Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b758a3a1-a388-354a-8e26-799885652a5d.roa
File: b758a3a1-a388-354a-8e26-799885652a5d.roa (raw, json)
Hash identifier: 4s7v+1LDiz/UMsZJFUO1qIOZYpoupGZBV8ibjW6O6LA=
Subject key identifier: 40:70:DC:7C:F0:43:42:DF:77:98:D8:3E:8E:42:56:3E:45:77:8F:BC
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584919418E41CC5402F818E1C500
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b758a3a1-a388-354a-8e26-799885652a5d.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 393249
IP address blocks: 207.23.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:8e:41:cc:54:02:f8:18:e1:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=dac94917-8a09-43bc-ba95-b03bb79b0e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:b1:a8:dd:7a:d2:e7:f1:af:11:d6:39:9e:
75:3e:84:2a:d0:28:7a:64:ef:a3:1a:2e:0e:36:0f:
58:98:d8:6e:65:69:5e:b8:85:b8:79:45:63:01:f6:
01:51:de:53:db:ef:42:ec:2c:c7:e3:b6:8c:5b:97:
dd:43:5c:e4:fa:2b:85:a3:fb:cb:4a:28:a7:77:62:
22:e4:ac:eb:0d:df:f9:82:8d:c6:6b:1e:96:a6:c4:
b9:1d:da:2f:d3:99:b6:b9:06:40:5c:e0:3f:c7:eb:
94:9e:45:df:73:3d:d7:1e:ba:c6:3b:b7:35:ee:ba:
3b:67:08:21:62:4e:7c:29:fc:9a:5f:72:07:0e:a4:
a7:56:4e:a5:26:97:e8:07:1c:85:0c:82:3f:bc:74:
13:16:24:ef:2f:e4:a3:91:17:b1:09:68:0b:d6:40:
dd:bd:3c:f1:7e:12:5b:af:a2:ac:fd:4b:fc:9f:9d:
74:e2:8e:62:fb:54:f0:8c:c7:90:26:3b:03:38:5f:
c2:fc:94:34:1d:3b:05:6b:3b:f8:32:e6:b3:19:51:
2e:01:64:7a:12:e0:f9:ae:15:4b:09:7c:20:d1:f5:
65:8f:61:34:d5:42:79:47:9a:e5:8a:94:12:33:69:
69:6f:80:7b:c5:4f:39:a0:41:80:c8:15:91:1c:d9:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:DC:7C:F0:43:42:DF:77:98:D8:3E:8E:42:56:3E:45:77:8F:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b758a3a1-a388-354a-8e26-799885652a5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:15:bf:07:45:40:7c:fe:64:33:4e:eb:67:ad:4c:62:52:41:
2b:86:19:79:dc:92:57:e2:c0:09:e9:06:20:6e:84:de:72:ba:
91:4e:d1:26:2b:75:c5:ed:73:b8:3c:95:e6:b6:18:3d:72:81:
0a:4c:2b:ad:93:77:fc:87:59:c2:d0:3f:3a:c0:5b:31:c7:44:
5b:a7:ce:c7:3f:2d:99:26:d0:93:da:04:1d:ae:72:84:6f:b6:
1e:a2:2a:b0:6f:4e:f4:39:8f:65:c5:0f:5a:9e:65:e7:08:0e:
f6:40:73:d1:fa:93:b9:d1:c9:3d:22:a3:28:ce:73:90:d4:8d:
4e:b5:18:b4:a7:82:e7:ad:bb:d2:25:2c:a4:89:a0:01:be:83:
5a:2d:69:19:e8:15:04:a7:1e:74:82:e6:7d:11:e4:77:ff:1b:
f5:b4:77:b5:26:3a:af:d0:8c:89:bd:48:99:25:d7:ed:1a:cf:
1f:d4:60:1e:0b:38:4b:2e:4e:55:f7:fe:3f:f9:76:fc:45:75:
76:83:a3:5d:0f:3a:85:67:c0:fa:e8:79:3b:f7:21:80:43:a2:
22:56:46:ae:bf:9a:47:be:47:53:4f:ab:ee:30:1a:b0:47:85:
ab:57:21:b4:59:47:30:2a:0e:6f:78:6e:94:26:b0:49:c2:d0:
47:f6:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:31 2025 by rpki-client