Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/409e8041-9438-33b8-b8ce-5c23c1da38f1.roa
File: 409e8041-9438-33b8-b8ce-5c23c1da38f1.roa (raw, json)
Hash identifier: ixXYn5sp5JyWiEeLLsX0dU16AsgYaK0d1Az6HL4ctB0=
Subject key identifier: F8:67:64:9F:09:C4:51:18:BD:43:1F:80:79:A6:96:E8:25:DF:83:45
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584894A5E19E6996A15C03D06E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/409e8041-9438-33b8-b8ce-5c23c1da38f1.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 6195
IP address blocks: 207.17.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:e1:9e:69:96:a1:5c:03:d0:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=512d4845-b176-44b1-b509-98cc50daae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:b5:c1:41:6c:80:d5:4d:58:9c:db:2c:57:
ff:b7:4b:28:b7:62:3c:80:79:45:cc:37:eb:d8:15:
01:b9:5e:44:19:2d:2a:bf:26:ba:01:d7:4e:8f:7d:
0d:9a:a5:e7:d0:cd:e8:64:a2:61:a6:8e:8e:b7:d9:
dc:3c:c3:a7:a6:33:0a:b8:0c:06:3f:a4:81:68:6a:
a0:5d:98:f5:d0:bc:df:62:7e:3a:da:c6:a1:56:2a:
77:f3:2f:d3:10:10:d3:7f:93:c1:04:5e:36:26:0f:
f6:e8:c8:b7:e7:54:c2:be:8f:b6:4b:d0:e3:92:26:
79:66:4a:94:92:21:6e:4d:ac:ae:17:e7:f7:da:df:
3c:a9:26:66:1f:a3:ff:06:62:0f:89:3a:f2:78:62:
4e:67:f5:ca:6c:3d:1d:71:63:ae:8f:97:8a:d7:6d:
2d:21:43:83:67:a6:d4:68:f6:de:ae:63:18:3d:cc:
27:d1:dc:34:04:10:be:d9:66:09:18:90:1c:d8:7b:
ac:b1:83:30:9e:d2:2a:53:cf:6e:90:d3:b3:fe:89:
df:4d:41:46:ee:bc:66:01:53:11:2b:d4:a0:a3:ee:
71:94:c5:b7:05:33:d6:3d:52:b5:86:3c:07:be:8d:
9f:9c:65:ec:16:d0:46:13:5d:68:5c:f4:eb:0f:9a:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:67:64:9F:09:C4:51:18:BD:43:1F:80:79:A6:96:E8:25:DF:83:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/409e8041-9438-33b8-b8ce-5c23c1da38f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
207.17.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:75:4e:77:40:b1:bc:6a:d8:68:34:89:7b:f3:ee:93:3d:b1:
a3:87:79:67:3a:88:76:23:eb:31:fe:8f:e2:f4:f3:7c:fa:a4:
32:16:9e:69:0b:0d:b7:c3:09:fb:38:e5:b2:87:c2:16:fc:27:
17:0b:0d:ad:62:15:63:1f:6e:32:b4:70:52:23:21:39:58:fe:
92:75:a4:c4:99:f1:07:54:16:e3:e2:70:97:66:80:3c:2c:09:
cc:da:02:8a:21:fa:77:3f:6f:af:c6:f7:09:ab:ec:95:e2:ee:
1f:f8:c2:d5:3b:c2:74:22:c0:fe:ae:87:aa:a7:e3:53:98:56:
10:93:79:44:4b:0c:c9:60:46:de:0a:75:74:76:bf:8c:e4:09:
80:e9:69:92:f2:bc:88:19:b9:1c:74:0e:c1:29:21:b4:b1:6b:
12:17:63:8e:59:bd:28:2f:7b:22:63:67:e3:18:44:af:c1:f1:
4c:f5:7e:e9:a4:72:3e:30:03:2c:64:d0:89:1f:f2:c5:4d:e2:
41:2e:79:56:ea:50:54:56:ba:15:3e:7f:e2:34:ed:f5:78:21:
d5:24:65:e8:74:00:1b:80:5a:ae:e9:23:e8:c1:54:f2:9f:5e:
72:cb:e5:b5:b0:61:a4:dc:b8:f6:f0:1f:1d:5d:95:4b:7e:36:
90:86:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:22 2025 by rpki-client