Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa
File: ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa (raw, json)
Hash identifier: nXO9CizHPhMgGgDrE+kWMnv6EXy465ir8taoEw7fYsw=
Subject key identifier: 97:74:A1:C5:C9:16:6E:3C:A4:5B:DD:CE:FE:A3:F8:C3:65:9B:2E:D5
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F4F6989516D3C0F46C0CEE40
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 3491
IP address blocks: 207.176.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:98:95:16:d3:c0:f4:6c:0c:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=cd013fc1-aab5-4382-8517-458aa8907a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:ac:a5:b5:4e:96:c8:a6:53:b4:0c:bd:7e:
29:64:bb:8b:60:57:5f:8f:e0:02:48:99:d8:3f:39:
79:2d:e0:83:b3:71:e0:2b:a2:37:a3:63:c2:ba:83:
2e:be:c6:50:32:53:0e:73:7a:43:0d:2a:ad:df:b7:
ae:f3:53:83:b5:fd:c1:f6:37:fc:b6:75:48:b7:ce:
a8:a5:70:d6:9a:d1:02:9e:5f:e1:72:5c:4d:27:71:
32:85:4e:1b:d6:55:7d:1c:55:45:da:93:72:39:ac:
0c:b7:e5:2c:a6:8f:ec:d6:08:38:c6:fa:82:20:24:
11:30:46:70:e3:a0:dd:ec:c4:8f:ae:ab:ab:ed:c3:
47:33:75:39:20:56:11:a6:14:c9:85:6e:d9:a3:c6:
26:98:45:81:1b:f8:24:28:3c:ce:53:d4:38:03:fc:
28:30:cf:14:e0:b5:56:fa:87:d5:3c:d5:dc:f8:dd:
96:61:53:dd:26:1e:67:0a:33:93:58:5e:9a:de:1b:
4d:c1:7e:69:61:5e:fb:39:09:bf:83:81:31:06:8e:
44:66:b0:cf:64:98:9b:2d:ba:9f:3d:73:ae:a4:52:
80:fd:b3:e2:f2:28:df:c7:6b:0e:82:27:be:a7:c5:
84:5e:76:01:78:16:08:c2:c6:86:bb:f4:02:7b:5a:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:74:A1:C5:C9:16:6E:3C:A4:5B:DD:CE:FE:A3:F8:C3:65:9B:2E:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
207.176.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:bd:97:4c:58:d8:61:78:5e:c3:b6:e2:96:2f:f5:a8:8e:3e:
8d:aa:62:80:8d:6e:0f:6a:8b:30:0e:f4:33:3c:61:08:3f:92:
ec:2a:f4:5d:05:a1:bb:2f:c5:15:a7:a8:6f:a3:9f:31:69:bd:
f5:86:61:a4:a3:8a:87:d9:18:76:5b:a1:35:4f:ad:e7:92:e3:
e7:83:0d:dc:0d:a4:94:09:c4:55:0d:42:5d:99:41:4c:8d:dd:
04:e3:87:bb:74:5d:7a:26:bf:6f:b8:87:48:a3:f0:a7:1e:1d:
65:53:42:df:47:03:4b:79:c5:05:72:a8:d7:74:cb:a3:8e:1e:
1c:28:97:07:d7:0f:27:4c:16:bc:61:7c:1f:5e:25:a7:ae:f5:
bf:99:4a:37:dd:14:e9:e4:6a:8c:d3:2b:9f:4e:5d:a0:3a:7f:
c8:83:f6:97:90:aa:56:07:b8:01:6a:93:5b:a3:7d:44:80:da:
af:a1:68:47:7b:d1:71:b8:73:ff:1f:6b:89:d2:88:3f:7c:44:
59:de:d1:2e:e6:37:20:43:9e:68:82:16:4d:6f:4a:f8:73:29:
21:c9:c6:e7:19:59:5b:53:1e:7f:85:9b:f6:20:2e:22:d9:8a:
74:14:8c:6e:ef:af:f7:4c:dc:47:f1:57:7c:92:bd:e7:87:89:
e9:9a:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:00 2025 by rpki-client