Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa
File: 21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa (raw, json)
Hash identifier: /b/CcJAKYz+pki7/tbnIVAnoUCfuv0nVxx/5l5S6C+g=
Subject key identifier: FD:92:7F:87:7E:75:BC:E5:FD:31:F8:97:47:AA:86:EB:95:CD:B2:AC
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F43285848EC96A5C8F2107C500C7EBA80
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 62240
IP address blocks: 209.107.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a5:c8:f2:10:7c:50:0c:7e:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=e341a246-3f4e-426b-8951-4c950a93ad8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:dc:18:22:25:2c:42:36:b3:d1:95:7f:d3:
76:5f:43:45:f2:4a:a8:60:ac:fb:ec:a7:5d:7d:45:
46:d6:a2:bc:0c:3d:b0:71:69:43:a0:7b:08:88:1f:
f7:88:23:fa:9f:da:9b:ca:ce:29:49:c1:34:b0:17:
40:bb:e2:b3:54:84:07:5d:18:a7:ba:12:b6:83:a1:
57:ac:e8:ed:2b:2b:34:db:50:7e:2b:87:1e:d2:d0:
24:24:a0:28:84:0a:9d:9b:49:af:ed:0a:a4:95:c8:
07:43:fe:af:db:49:6c:07:0c:57:88:dd:e6:24:2d:
b9:e1:ca:fb:5b:db:b5:ad:b3:c4:c3:0d:4f:94:c4:
c0:91:3b:43:d7:10:71:88:fd:94:00:35:6d:02:69:
84:2a:e1:75:ab:81:1f:bd:ab:b8:49:09:7c:78:b9:
21:67:f5:d7:7c:2e:53:4e:35:28:c0:9c:7c:aa:05:
6c:23:64:3b:bc:b7:13:ed:5f:5a:34:ca:95:db:7f:
4c:3a:9d:57:0b:94:ee:38:6f:db:63:57:61:93:bf:
f1:4b:3e:27:6c:48:6a:62:72:06:9a:6e:95:f5:47:
f0:9b:6d:15:b7:96:08:c3:22:b8:aa:d7:30:3e:23:
db:d2:4a:c8:1c:2a:cc:85:60:6d:da:06:17:95:49:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:92:7F:87:7E:75:BC:E5:FD:31:F8:97:47:AA:86:EB:95:CD:B2:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:ce:3d:25:4e:4f:68:cc:07:b6:24:d3:3a:85:21:80:ba:c2:
2d:b3:a4:e9:f6:24:8c:73:37:e2:29:33:22:11:ce:de:d7:5d:
c2:1d:e5:99:7b:01:e2:b2:96:aa:f5:a9:9a:f4:d1:71:e7:4a:
68:15:cb:62:7f:48:1f:d2:4d:f2:14:62:a0:67:54:d4:42:31:
c1:d4:d0:f8:60:4d:d2:39:e8:bc:9f:58:49:9b:56:20:61:0f:
24:96:b2:ca:0f:53:40:b0:2a:84:52:89:b9:dd:ed:43:ec:1c:
29:06:c6:9b:02:f0:3c:c5:5e:3e:a0:53:1e:e2:eb:5d:59:53:
19:d0:c2:f9:0b:59:a2:c9:67:45:25:51:ba:bc:ce:0e:18:49:
8c:43:22:16:19:7b:0b:eb:1f:f2:79:9a:7c:bd:c1:85:55:4b:
9e:cb:4a:6b:57:a6:c8:15:03:00:7f:3a:df:a8:d6:eb:d1:78:
34:70:a7:ef:71:cb:09:e4:21:1d:e7:9b:34:11:88:e1:06:40:
bf:bd:d7:b2:5f:46:16:e4:b2:61:3e:11:fb:7b:69:5a:66:b4:
7d:f4:a8:e0:59:ed:08:c8:cb:4c:a9:64:9b:12:fb:db:7a:4a:
31:de:a2:18:77:35:e2:1a:9d:fd:3b:b7:46:9b:6b:df:86:eb:
48:d4:6c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:19:28 2025 by rpki-client