Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/38788932-00ab-3089-9e2a-44887f398caf.roa
File: 38788932-00ab-3089-9e2a-44887f398caf.roa (raw, json)
Hash identifier: QNQWnoSAQ1qsQ2fs/RUu6h5qS4SDmBrfDCQ3JP0bxWc=
Subject key identifier: A9:DD:72:C5:AC:EC:9C:49:BE:90:05:00:2A:C4:94:29:80:89:77:D7
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584886B07C06C3E6B9FD7F30A680
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/38788932-00ab-3089-9e2a-44887f398caf.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 271
IP address blocks: 207.23.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7c:06:c3:e6:b9:fd:7f:30:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=de82b480-d3d5-4791-85a4-180409466d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:39:ff:b9:2d:4d:5b:c7:14:be:5c:8d:95:
55:91:c4:cc:eb:1a:ed:3d:7a:01:9b:99:d2:87:37:
14:a7:62:ef:a1:0c:b5:2e:3c:c4:44:b1:84:6e:c8:
76:9f:5f:5b:b7:85:65:30:30:e6:d4:5a:31:29:c2:
bd:30:87:6b:3a:7b:8b:41:3e:e5:5b:03:52:ff:dd:
5d:8e:04:b6:ac:7a:4f:b9:2a:05:28:82:cd:30:71:
a3:b1:11:5d:5f:87:2d:56:8e:ee:09:ae:65:49:bd:
8a:46:24:99:ad:39:c6:92:a6:93:dc:c9:e0:25:02:
6e:b5:5e:26:0c:5c:2a:c8:e1:85:54:90:78:b0:28:
b6:c0:40:c0:5d:ab:99:ff:13:8a:05:c9:42:a4:2e:
28:bc:1a:d7:94:10:b0:a9:6d:52:fe:94:04:78:93:
ab:7a:f8:d0:9e:07:dc:bd:53:73:2c:d4:cb:3b:46:
cd:af:23:13:6d:c6:44:90:90:68:35:42:f9:d6:7b:
4a:5d:23:41:e3:51:ac:ee:63:c6:a9:9a:59:ab:6f:
11:31:67:ad:e5:d7:29:39:23:88:7b:d4:e9:96:4b:
77:8b:c2:85:58:a4:9a:ec:53:72:17:ba:d5:5e:18:
dc:d5:cc:00:40:dd:38:af:3e:3c:6a:39:30:f4:3a:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:72:C5:AC:EC:9C:49:BE:90:05:00:2A:C4:94:29:80:89:77:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/38788932-00ab-3089-9e2a-44887f398caf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:f4:8c:b4:d0:11:a0:9f:8c:a4:46:62:b9:69:1a:41:48:68:
d9:c6:54:6d:bc:dd:93:ff:6f:83:cc:e6:72:ca:db:30:ab:55:
71:4c:b2:a7:f8:70:6a:73:ab:a1:b8:b1:f6:d6:98:f1:bd:cc:
c9:4c:9a:91:90:93:ab:0f:c2:18:04:0d:76:bf:fd:18:8b:58:
70:6d:06:6b:a9:3c:93:8f:fe:36:80:34:b2:09:38:52:8a:f2:
c5:33:13:66:fc:bb:b1:51:25:50:93:a0:81:6a:5f:46:94:46:
0f:80:c1:04:8c:a0:4b:e9:2b:e5:40:42:db:fe:d8:e9:28:ed:
2c:d1:55:74:c1:22:c2:5c:ec:53:3f:74:3b:de:08:b6:c5:f1:
50:e8:3c:e8:c4:0c:b2:41:32:d2:84:4b:dd:87:fe:e3:c3:4c:
04:87:40:ca:2a:c5:58:a0:3e:f4:2d:ff:ef:40:33:f2:18:c9:
c2:98:77:d0:77:cc:70:87:fb:37:40:c7:68:0e:ae:e0:4a:36:
12:8c:57:0c:21:f4:16:a4:a9:03:df:ac:e2:39:a0:a0:ae:2f:
da:29:16:44:6c:31:b2:cf:53:d1:86:07:19:4a:54:c4:11:a9:
2f:7e:f2:0e:b6:ee:88:c4:cc:4b:22:11:ba:4f:c0:11:59:52:
ab:d5:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:21 2025 by rpki-client