Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa
File: 226257d4-f43f-3f67-b662-d0922b1e31e3.roa (raw, json)
Hash identifier: eH1SixlSmPa5YG1XiIP2qdnVAy1F7fKlqUoclvisFQY=
Subject key identifier: EB:0E:4B:FF:F3:F9:5B:8E:7B:96:71:18:83:4D:49:C4:75:53:B2:93
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584882809597FA118169DAA7C320
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 397543
IP address blocks: 207.23.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:95:97:fa:11:81:69:da:a7:c3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=ec91d34e-742c-4d24-91c8-78754422f33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ff:31:10:c0:35:28:b7:a6:5e:30:da:e3:ff:
40:af:13:e0:2d:5e:f5:dc:9b:20:f1:e6:4f:63:48:
f7:5b:99:9a:4c:9d:6c:b5:ae:f7:a1:77:55:98:92:
01:fa:fc:bf:ec:f2:0b:45:3b:44:92:a6:e6:a4:a2:
78:6b:be:56:6d:a6:85:1d:73:c0:f7:78:f9:de:d5:
6b:c6:f5:d9:a9:8b:ad:8d:3a:e8:c9:53:66:18:bc:
61:ee:c8:86:be:0b:ac:93:ff:8b:56:75:4b:e7:d2:
f9:cf:20:f4:fe:4f:93:40:68:a5:45:63:89:b7:fc:
0a:2b:d5:15:b3:2a:b6:24:18:3a:3c:7d:99:93:45:
45:95:e9:a3:68:0e:93:6e:56:08:eb:06:07:01:f1:
3e:ad:43:9d:eb:50:78:b9:20:fc:63:d4:55:39:32:
54:c4:7d:20:64:3a:99:51:52:36:27:11:ba:9a:3b:
84:a5:79:53:6f:bf:84:41:e8:15:24:32:2d:50:a7:
3c:40:19:0b:e4:14:a7:be:dc:1c:5d:b1:47:ab:51:
1f:17:66:fe:88:a3:04:19:0d:7a:93:85:27:a6:e9:
2a:7f:80:9f:63:58:9d:c2:32:01:40:23:43:af:3e:
a4:2a:b1:c8:64:1a:74:25:97:a2:03:d2:51:86:05:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:4B:FF:F3:F9:5B:8E:7B:96:71:18:83:4D:49:C4:75:53:B2:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/226257d4-f43f-3f67-b662-d0922b1e31e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:69:64:6d:54:f7:d2:39:3f:26:f7:59:2d:37:a5:3c:8a:71:
7b:e1:57:09:33:ce:3f:04:c6:3c:9c:af:cb:b6:ef:3a:1e:74:
f4:44:b5:be:28:41:07:ff:20:b0:8f:40:cf:51:14:b6:37:d6:
40:4c:69:09:28:d1:b6:e2:dc:09:94:0c:94:1a:61:a6:87:70:
6b:73:72:9d:86:d6:f8:4d:22:42:ab:a2:e3:0c:c6:64:dd:41:
0f:5e:95:2e:e5:85:47:e8:f7:9f:3f:d6:63:af:a9:79:40:f5:
7c:e0:e9:28:c1:49:fd:41:8e:11:95:5b:14:35:f8:a6:e4:1b:
56:32:49:fd:80:8e:b3:d8:08:1b:a7:ba:97:1f:c2:e2:b4:1c:
bc:6e:c2:77:c4:4b:a0:3b:4b:0a:a0:01:13:fe:8e:eb:6c:bc:
56:e4:0b:a1:6e:08:a1:34:d1:52:45:1f:46:e6:03:54:c1:ba:
70:7d:d1:5c:4f:88:24:00:cb:05:15:1c:57:d3:26:fb:05:b9:
1c:5e:10:44:ce:8a:0b:f4:3c:9c:a3:80:ef:b7:b6:2b:4c:0e:
5b:05:8f:4d:97:eb:63:59:42:a4:d9:25:6f:2e:3e:ff:52:3b:
b5:9c:e1:99:ef:b7:7a:30:01:37:3b:11:c7:e2:a4:ed:0d:0d:
9f:e7:59:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:31 2025 by rpki-client