Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/8c0d7de1-9d37-3066-93c7-fe916f29d267.roa
File: 8c0d7de1-9d37-3066-93c7-fe916f29d267.roa (raw, json)
Hash identifier: c2Niv6bzbsv5p/tp5aeQFRr0qWvPIAogVOd0p9a208Q=
Subject key identifier: A2:B9:23:A9:39:F6:37:E7:90:38:5A:4C:1F:0E:62:24:03:F2:7B:82
Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial: 010D0C9F4328584940397D9355D124EE21B2F780
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/8c0d7de1-9d37-3066-93c7-fe916f29d267.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 216382
IP address blocks: 207.2.121.0/24 maxlen: 24
207.2.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7d:93:55:d1:24:ee:21:b2:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=0f4d066d-a5d0-4879-9a58-679b32d8a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:cd:3a:75:37:b8:dd:46:64:ac:53:6a:dd:
a2:b5:1a:33:e7:49:83:13:07:a3:0a:26:70:6a:18:
fb:c0:b7:25:e7:d1:05:6a:6c:58:c5:66:e5:67:f3:
2d:82:6c:d4:05:e3:23:31:84:81:e2:9e:25:ec:6c:
a7:a2:1d:74:c2:3c:72:e2:82:5c:13:21:1e:11:61:
b5:59:93:9d:f1:24:39:e9:75:8c:e9:eb:5c:fa:f2:
46:50:d4:d9:be:8b:32:2c:e9:b3:1a:a6:f8:b0:84:
dd:60:18:7d:25:8f:30:9c:9b:2d:71:dd:c2:9c:ea:
52:8a:67:35:f9:aa:04:3f:9c:6f:6b:d2:60:46:98:
cb:40:fb:8d:d8:ca:38:7a:27:e3:54:34:52:85:c5:
7e:cc:df:43:b4:f5:18:90:9f:5e:dd:54:b1:d3:68:
5d:be:a7:eb:a7:4f:98:d2:c9:ca:54:e1:d1:ce:27:
58:6e:0b:a3:43:e9:54:29:e5:77:2e:8b:7e:70:97:
32:dc:f4:f0:c0:c0:f6:af:26:c8:8c:51:61:78:3f:
54:f0:65:dc:d6:14:44:e6:d1:8e:07:25:10:b9:aa:
75:7d:dd:39:a3:1e:18:5f:8a:f5:c0:b1:24:6b:50:
f4:e2:fd:b1:c9:6f:98:f0:e2:58:1f:20:f0:57:34:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B9:23:A9:39:F6:37:E7:90:38:5A:4C:1F:0E:62:24:03:F2:7B:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/8c0d7de1-9d37-3066-93c7-fe916f29d267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
X509v3 Authority Key Identifier:
keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
sbgp-ipAddrBlock: critical
IPv4:
207.2.121.0-207.2.122.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:80:c0:7e:4d:37:87:51:0f:7d:61:20:e0:0b:e2:e8:a0:7c:
b7:cf:68:77:86:04:e6:ae:28:41:2d:ae:4d:a8:74:fc:2a:5a:
c8:da:db:e8:a0:bb:b0:2a:1b:37:eb:f6:66:67:31:83:1d:1b:
84:84:bd:e9:41:9d:1f:20:9a:60:2f:7c:00:fb:54:36:ac:d8:
10:2e:bd:a3:77:6c:30:46:4a:87:00:37:d7:77:f7:0b:97:83:
6a:0a:c5:23:e8:38:39:8b:98:7a:3b:da:1c:62:9a:7e:ef:1a:
3b:c9:84:d2:f2:4a:68:4c:f9:d3:bb:1d:c3:32:c5:7b:9e:7c:
5b:53:ea:27:e6:3c:5a:67:9f:43:35:b0:4e:b6:f9:cd:f5:85:
fc:e7:41:16:b7:82:38:ef:1b:7d:4e:ad:8f:7e:82:a3:f0:3e:
4e:3b:c2:91:63:90:f9:6e:d8:9e:93:b7:ed:bb:1d:0a:a2:eb:
c4:20:e8:e3:15:37:d2:c7:57:ae:fe:c3:68:0c:fb:f6:ea:c0:
e8:39:12:e9:e6:64:2c:91:3f:88:00:cf:04:a2:b9:57:1e:2c:
48:e1:5e:c0:44:13:7a:7d:31:c7:7a:61:8c:43:6a:ee:93:87:
ac:65:c8:6e:29:11:bf:f5:c6:1b:40:72:58:17:61:7c:4f:fe:
fa:dd:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:46 2025 by rpki-client