Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/eb41162d-67c3-3989-9557-d8754f1cec57.roa
File: eb41162d-67c3-3989-9557-d8754f1cec57.roa (raw, json)
Hash identifier: PfOM9ukJV6G3iJ8pnsuTnrSQEr5BJuy3TrVeuY/ztBI=
Subject key identifier: 32:3F:40:E2:9C:DE:5C:E2:1D:06:6C:BD:A9:99:5A:40:F8:1D:17:B3
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858490021497FE29B4C06A14D89C0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/eb41162d-67c3-3989-9557-d8754f1cec57.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 3491
IP address blocks: 207.176.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:49:7f:e2:9b:4c:06:a1:4d:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=eb6ba4e5-73ba-42ad-b39f-201d665bd884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:10:28:3e:72:3a:16:2f:7f:80:d1:ed:18:
ca:fe:76:bd:74:aa:23:cb:1b:be:34:ec:98:da:00:
93:92:47:92:5a:02:ac:eb:0e:bb:61:01:d6:6a:b9:
aa:15:c1:1f:56:18:ef:1d:48:72:1b:35:04:66:6d:
d4:91:c9:cc:cc:cf:f9:6b:89:c2:f3:2c:a8:97:0f:
af:60:0f:9e:5c:04:1d:83:0a:d1:9e:65:68:bc:97:
81:e0:7c:ff:41:5a:50:b3:61:66:52:59:f3:d9:62:
1c:d8:d0:e2:47:32:b6:e5:65:ff:7d:0b:3e:f3:1d:
7d:47:e3:81:68:03:17:9e:55:46:0d:00:4b:d3:b5:
5f:2a:70:d3:07:39:10:12:b0:d3:18:5d:90:77:8d:
d4:4e:c8:f6:ee:df:4a:3f:f2:ab:f0:16:35:3b:64:
e2:81:36:75:e1:50:28:93:f9:f1:f8:88:6f:d1:79:
d7:59:c5:86:cf:2a:30:19:5e:7e:fb:69:bb:fe:26:
5f:1f:fd:13:e5:2f:d2:7d:13:36:fb:bd:df:72:81:
5f:6e:ed:fe:28:b6:6b:b0:5b:02:03:d2:39:7e:ce:
61:4d:c2:0c:a0:ed:2a:b6:25:db:f1:1e:e3:77:b8:
7e:d4:17:f5:ce:2d:32:14:a3:21:ea:10:1a:96:5a:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3F:40:E2:9C:DE:5C:E2:1D:06:6C:BD:A9:99:5A:40:F8:1D:17:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/eb41162d-67c3-3989-9557-d8754f1cec57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
207.176.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:b8:a3:68:e8:ef:a5:ac:61:06:4a:83:91:05:1f:6a:2c:86:
1c:f3:90:73:c4:74:2d:0d:f4:24:75:4c:c0:c1:b7:b9:20:77:
c7:42:b3:66:87:0f:df:34:f4:47:a6:fe:9f:13:c2:b6:0c:1d:
b9:3b:f3:6d:0d:22:7b:00:c3:68:bc:d4:f9:bb:9f:9c:a9:7a:
41:61:c0:1c:c3:8a:96:d0:6b:4d:df:3e:5e:3a:83:ac:06:2a:
54:be:b5:4b:17:56:25:b6:30:b6:d1:a9:db:c3:57:a2:81:57:
a6:30:54:b6:23:93:44:ce:17:44:fa:b3:d4:80:16:d4:53:c7:
22:a0:0b:ca:6c:3f:a9:fd:13:3d:9f:39:69:6e:f3:27:17:23:
2c:4d:61:26:46:b9:e2:b8:d2:c0:2f:06:64:21:42:ba:12:67:
a4:88:0f:42:62:3f:8f:69:51:c8:b3:e1:eb:d8:7d:1b:31:b2:
07:8e:23:62:d0:04:5b:59:e7:ca:5d:f6:be:c6:05:59:02:4c:
88:26:4d:88:fc:f9:29:75:9d:ea:37:ec:f9:d3:35:97:00:c2:
d6:de:f2:06:3c:51:3f:94:35:13:56:6f:8f:53:58:c2:42:1b:
74:70:e2:44:82:8d:79:e1:97:fa:3b:c5:81:fe:0d:eb:cc:e3:
4b:27:3f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:24:09 2025 by rpki-client