Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa
File: 0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa (raw, json)
Hash identifier: 33Qgs1tFksaXHW2iVQEKMoxqPyc0s7/5n1TJk6bAauE=
Subject key identifier: 8B:37:18:2F:0A:F4:9D:EE:24:79:9C:73:C1:A1:21:F5:AC:94:E6:8F
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F432858492CAE98A6EB11F4789A19B860
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 30238
IP address blocks: 207.54.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:98:a6:eb:11:f4:78:9a:19:b8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=2fd91fd6-6c79-4876-8823-628dccb488ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:a6:7c:99:1b:37:c7:6e:c7:ff:5f:79:45:
f4:b3:05:05:0d:7e:39:33:3c:ea:ed:e8:f2:1d:c7:
b6:4e:93:8f:72:73:ba:68:c7:8c:80:60:97:d6:1e:
af:ab:f5:33:5f:39:79:0f:00:20:7f:5a:76:9f:d6:
c6:91:b6:7e:68:3b:40:d6:5b:fb:80:00:35:cc:79:
7f:db:da:7a:b4:2d:e4:4c:ab:d7:7e:55:44:db:28:
b0:e1:2e:a1:87:47:17:04:1d:43:82:5a:df:27:03:
71:4c:4f:e7:56:55:70:92:3e:4f:4e:53:7c:49:ce:
d1:75:f4:77:0e:99:30:d6:8b:26:e3:f5:18:7f:71:
8f:ef:15:eb:cf:8d:7f:cc:7f:a8:3c:9d:0e:4c:88:
c0:9b:d8:c8:c1:34:84:e7:d2:cb:96:7c:8f:b4:02:
a8:01:b1:47:4b:c0:05:0c:6c:52:78:a7:e6:ca:96:
a4:b5:f0:76:64:f9:7d:9b:06:8a:e9:26:e6:f4:3e:
9e:5e:ce:7f:c0:51:1b:5b:4d:36:56:ea:01:1b:74:
61:cd:3a:e0:e9:64:38:ce:c0:37:af:ef:8c:fd:47:
68:ac:17:0a:88:d1:c6:ff:20:8c:7b:01:d8:fe:ad:
09:dd:1e:58:5a:c8:e0:06:3c:e8:54:42:90:45:6d:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:37:18:2F:0A:F4:9D:EE:24:79:9C:73:C1:A1:21:F5:AC:94:E6:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0bdbffb1-44b4-3583-bd78-0276be52bf3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
207.54.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:f5:7b:e9:a0:c2:5a:8f:c7:b7:9a:21:0a:4c:30:da:c3:68:
8b:cb:c3:32:d8:c7:4d:a5:27:fa:ef:3b:aa:cb:f0:ad:d0:8d:
1d:aa:c0:05:95:dc:75:e7:93:bc:57:92:e7:ad:72:03:46:6c:
c2:5f:d9:dd:16:3a:11:a1:e5:52:a6:53:76:e2:1d:08:aa:8d:
d3:0b:1a:b9:ce:fc:dc:ee:ac:8f:85:f0:11:f1:16:ef:32:1d:
7a:0c:2e:0b:13:ad:a9:3c:59:31:37:75:53:ce:38:45:74:ce:
9f:57:79:5c:c5:73:c7:b1:a0:f3:51:e7:51:68:5f:7c:85:e7:
a6:f8:00:21:aa:92:c1:9f:aa:9e:1f:17:da:a5:bd:6d:f2:fa:
c9:08:db:ee:45:1d:c1:33:97:d6:29:a1:07:16:0d:e8:33:f2:
1f:ee:d4:bc:92:21:40:bf:13:f0:53:48:9d:a5:b8:70:ac:c7:
06:f3:2b:ff:52:ca:c6:50:0f:a5:24:81:5a:5c:9b:28:d4:4b:
a5:54:ab:43:3e:26:d8:b5:3e:ab:19:9a:6f:a2:03:b5:90:88:
bf:81:ec:c8:07:4c:d5:86:60:e2:bb:a7:3f:e3:e8:6e:4e:56:
be:33:bf:bf:cf:a0:ab:55:a9:9b:c6:2d:ae:6d:2e:2a:57:5f:
f9:93:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:35 2025 by rpki-client