Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86fcbe2d-01fa-39b0-91cc-8965465be9a5.roa
File: 86fcbe2d-01fa-39b0-91cc-8965465be9a5.roa (raw, json)
Hash identifier: rqxl32JYsMX55+yxj3b3EDI/1kbaO/rqi3WB2FPbEVA=
Subject key identifier: B7:D7:06:CE:68:75:9F:1A:89:2B:D9:45:BB:6A:DA:C5:19:AC:86:CE
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285849029E68F1260D53EC62E59540
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86fcbe2d-01fa-39b0-91cc-8965465be9a5.roa
Signing time: Wed 26 Feb 2025 11:24:37 +0000
ROA not before: Wed 26 Feb 2025 11:24:37 +0000
ROA not after: Tue 27 May 2025 10:24:37 +0000
asID: 30036
IP address blocks: 107.167.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:9e:68:f1:26:0d:53:ec:62:e5:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 26 11:24:37 2025 GMT
Not After : May 27 10:24:37 2025 GMT
Subject: CN=442a25be-ec18-43af-b80c-67d41fad6848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:3e:24:68:e5:1f:42:ee:dc:6f:90:65:29:
11:b5:26:68:cd:39:de:2e:f9:f1:24:93:20:c6:9e:
75:ff:e0:58:2b:58:8a:4b:04:d1:0e:ce:fd:1e:38:
75:c4:14:10:07:05:97:7f:58:58:88:b9:f2:a7:3b:
c0:70:e8:df:28:df:ce:c6:16:61:f4:47:00:1d:fa:
26:b8:e7:1a:a5:57:e9:84:2d:3a:ab:00:41:d5:7b:
96:91:92:ec:3b:ec:4c:75:02:16:d2:c4:87:88:d5:
9b:40:95:43:1f:4e:c9:8f:41:82:43:38:94:14:2d:
c3:08:a0:a2:5b:52:cb:c1:0a:1f:67:6f:33:df:b5:
04:3d:f1:fb:50:67:7e:16:59:3a:78:ce:2d:da:ba:
8f:cb:09:17:78:c2:21:4a:43:97:12:0c:f1:78:7f:
b2:04:6a:c5:9e:a5:2d:83:3b:9b:27:eb:0c:18:60:
d4:01:c2:36:ae:96:03:40:ed:c9:39:3d:da:c1:98:
82:d6:cc:9f:fe:2e:f8:bb:1b:b3:3e:8e:cd:0e:fc:
5c:16:a2:c8:e0:fb:f6:58:0b:b5:0a:c3:3d:e8:30:
ab:df:81:46:5b:c0:a7:5d:91:ef:e2:39:5c:f7:cb:
2f:fd:fd:df:87:c5:dd:3f:ed:89:60:34:5b:86:34:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:06:CE:68:75:9F:1A:89:2B:D9:45:BB:6A:DA:C5:19:AC:86:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86fcbe2d-01fa-39b0-91cc-8965465be9a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
107.167.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:44:b9:2b:38:27:d9:27:2c:f1:ea:e1:d3:35:d8:37:2e:b9:
75:95:01:a8:29:65:f3:3c:a6:34:5f:03:75:d6:3c:45:3f:f7:
ba:83:2f:52:5c:29:e5:03:00:ed:df:6f:ff:c4:d9:26:95:fe:
de:cd:6f:2a:fa:31:4d:d0:18:a3:7c:ec:31:f6:51:5d:4d:f9:
af:d4:cc:60:e6:4f:4f:c0:55:3a:89:ef:c3:80:fd:19:af:ea:
90:5c:af:72:b2:fb:8f:28:81:27:30:8c:64:bf:8a:d5:7b:74:
70:5a:cc:79:4d:81:48:cb:97:84:61:1f:db:e1:0f:62:e5:c9:
3d:0a:cf:c5:a7:0a:5e:bc:63:63:e0:8c:66:df:f3:6c:26:8e:
21:03:6d:ec:b5:fc:ac:31:7a:d0:3c:8b:1f:c8:96:b5:63:63:
85:fb:61:47:12:27:04:16:d1:d7:07:e4:82:02:67:68:17:6f:
02:dd:b6:59:f1:bb:93:82:8a:23:2b:eb:ff:da:b9:67:75:42:
27:f5:d5:8c:c3:f6:d0:ee:e4:84:94:63:57:af:d8:d2:fd:bc:
98:29:e5:d8:fd:bf:e4:8f:4f:38:d9:6c:34:0e:48:33:d3:27:
ab:94:4b:cb:6f:97:6e:16:13:d6:0c:05:28:d2:bb:37:e8:c3:
12:d9:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:50 2025 by rpki-client