Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa
File: a12882fe-d453-381a-9a7a-cbe2ae96018a.roa (raw, json)
Hash identifier: pJ1BIH9EOzABhYk9qses89JL86Y2G/nKfIM8Z5Rur8U=
Subject key identifier: CF:94:BB:2E:A4:02:F3:81:85:5C:E7:55:44:3B:16:34:13:0F:25:5A
Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial: 010D0C9F43285848EC96831136FFE8F13058E100
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 3807
IP address blocks: 207.196.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:83:11:36:ff:e8:f1:30:58:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=f530c64a-b74f-483f-9a6e-b40ae7b4a863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:dd:46:e8:f8:fe:ae:7f:db:7a:27:cc:ef:
16:24:5a:c4:a9:c5:3e:bb:d2:0e:b5:7e:7d:fe:85:
9d:07:82:22:41:f1:84:b7:62:52:3e:d9:16:80:c0:
5c:f4:9a:99:88:33:4a:f3:7a:55:af:c3:77:a7:7c:
de:bd:74:da:6d:2d:4f:28:8f:9d:6a:53:71:89:ad:
cb:b2:c5:47:40:c6:56:50:f8:23:79:f9:60:dc:6e:
f6:3e:c5:7c:b8:50:16:6e:ba:f0:43:36:27:c7:92:
8d:21:68:c2:b0:03:97:3b:90:6e:e2:b2:18:13:93:
cd:a6:52:c9:75:a3:12:e7:ab:96:7e:4a:e5:de:5c:
f7:92:e7:69:4a:c7:61:c9:d5:9c:cc:d5:44:f1:1a:
73:83:4f:9e:a1:41:47:c6:d9:65:fb:0d:12:b9:77:
45:24:3f:a2:8d:62:63:a5:f5:f3:d4:52:04:2d:30:
62:83:82:e4:49:a2:30:42:03:c0:68:70:fb:36:03:
ae:35:18:a1:bb:43:e0:94:ce:36:1f:f2:4c:d0:d2:
cb:c6:44:66:5a:40:cf:5e:fd:7a:ce:52:e5:65:05:
22:20:f9:8f:e1:da:30:1a:42:d3:4e:91:f8:b2:c7:
8e:d2:10:f6:8d:3c:fa:78:1c:8f:02:4f:1e:73:d7:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:94:BB:2E:A4:02:F3:81:85:5C:E7:55:44:3B:16:34:13:0F:25:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/a12882fe-d453-381a-9a7a-cbe2ae96018a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
X509v3 Authority Key Identifier:
keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
sbgp-ipAddrBlock: critical
IPv4:
207.196.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:59:09:78:b6:b9:5d:f8:14:06:4a:df:33:5b:61:e1:05:4e:
a7:f5:9e:ac:a1:a7:46:39:07:f4:8d:bb:dd:c3:8c:23:ec:32:
6a:94:a5:24:00:7a:1e:ef:ed:19:11:6c:45:6d:33:5b:9a:91:
26:c9:9c:92:47:1b:e7:3a:e8:99:d1:9a:06:b9:0e:5a:29:66:
76:d8:d7:bb:3e:14:f4:36:33:6f:d1:b8:41:9b:d5:69:36:fe:
52:4b:16:8f:99:8d:cc:62:ce:cc:bb:7e:8b:70:3e:d6:c2:4b:
8f:db:a0:69:25:02:bf:74:79:86:ab:a4:5b:7b:79:e6:13:cf:
7a:5f:be:44:5c:94:3d:e9:5b:8f:33:f5:77:74:a3:f7:df:e1:
e4:bd:e8:b5:18:94:71:41:f7:53:68:79:35:e8:cc:bb:7b:e9:
8e:be:8e:31:0c:d8:0d:06:ca:bd:c4:24:c2:f7:f9:cf:6e:33:
41:75:93:f2:cf:39:8b:6e:02:49:44:4a:b7:14:6c:39:5c:ff:
db:d9:dc:c5:c0:c0:6c:cf:64:dc:b1:92:4d:60:67:8e:b6:bc:
fc:b5:9d:4f:8f:74:a7:2f:bc:f8:71:22:c0:8e:67:a0:cc:14:
6d:f2:5b:3b:51:3f:a8:fe:bd:fb:78:00:20:6d:70:82:55:13:
16:80:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:20 2025 by rpki-client