Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa
File: 42595bcf-6395-3a09-aa56-88a1c857f0e6.roa (raw, json)
Hash identifier: 5SSPOI8GdiOOQJI8C+lNQQ+TCoXjGoMj8SlD0p608is=
Subject key identifier: 46:50:8C:C5:35:2A:78:A2:1F:54:03:E9:76:4B:B6:11:DF:0A:8D:FA
Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial: 010D0C9F43285848EC968F995FA9EDE2FC960200
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 3807
IP address blocks: 207.196.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:8f:99:5f:a9:ed:e2:fc:96:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=d8958bb1-d266-4b77-816a-8a6491523b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:d8:e4:f1:c7:d9:02:4f:4f:77:cd:ae:fe:
ea:ac:d5:13:38:d1:2b:06:9d:18:87:c0:98:d1:39:
11:65:b6:58:a3:98:26:9f:a7:09:41:c2:70:d9:e7:
df:a4:79:9a:8b:21:f4:59:b8:6e:80:bb:23:4b:d0:
2a:1f:11:01:d8:ca:46:78:4c:64:02:55:18:24:16:
7a:18:cb:1c:9f:9c:41:b7:a4:15:ad:96:f5:b1:11:
c7:a8:5b:40:14:20:9e:c9:b0:10:42:20:e1:5c:83:
7a:e1:15:ba:3c:e4:45:e0:0e:2a:59:dd:ea:09:7e:
0b:51:1d:33:fa:09:8f:04:4d:44:f7:57:41:8e:77:
9f:1c:f8:9e:e4:7c:e7:3f:41:c5:61:05:fa:85:dc:
a2:ca:12:b7:14:60:44:fc:0d:d2:84:59:19:7e:5c:
10:bd:c8:a4:90:21:1b:91:1f:db:22:7d:a3:c0:7a:
a6:87:88:7a:a8:42:db:ab:22:5c:cb:7f:de:1a:37:
9b:e3:5b:97:97:3d:d4:b8:c9:a3:2f:6e:bf:0e:23:
86:25:53:9f:7c:44:73:9c:1c:0e:b6:98:94:56:9d:
11:db:78:7d:c8:1b:28:cb:d7:8a:0b:bb:77:8b:e8:
a4:01:d7:d4:24:e5:c3:dd:ed:46:7c:23:fa:8c:8e:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:8C:C5:35:2A:78:A2:1F:54:03:E9:76:4B:B6:11:DF:0A:8D:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/42595bcf-6395-3a09-aa56-88a1c857f0e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
X509v3 Authority Key Identifier:
keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
sbgp-ipAddrBlock: critical
IPv4:
207.196.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:2b:ab:15:61:c4:00:ad:cd:28:29:6a:1f:3c:41:80:e7:1a:
22:4f:e7:0c:d4:2a:88:02:a0:e4:08:32:32:fb:43:76:97:0d:
e2:1c:dd:49:70:73:af:fc:e1:37:41:21:2d:e4:7a:d6:0c:1a:
81:e3:87:28:5b:5a:8a:58:3e:6a:98:97:83:4e:6b:e2:aa:92:
04:2e:97:e1:5e:43:9a:ba:1a:ce:91:15:8e:9c:2c:18:b1:b2:
b7:fe:0a:fc:7d:b3:7e:c4:78:1a:2a:a6:d2:60:97:fc:f1:15:
19:ab:ce:3c:11:a8:07:78:8f:2f:2d:b3:a9:7a:f0:85:25:50:
2c:a9:fa:8d:30:bf:16:bd:70:8e:e6:a1:b2:be:68:52:7a:0b:
24:b2:7d:bb:b0:43:f6:15:c9:19:4b:e3:4d:6e:74:83:a0:e0:
a2:98:b2:6d:99:84:ba:7e:b7:4d:a2:6b:92:bf:f0:b0:62:db:
be:f4:73:1d:98:45:d3:b4:f7:32:fc:9c:d4:cd:6c:ef:4d:19:
38:ac:ad:60:de:d2:77:8f:4e:0e:9a:64:da:c1:58:d1:7f:98:
e6:7a:67:0b:cc:30:2e:c8:a9:34:34:64:d3:48:e0:db:ed:be:
bc:a3:f3:08:7f:9a:06:49:ac:e2:f2:b8:e4:52:21:33:8f:0a:
7b:8d:e4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:49 2025 by rpki-client