Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa
File: 8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa (raw, json)
Hash identifier: zOoNC3KgQDzrk3/HlI75TxZ5jYpOl7UMTcQ9CW1lihc=
Subject key identifier: A3:55:15:EC:0E:9E:37:72:5B:72:22:CC:26:32:39:3F:EE:C2:77:50
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F65BDF08E83B75C101562D50
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 12491
IP address blocks: 207.226.32.0/20 maxlen: 24
207.226.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:df:08:e8:3b:75:c1:01:56:2d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=043df0a7-b151-4e30-a119-d90f4bc6d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:7b:8d:e3:bc:fb:54:0a:40:1a:8c:bb:2e:
ba:82:ec:72:97:7b:3f:54:b0:14:bb:60:36:3c:fe:
10:a3:26:42:26:bb:d7:76:e2:1a:bc:a5:95:47:e9:
e3:4b:b2:5e:58:cc:06:4d:f0:e1:8e:da:89:cc:fc:
7c:04:74:a8:b5:03:c1:f0:6d:9b:f5:99:63:a5:11:
f7:6d:ad:6f:b5:17:09:bd:a2:a7:b6:bf:60:43:e6:
c4:f3:3b:11:b6:d8:52:ad:ad:70:04:3d:31:f6:da:
4c:df:65:a9:8b:8d:29:26:5b:ae:20:ba:65:a7:5d:
56:2f:67:72:e5:e5:c9:93:da:e6:da:61:a8:8f:cd:
9d:f4:d6:22:a8:54:f0:57:d7:e6:2c:9e:23:4b:da:
cf:0d:27:b0:0d:8e:a1:a8:be:e8:72:83:67:47:ad:
48:0d:1f:78:9e:e7:7d:64:ba:e6:c0:ed:7b:31:db:
00:ae:79:36:67:7d:50:e9:1d:63:bb:90:90:0c:d4:
dd:04:84:e7:2b:14:92:d2:97:7f:8d:93:8a:2f:1d:
3a:bf:ea:8b:5d:85:d3:1c:c1:89:44:2a:3b:3c:db:
ba:29:95:71:e2:e4:89:94:ad:e7:db:2b:3b:6b:2d:
6c:d4:18:21:45:9f:fe:43:47:cb:56:58:7f:30:6b:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:55:15:EC:0E:9E:37:72:5B:72:22:CC:26:32:39:3F:EE:C2:77:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/8f987717-1c0d-3f24-96f9-8ed1e7f70f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
207.226.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:60:07:4c:43:c3:c8:d7:93:57:d8:62:d6:a7:b2:b8:db:5a:
65:92:f2:2c:a9:4e:4b:88:d9:20:80:33:50:fa:b2:b9:42:13:
74:b2:93:49:81:3e:bc:0c:ad:3c:fd:77:8b:9e:22:e8:18:42:
23:e0:0a:60:56:b9:5b:be:18:3a:09:5d:7f:db:f4:04:54:31:
90:1b:7d:88:70:07:9e:6c:6e:eb:da:dd:03:c0:d8:09:c6:38:
a1:f4:b9:3f:09:9f:c6:e9:09:5f:47:39:84:2e:53:32:53:1d:
be:e3:6a:52:52:0f:a9:06:b5:e8:e1:24:ce:93:51:99:35:b7:
bf:cc:6f:2a:d2:c4:bf:44:0e:8b:72:0a:20:01:75:74:cd:65:
d4:1d:8b:2a:7c:da:a8:83:1e:13:8e:96:01:6a:fa:1e:5e:a5:
13:8d:80:ea:96:b1:0b:1d:d3:cb:4a:dc:83:1e:1a:bb:a3:80:
63:2d:57:2d:51:07:47:09:7a:3e:4a:2e:ea:99:66:06:e1:3c:
3b:2c:41:74:a9:28:b4:1b:c0:5f:2d:e2:d4:84:e6:37:f2:4a:
ce:b0:33:73:08:d6:08:3b:22:f7:70:19:49:79:38:b2:79:a2:
ee:51:3e:2b:f2:56:03:54:48:52:cf:27:fa:fd:a6:90:46:5d:
43:5e:f7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:16:19 2025 by rpki-client