Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ac65614-f40b-3045-9991-1b68e7b268b9.roa
File: 7ac65614-f40b-3045-9991-1b68e7b268b9.roa (raw, json)
Hash identifier: 8NvyOQHxrbE6OVVXx1bcAgPzgVTV000TXP1iYtZA+Hg=
Subject key identifier: D0:49:6C:F1:8A:25:BC:12:74:E6:40:42:A0:B3:F4:56:2F:3C:E6:05
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584886B07C251805A236F3540E40
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ac65614-f40b-3045-9991-1b68e7b268b9.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 397375
IP address blocks: 207.23.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7c:25:18:05:a2:36:f3:54:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=a23909e3-978e-4a0a-ac3d-1970d34e3ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ca:ec:77:1f:6c:cb:39:68:0d:c2:8c:fc:dd:
c2:fe:67:4e:75:6a:27:be:0a:49:b7:32:51:ef:3c:
3a:70:ab:a2:3b:5e:1d:c5:d5:e2:09:6f:c9:4e:16:
41:cb:b1:12:c1:21:7a:6e:8b:5d:84:ef:6d:05:0b:
d8:65:bf:ac:45:f2:6e:5c:43:5c:b0:16:45:d9:a7:
ef:be:d8:7c:13:f6:94:7b:58:00:db:8f:1d:0f:f4:
49:ba:f9:ac:4b:f0:35:b3:bf:8e:fb:88:8f:b4:f6:
d2:98:3b:1e:93:f5:f9:22:c3:16:a1:b9:46:cc:da:
8f:39:9d:d2:42:70:02:db:18:3d:74:36:66:ff:e1:
2f:62:03:aa:c4:7f:8a:9e:d1:f2:3f:4f:56:11:b8:
c5:7a:92:b3:17:b8:09:96:db:22:64:1d:1d:26:b2:
a6:17:fe:34:14:8f:22:18:d6:9a:ae:b5:cc:59:cb:
98:dd:56:57:f0:6e:41:b4:b0:53:62:07:ad:5e:5b:
d8:a0:66:d6:05:d3:f0:79:f6:e4:fb:fe:77:0f:09:
a6:33:7d:d0:9b:6d:3b:16:f5:9b:97:3f:43:bd:2f:
e4:b1:e2:20:8b:a7:c2:a4:2d:d6:83:b9:51:4e:a1:
32:64:72:17:18:d3:99:2d:8b:29:1b:6b:c5:99:7c:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:6C:F1:8A:25:BC:12:74:E6:40:42:A0:B3:F4:56:2F:3C:E6:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ac65614-f40b-3045-9991-1b68e7b268b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:7a:e5:bb:7a:a1:46:8e:27:ad:db:79:fb:58:ad:a7:63:d7:
75:25:fc:6f:72:67:6d:fd:28:82:23:45:a4:03:ef:9e:54:f8:
a0:25:91:b4:77:8f:f9:f2:02:0f:78:50:2b:67:76:09:64:c5:
69:0f:c1:1a:0c:71:e8:b6:5e:c9:ea:75:b7:08:40:7b:5e:e6:
55:b8:58:10:36:0c:66:79:2c:3b:47:f6:d4:df:02:b9:f2:2e:
97:2b:ed:89:9f:b4:05:b8:42:02:36:51:b7:03:bd:93:17:4c:
ce:62:f4:3b:02:ed:f1:29:73:87:9a:79:ad:61:45:38:97:6f:
19:35:30:49:17:d5:0b:96:87:fb:e2:1d:bc:86:3f:b2:77:a7:
51:44:2c:a2:d1:6e:c3:3c:f3:91:23:d1:13:c1:f8:a1:27:b5:
a5:cb:a4:ad:2f:fb:82:64:18:ec:0f:73:c7:4e:40:35:79:c2:
c2:0e:2f:97:f4:24:db:90:c4:47:8f:83:cd:40:71:b8:9a:08:
c9:45:4c:47:95:83:29:cc:85:0b:aa:2e:0e:57:af:8d:b2:3a:
0f:d8:1b:ee:c8:16:9b:e6:04:14:0d:69:90:72:ac:21:ff:c8:
65:6b:ea:55:13:67:fc:21:b5:a4:13:a7:9e:26:48:cc:04:b0:
ac:09:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:20 2025 by rpki-client