Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/91f57ef8-2a0e-39f3-8aa6-4e6767d17226.roa
File: 91f57ef8-2a0e-39f3-8aa6-4e6767d17226.roa (raw, json)
Hash identifier: xxJpSjnwes3vDFB9uk5jAqaYSwV5ePGAB4B6Z90cH/I=
Subject key identifier: AD:EB:64:C1:17:C2:26:04:F4:0F:6F:BD:E0:2F:26:22:84:43:8F:53
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328576D51CC73C042CFC16E3E0060D3
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/91f57ef8-2a0e-39f3-8aa6-4e6767d17226.roa
Signing time: Tue 05 Nov 2019 23:57:22 +0000
ROA not before: Tue 10 Apr 2018 04:00:00 +0000
ROA not after: Mon 10 Apr 2028 04:00:00 +0000
asID: 22691
IP address blocks: 207.198.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:3e:00:60:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 10 04:00:00 2018 GMT
Not After : Apr 10 04:00:00 2028 GMT
Subject: CN=c81fec8c-3e40-48b1-b967-8199728711c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:6e:88:21:3b:be:a6:ce:36:17:1f:52:e5:
63:1d:cb:14:bc:61:12:7e:7e:4b:be:7a:ed:a5:95:
69:d4:ce:ca:55:b3:0d:58:7b:73:aa:b9:50:5a:b0:
c5:35:85:8a:51:28:30:5a:e8:94:7e:e0:74:b2:18:
a1:97:95:c1:0c:7d:9a:8d:58:87:ce:17:70:64:8b:
a0:be:af:f9:7a:57:d5:d2:4f:e0:5f:ca:36:4c:5d:
aa:0f:82:80:e8:6e:00:85:0d:c6:6a:0a:7a:44:08:
20:a0:2a:91:5c:99:e7:e0:c3:dc:61:ad:91:24:dd:
38:04:13:40:61:eb:5e:a8:df:a8:2e:84:f4:5f:e3:
d8:aa:60:b4:b2:e7:66:f3:8e:56:d7:c9:2e:5c:98:
26:5e:4f:da:10:60:62:2b:df:59:68:bf:60:b8:d8:
a0:c8:ed:27:7f:26:b2:0f:51:bb:3f:2e:e9:dd:5a:
e2:48:39:04:a1:14:a7:41:3b:81:d3:4c:3e:5d:44:
b1:2d:fb:02:fc:5f:53:f7:0f:c0:e6:ba:4c:97:01:
39:e5:ab:c3:23:6e:70:b1:87:26:89:03:54:02:22:
84:35:78:dc:e4:67:61:51:57:74:49:e8:10:5d:e7:
34:93:c1:94:b0:01:4d:00:2c:44:e1:cc:98:0b:70:
eb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EB:64:C1:17:C2:26:04:F4:0F:6F:BD:E0:2F:26:22:84:43:8F:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/91f57ef8-2a0e-39f3-8aa6-4e6767d17226.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
207.198.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:51:e7:47:a2:7c:96:51:7a:79:82:a9:a4:7a:54:65:27:d0:
9c:d4:35:56:ad:8f:12:b3:2a:cf:08:d4:2c:3c:b3:63:6f:8f:
97:18:80:4b:0c:90:e0:fa:d1:eb:54:f4:ea:dd:f8:19:2c:f4:
37:6a:55:8e:5a:aa:77:3b:60:9f:2c:14:03:3c:d4:5e:a1:be:
e3:2a:67:e2:22:72:f0:3b:2a:cd:77:7a:ef:b5:fe:70:33:28:
23:8f:0d:02:0a:4d:2b:0a:d6:00:40:a7:ed:02:6e:df:fa:bc:
f5:4b:2b:6f:73:91:b2:5a:d6:d7:5b:f6:09:a6:68:5c:f8:0c:
e6:f5:59:4e:06:0f:4f:fb:02:4f:ce:9f:3f:e0:8c:48:3d:db:
e7:d8:ce:e0:a9:be:f3:a2:bd:a1:c7:8c:ea:43:06:74:b8:ff:
44:8b:96:34:3c:df:b6:81:1b:e0:a0:3f:38:ca:5a:fb:e7:5a:
f0:34:b9:eb:74:5c:78:41:65:24:44:41:1d:b4:a8:0d:06:05:
70:80:32:c5:1b:4e:66:16:b9:7a:43:ef:74:02:f2:dd:41:cb:
ae:2c:51:ec:0b:fa:0e:a1:b6:a3:a6:9f:b6:cf:d6:0c:ae:da:
d0:9b:9f:3c:89:95:4c:a6:33:82:86:6d:79:f0:04:d4:90:1e:
8c:d7:00:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:16:13 2025 by rpki-client