Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa
File: c1c46925-3194-311a-bf74-90ade789f982.roa (raw, json)
Hash identifier: tlA9VWOCSU6EgOhP8I5aLtQ3TdkWS9WeZe+ICywtJqI=
Subject key identifier: A5:DA:EB:BD:6D:CE:FA:E3:30:E6:88:64:BC:F5:80:14:CB:38:39:5C
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285848D64110326DF88C1A2D6B8A00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 209854
IP address blocks: 207.230.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:10:32:6d:f8:8c:1a:2d:6b:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=8aec9608-fda1-4407-b7d2-7eeccbd35f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:20:c7:0f:b8:66:1a:b4:be:1b:9a:42:4c:02:
62:c7:66:64:b9:a1:74:fc:7b:88:fe:4f:53:7b:90:
72:79:fd:ab:9d:1f:73:38:9b:a7:ea:47:cc:fc:94:
6b:56:3a:38:98:e7:46:e6:5a:3b:bd:d2:fc:93:c1:
3e:0b:41:c5:5c:92:f5:f7:e4:49:b5:ab:d0:8e:6e:
a2:3e:41:f0:7e:e3:95:12:57:0b:ee:0e:76:bd:33:
df:3d:54:c1:61:df:4d:31:0f:16:68:53:79:95:e7:
c0:98:7b:87:25:a7:92:d0:2e:72:fc:b2:e9:2e:75:
12:78:98:d0:f1:cf:41:06:ad:d1:67:d7:65:87:b5:
74:55:d6:d6:cc:6e:f8:25:0d:07:71:1d:fc:38:e8:
86:b8:4c:c1:68:84:87:4c:75:b0:4c:ce:61:2e:8b:
06:98:07:b5:f3:a0:49:19:b8:16:bd:72:3f:7f:e1:
c3:ec:84:d2:0c:ed:37:01:c9:09:fd:fa:f4:64:3e:
ed:9e:f3:50:80:0a:cf:7d:2b:13:d1:04:01:61:31:
0e:a5:21:99:22:c0:c2:cd:b8:b0:6b:a8:51:26:15:
9c:91:41:56:11:06:42:89:c6:3b:66:bb:b2:b2:44:
44:aa:2b:9f:e9:7e:55:67:7f:19:1d:83:63:b0:20:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DA:EB:BD:6D:CE:FA:E3:30:E6:88:64:BC:F5:80:14:CB:38:39:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
207.230.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:95:c0:a0:b6:95:47:a7:72:5b:ad:14:b0:e5:03:14:37:be:
24:f6:81:52:8e:e3:ac:28:22:c3:af:d7:1d:13:ba:de:db:9a:
bb:87:1b:22:c2:ff:e4:4b:9f:25:a5:92:57:50:31:a9:d2:fe:
68:9f:c1:6a:89:9d:4a:c5:fa:a8:05:4a:07:f9:7a:f6:b8:3d:
67:6b:90:de:07:fc:32:bf:26:47:b3:19:33:00:4f:a4:6c:68:
14:61:b7:8c:42:6d:c7:cc:91:34:8e:e6:24:ae:26:13:4b:69:
0c:b7:1e:8f:20:14:3b:6d:c4:fa:9c:36:c3:93:d7:99:a0:4b:
b3:d8:00:60:4f:56:d1:7c:7e:73:3d:dd:1f:67:70:11:1e:68:
f2:d0:8c:6f:e1:d0:e8:1b:b5:16:cc:d0:dc:cc:6f:18:85:9e:
01:ad:da:95:b1:b5:ee:a5:9b:e3:c2:7b:cc:1e:7d:4b:5b:ab:
76:21:44:5f:40:55:63:ac:c5:cf:29:92:6a:99:50:95:0e:d1:
e8:f9:1e:b7:99:21:6c:49:8a:93:49:c6:6b:c1:12:6b:3e:62:
f5:b1:fe:ef:29:56:21:fc:9f:9f:05:88:2e:bd:5c:4c:83:72:
5f:68:32:c8:b0:3d:74:ec:8d:b1:72:e3:6b:aa:95:7f:35:eb:
11:7a:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:13 2025 by rpki-client