Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/3bec8aea-33c3-358a-a7fe-6eb094f3972e.roa
File: 3bec8aea-33c3-358a-a7fe-6eb094f3972e.roa (raw, json)
Hash identifier: ljHMU416QRexuIdfCAEtotYLZQZthU9+aSCA4/SyAXc=
Subject key identifier: AB:AA:72:70:1C:34:82:D8:4E:14:56:F6:C6:53:BC:67:BA:32:8D:EE
Certificate issuer: /CN=69182550-6727-45f4-8b5c-c13c70b39cf9
Certificate serial: 010D0C9F432858490E16C91294FF97FF73813000
Authority key identifier: 7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/3bec8aea-33c3-358a-a7fe-6eb094f3972e.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 207.207.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c9:12:94:ff:97:ff:73:81:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69182550-6727-45f4-8b5c-c13c70b39cf9
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=5af2025d-7565-4707-b9e8-3cbdf424462c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:1c:20:0b:de:89:5e:44:09:4b:11:c6:f6:
d6:43:b0:bb:30:db:6a:84:0a:b6:3b:f5:ba:76:47:
8c:42:2e:8c:17:cf:b8:40:c6:46:7f:6b:22:7e:8c:
ce:a8:3c:84:26:b9:5b:22:58:78:84:74:05:02:03:
f2:3a:30:de:8d:d8:c7:9c:39:05:7b:72:2b:7d:99:
74:43:ed:5f:cd:41:d7:f5:ae:6a:39:f5:fd:14:6b:
0a:83:b7:51:aa:20:4a:3d:d9:c9:1b:72:ca:ce:dd:
0d:ca:74:0f:18:0e:db:3f:a7:c5:90:79:b4:be:7d:
bf:32:ae:e9:df:21:af:6e:d5:60:8e:d5:78:73:5f:
a7:70:cb:18:8c:40:f4:23:26:7f:d3:ec:03:de:9f:
66:b7:7e:02:8e:2f:1d:d7:85:20:f3:0e:89:e1:5a:
e5:1a:e4:b5:1d:61:10:f1:b4:69:12:37:41:79:dd:
25:b9:e3:f0:76:54:3e:b3:8c:80:3c:94:c7:50:00:
6f:83:5b:38:85:f4:d2:e8:b0:f4:97:7c:06:38:ff:
d5:a6:7c:0f:a2:bf:a6:69:51:b8:30:80:00:16:78:
2f:55:37:d3:9a:f7:91:bd:4f:c8:73:fe:44:4c:30:
1a:2a:01:7f:65:25:4c:9d:59:79:ec:1c:c7:15:03:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AA:72:70:1C:34:82:D8:4E:14:56:F6:C6:53:BC:67:BA:32:8D:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/3bec8aea-33c3-358a-a7fe-6eb094f3972e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl
X509v3 Authority Key Identifier:
keyid:7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.207.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:53:1d:3d:c6:f6:a2:e2:ea:4f:bf:e6:b0:48:a6:2b:a5:d8:
17:1a:00:ed:5a:7d:50:1d:35:c7:ee:1d:56:66:34:2d:a8:6c:
94:c4:42:20:e0:29:6d:37:ef:ff:4c:0c:85:f2:8f:00:8a:84:
f4:87:81:e6:ab:19:03:16:af:59:2e:b8:1f:3e:eb:46:40:54:
3f:60:90:c5:92:49:29:d8:57:30:93:52:4c:2f:e5:d0:c9:21:
91:ab:81:f7:9f:86:ee:f0:4d:6d:f8:64:40:c1:b6:7a:02:97:
91:0a:b0:c4:99:0b:4a:cf:66:f5:3b:39:a1:df:15:20:c8:13:
2b:cb:2a:b3:78:12:e9:31:eb:25:b7:d5:27:9e:4f:1d:69:2c:
33:c0:5e:a9:e9:65:74:21:6a:57:5d:b7:83:67:ae:95:84:58:
18:6f:89:ce:2c:dd:dc:4f:5f:f8:ef:e9:42:89:a6:11:18:c4:
20:9f:16:81:2d:f0:c0:cf:54:73:e7:e5:76:cf:1f:e6:17:3f:
53:5c:d0:78:86:3c:db:38:ba:89:3e:0f:10:0f:8c:a1:5d:ef:
06:bd:79:98:42:49:3c:b4:1b:42:78:ea:16:2b:b1:fd:39:30:
b0:35:6f:b7:39:95:ad:95:05:ea:17:d8:45:a3:04:5e:2e:c4:
c4:eb:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:00 2025 by rpki-client