef789383dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:ec:09:c3:0e:0d:ff:5a:22:11:ef:23:2b:
e0:48:67:9f:c8:0f:13:9f:4c:c4:9d:76:7c:5c:90:
a0:dd:f5:65:1e:ed:69:5f:20:a2:1c:1b:d9:a9:26:
27:54:e4:c0:17:01:3a:42:84:f0:22:a3:0a:65:e0:
9a:22:c3:d4:89:0a:02:4f:8b:19:13:d0:78:7e:b2:
13:52:e2:cd:04:60:dd:40:14:fa:eb:11:80:88:fd:
26:31:47:30:70:36:60:30:0c:c7:71:e7:4e:0b:3c:
6f:1a:cd:52:f3:f4:4b:6d:90:ad:93:ea:ea:d2:5d:
b7:7d:50:de:41:f9:5a:27:3e:e1:5f:7c:3f:e6:c5:
a5:d5:5b:1e:08:c4:87:ac:f4:ec:d0:70:f6:5a:bb:
11:4a:8b:64:0b:21:b8:30:4c:91:51:d5:42:01:35:
6c:99:44:aa:4e:f5:70:6b:a5:92:6c:ad:2d:50:34:
80:44:ca:2b:ce:2d:da:e3:1b:42:b0:06:53:74:2f:
fc:18:c4:89:20:9c:3a:c4:e1:51:51:fa:d3:e4:34:
71:54:aa:42:7d:d2:99:8c:4e:4a:00:a1:1c:23:ab:
ce:d6:c4:87:08:b9:9e:d4:79:4a:bd:b8:8b:99:59:
0e:78:df:24:e3:de:b8:6c:46:b4:a3:a4:12:18:34:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7B:6F:02:C4:26:E4:7A:2A:33:E0:B5:F1:4F:B0:EB:73:5F:8E:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/c987ed1e-5acb-3914-a6d6-c2e1d5bd595e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv4:
207.223.182.0-207.223.184.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:10:bf:ce:48:16:8c:09:68:42:db:30:7d:d6:3e:a0:6c:77:
89:84:a2:73:68:3d:c4:5a:cb:0f:6b:ed:5a:de:81:38:ef:6a:
ff:29:57:2d:e2:97:b5:f8:7a:00:ea:9d:ba:84:73:3b:ab:42:
02:9d:08:98:88:4f:d0:63:91:af:64:f5:62:4a:36:b3:b3:c5:
c9:b2:2d:c6:53:70:7c:b6:37:b2:ab:30:a4:58:97:5d:3f:67:
37:3d:e7:19:1a:bc:b9:c5:a5:d5:79:4f:63:96:66:2c:07:c3:
55:34:09:50:18:6f:e6:77:d5:72:3f:51:5a:10:20:c6:fd:bf:
8e:25:45:dc:50:20:f4:3a:a3:e2:b9:5f:8a:bf:fa:5e:73:40:
aa:ea:eb:d8:f3:9d:0c:8d:3b:03:c7:c7:4e:3b:c7:a4:43:14:
f4:44:d0:6d:ba:c9:4b:01:c8:70:e1:a6:e0:41:a7:e7:74:80:
1d:06:b0:c8:65:67:5f:e1:10:60:5e:33:0b:70:8a:a3:dc:3e:
e9:8f:a7:39:bc:b1:ca:a3:7d:5e:ba:07:83:fa:a2:68:e6:e8:
db:6c:af:42:8c:51:dd:b4:73:0c:53:65:80:00:ac:d0:b3:75:
71:4c:cb:4d:29:15:72:2f:87:24:91:24:90:a1:46:36:90:36:
a2:c5:b7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:44 2025 by rpki-client