Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9cb23fd8-3c09-3578-9afb-c8234a90a00e.roa
File: 9cb23fd8-3c09-3578-9afb-c8234a90a00e.roa (raw, json)
Hash identifier: mn/2GkbTdsO4YwbIFrROZtgfX+4pxXdtBIIl5Lu5vn4=
Subject key identifier: F4:BA:4F:F3:BB:48:13:C2:69:5E:C3:54:7D:03:EA:7C:83:4A:A1:93
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858494CC93CFB4694F99BCFF7C678
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9cb23fd8-3c09-3578-9afb-c8234a90a00e.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 27947
IP address blocks: 207.226.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:3c:fb:46:94:f9:9b:cf:f7:c6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=79a350be-c186-4327-83f9-fa752c91c03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:06:5e:32:9f:4a:b1:25:45:38:52:87:94:
f7:a9:9c:10:45:84:75:08:1a:c9:33:14:b2:f5:9d:
46:15:5b:ba:ec:e8:2b:d8:78:7d:e9:22:80:ad:ad:
ff:be:64:ac:e4:df:99:94:72:bc:d8:cc:7a:6f:8e:
d0:0c:c6:f4:3c:81:7e:fc:87:26:bc:2d:33:57:8b:
b1:26:ad:a5:9f:bf:f1:1f:70:b6:4b:07:bd:c5:51:
4e:86:0d:18:c7:80:e1:4d:01:2f:66:7f:92:12:cd:
4e:65:4a:d7:e3:b1:d6:9c:e8:47:0f:d6:5b:19:50:
d5:10:ea:4d:3c:13:26:8c:12:ef:4a:5c:d9:df:c1:
3c:bc:c9:59:c1:e1:b1:16:5e:7d:3a:c2:fc:04:52:
5a:ec:ca:52:69:57:fc:54:2c:e0:2e:28:c7:b6:bc:
da:05:8a:1e:84:01:d5:39:d0:51:9b:1b:ae:af:5f:
18:1f:4e:e7:6a:b2:26:69:b7:57:96:42:44:83:5a:
60:ae:d7:17:00:af:93:b4:10:2d:f6:8b:3f:68:47:
ad:99:5c:18:ed:59:b1:1f:e6:3d:c4:30:01:13:e1:
70:9e:b0:0a:21:67:01:b0:c8:b7:07:16:bf:3b:0a:
ad:5d:53:5a:55:a3:19:60:e6:6b:3f:6e:9d:af:73:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BA:4F:F3:BB:48:13:C2:69:5E:C3:54:7D:03:EA:7C:83:4A:A1:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9cb23fd8-3c09-3578-9afb-c8234a90a00e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
207.226.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:9b:ce:ec:f4:ba:70:63:57:e8:87:21:0a:81:a9:ae:ae:7c:
69:44:4a:f3:da:5b:b6:37:9f:ab:05:e9:d4:aa:0d:63:ce:78:
59:38:df:e7:7c:e3:9f:dc:98:be:c8:c5:a9:bf:44:f6:c3:af:
0f:f7:3e:8b:45:0b:49:d9:b7:67:69:7a:3a:f5:cd:0d:c8:9f:
f7:35:52:a0:c1:b0:87:00:31:f4:89:df:f8:d5:1c:24:90:f0:
5b:a9:58:b7:20:f9:05:f0:c1:a0:05:1a:d0:67:99:81:52:c8:
d4:cb:7e:1f:df:e3:b4:22:5a:cc:d8:02:9e:b7:1b:a0:27:d4:
0f:d7:fc:71:99:12:46:e4:3c:4a:8f:a6:33:ff:cf:b8:4b:48:
a1:87:50:1e:7d:b3:15:d5:05:4c:01:bc:22:3a:59:ca:a6:17:
ca:dc:c1:79:f3:28:33:fe:e8:33:89:00:cf:3d:db:4b:ac:3e:
2e:2b:27:3e:cf:69:d7:cd:d5:36:e9:e1:38:73:7e:b3:bf:6b:
4d:48:84:bf:2f:79:b5:df:aa:ee:35:e8:75:f9:08:e0:0a:b2:
02:2a:5f:0e:51:ec:b9:a1:67:76:be:4b:c2:67:72:9d:34:0f:
4e:81:a8:0d:3d:88:8b:44:3a:21:b0:b2:e6:c6:cb:c8:fd:ab:
fc:e2:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:06 2025 by rpki-client