Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e943603-132f-37cd-a9d4-751225af973a.roa
File: 7e943603-132f-37cd-a9d4-751225af973a.roa (raw, json)
Hash identifier: TG29EGxRT2zB4QetcGCh44mHvg2gB7vqs58v2luXbM0=
Subject key identifier: E8:40:7E:06:C9:5B:F8:5A:16:7A:49:45:7B:0D:9D:AE:29:AC:6A:C5
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848CF46364CFA807A0282F0AB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e943603-132f-37cd-a9d4-751225af973a.roa
Signing time: Sat 08 Feb 2025 02:00:38 +0000
ROA not before: Sat 08 Feb 2025 02:00:38 +0000
ROA not after: Fri 09 May 2025 01:00:38 +0000
asID: 6167
IP address blocks: 97.207.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cf:46:36:4c:fa:80:7a:02:82:f0:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 8 02:00:38 2025 GMT
Not After : May 9 01:00:38 2025 GMT
Subject: CN=3876b8af-d031-498e-b18a-e9e33df2f0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:70:48:3c:1a:b8:9a:fe:5f:aa:4f:98:1c:
e8:4e:7c:66:65:fd:12:a4:28:47:51:b2:06:ea:9c:
fe:18:9d:28:65:41:25:74:d7:09:89:cd:36:e3:a1:
44:8b:65:4f:c6:c2:e1:95:d4:a9:3b:55:8d:46:9d:
69:d1:e5:c8:31:56:0f:36:67:98:27:10:91:ff:8b:
df:b7:49:bc:85:92:0c:d0:df:69:1a:f2:7c:6f:ec:
cc:b0:be:1d:cc:59:29:93:85:f8:86:d3:fc:27:da:
bc:23:f5:a7:37:bd:1b:e4:3e:8a:c6:1c:e1:8a:14:
5b:e4:6b:b6:7d:32:8a:bb:21:ed:7d:83:2e:6b:df:
d1:ef:cc:05:86:39:52:8a:39:81:07:5d:cc:d1:b7:
3a:fe:ba:f2:25:c1:7e:fe:6e:f7:c2:6a:bf:b9:37:
ff:4e:b3:22:fc:c5:ac:7f:18:74:fe:ed:95:9b:c2:
b9:66:42:81:20:c9:0d:77:ad:bb:d4:ca:94:b7:7c:
ea:bb:97:a4:ac:dd:f4:bd:95:64:84:5c:f7:0b:6c:
eb:b2:29:50:4b:40:b8:48:1b:99:6f:43:dd:46:c7:
24:b2:47:95:d6:e0:24:b1:6e:bc:b6:45:e2:87:29:
9f:b8:56:f6:73:ec:96:9d:bd:76:58:03:40:a8:85:
7a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:40:7E:06:C9:5B:F8:5A:16:7A:49:45:7B:0D:9D:AE:29:AC:6A:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7e943603-132f-37cd-a9d4-751225af973a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
97.207.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:1a:ff:bd:52:dc:30:30:4c:96:0e:d7:ac:18:21:df:c4:75:
33:6b:d2:8a:39:56:50:0a:f3:ab:35:4f:b2:de:3a:35:19:d2:
9f:4f:94:16:30:7b:04:ce:4b:94:4c:f5:29:10:bf:01:e3:ef:
ce:f7:cb:c4:d7:27:57:43:c3:8e:ed:bc:91:37:fd:dd:3f:5c:
1c:12:ee:a2:a9:cc:28:87:44:48:48:de:dd:70:99:23:58:33:
9a:98:1e:c2:61:3a:e3:77:e3:2a:79:94:30:df:8a:a2:e4:4e:
47:02:1f:5d:4a:26:6d:66:2e:19:bf:fc:b7:31:92:52:66:42:
f2:29:66:7b:56:77:0c:78:fb:5c:e3:e9:9f:e0:06:5c:99:30:
31:92:69:b6:bd:eb:e3:22:9e:37:4f:81:5f:35:8e:a2:91:9f:
5f:d5:63:52:ad:f8:d7:dc:d2:6d:08:89:04:8a:0e:f0:fc:13:
59:be:45:4d:ff:ef:e5:bf:60:c2:69:a6:a6:47:9c:0d:21:54:
81:3a:b3:b1:db:20:73:90:64:3b:c9:ad:ee:08:d8:02:41:d7:
fd:ba:0f:d9:2a:e6:a8:2e:8b:c6:42:a0:97:59:d9:09:93:3b:
85:9c:b6:87:b6:bb:d4:6b:bd:35:02:a7:86:85:71:95:de:d4:
01:44:58:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:29 2025 by rpki-client