Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/dc1ae684-e0e4-3cdf-a6c1-3f5c4943d3e9.roa
File: dc1ae684-e0e4-3cdf-a6c1-3f5c4943d3e9.roa (raw, json)
Hash identifier: R55jh/XV6iez1J6jltoJgbh77uQMVHEIpXYgnQzowt0=
Subject key identifier: 79:37:FE:21:C3:DE:F8:21:E4:44:10:E0:AB:61:03:2C:E2:3E:0A:D5
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F4F698819B59F5BF11D77100
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/dc1ae684-e0e4-3cdf-a6c1-3f5c4943d3e9.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 12491
IP address blocks: 207.176.11.0/24 maxlen: 24
207.176.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:98:81:9b:59:f5:bf:11:d7:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=74baa24c-5e93-4957-b030-7c9223473448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:80:09:dc:69:4d:57:47:20:5a:58:ef:77:
fd:17:c7:0a:c6:12:13:ab:6c:84:d5:16:c7:1c:23:
70:00:1d:85:22:2c:80:4c:e1:75:6d:97:64:b5:3b:
32:a8:79:16:40:e9:f5:4d:44:32:1f:20:d4:cc:c6:
16:8e:41:3b:2c:5d:09:d9:7d:e2:1e:85:8c:7f:7a:
e5:c2:bb:aa:f2:01:16:79:10:6c:3d:67:40:16:7a:
5f:d2:96:86:dd:b9:f3:d0:65:71:79:15:7c:04:49:
cd:9b:54:29:c5:e4:1e:eb:7f:b8:c4:69:c9:48:80:
f0:f8:a6:18:e9:7e:20:88:70:0c:08:57:2d:04:e8:
97:6c:b3:ac:d5:b6:2f:ce:76:39:d6:0d:2d:89:3a:
42:51:8a:af:b9:dd:fe:88:48:dd:06:c2:f7:6f:ad:
1f:e9:cc:8a:0e:2f:f5:d6:10:6d:dc:83:f1:eb:74:
25:27:36:81:d6:eb:c3:0d:7f:40:9f:71:78:77:fa:
c4:fb:01:bc:6c:bc:95:0b:01:bd:18:9e:75:79:bd:
ac:5d:10:eb:03:15:74:a4:e9:f4:97:3d:76:bd:1f:
72:3d:b7:cc:76:79:60:4a:29:69:4c:b1:b7:17:fc:
bc:32:39:c2:e8:53:cd:0b:3f:5c:ae:87:26:13:9a:
f1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:37:FE:21:C3:DE:F8:21:E4:44:10:E0:AB:61:03:2C:E2:3E:0A:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/dc1ae684-e0e4-3cdf-a6c1-3f5c4943d3e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
207.176.11.0-207.176.12.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:00:94:36:c5:fa:5d:e8:0b:5b:5f:c0:e8:81:77:54:a2:14:
ab:e0:67:38:de:f4:95:df:c7:13:41:76:f6:5c:53:c5:14:12:
34:ed:a6:5e:b3:6f:6a:c1:ef:e6:f3:ac:27:70:30:1c:d6:34:
b9:46:98:76:b9:f5:3f:10:65:88:9d:b5:9f:44:f7:91:5a:58:
61:ba:92:15:ae:9a:bc:3c:f9:c9:7b:b2:37:97:dc:e9:8d:00:
38:dd:52:28:83:07:27:e2:eb:45:db:fa:61:c2:67:13:cb:3e:
d9:cd:9c:a8:0a:df:ae:8c:5d:d6:11:e8:2b:5d:aa:62:b3:cf:
b3:d1:c5:84:2b:a5:e4:fb:8c:54:6a:9a:4a:ec:a9:00:9b:b6:
4b:36:1c:e6:9a:38:d4:dc:28:64:ab:b9:9e:e3:86:e2:52:43:
b7:94:4d:1c:d6:bd:d9:6f:33:87:c1:1a:7b:a6:2b:95:97:f4:
b2:ba:c5:4b:d3:e2:2a:3a:ce:56:81:c8:6e:7d:2d:e5:59:d2:
6c:5d:89:22:0d:c5:b1:d7:fe:b5:35:8d:ad:fd:cd:89:e3:7e:
89:c1:87:0b:e4:94:5d:f8:ee:0e:ac:b7:1b:b7:98:0c:b2:b8:
44:3b:5d:51:c0:29:18:27:ec:f8:18:a3:8d:47:83:4d:36:5c:
81:d1:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:32:32 2025 by rpki-client