Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa
File: 21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa (raw, json)
Hash identifier: GYVk1XIXZelhE5fF4QsGmvyBx087OZiYUSXmGxV7fP0=
Subject key identifier: FF:83:D0:60:6F:0D:8D:E7:A9:1E:3E:B0:1A:0F:5C:32:AA:96:22:59
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F432858480BDA557B9F4CA0875B23E180
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 62240
IP address blocks: 209.107.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:55:7b:9f:4c:a0:87:5b:23:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=3a62f280-5640-43d4-af4a-ff7a80ffd55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:02:6b:32:40:e7:6e:5f:bd:83:8e:35:6b:
2d:be:3a:02:b3:84:02:5e:96:0e:09:61:cc:74:52:
59:ef:9a:4a:f7:cf:02:63:ca:17:cd:3e:0e:73:eb:
46:a9:d5:4f:71:e9:97:37:2c:03:71:bc:f1:78:aa:
54:2d:b1:be:c9:14:e6:67:80:24:3e:86:8b:5e:2a:
35:bf:c8:61:fc:18:3e:f8:2e:fe:14:5d:9a:8e:5d:
c7:fa:a8:00:44:d8:38:5a:ef:9d:1b:cb:62:44:d0:
57:b1:82:8e:ff:a9:45:f1:a2:0b:05:8f:a0:bc:cb:
17:4d:69:dc:16:70:6c:81:a6:51:45:7c:0f:92:f0:
a5:d8:d3:69:2a:61:53:9d:4e:fa:6b:9c:58:91:b1:
d9:aa:d1:69:c5:d6:a5:cb:ae:37:6f:08:7c:55:b8:
7a:f4:f8:d2:71:86:30:99:e7:bd:68:0e:d7:bb:ce:
4a:36:dd:d2:8f:69:e7:df:f0:ac:d0:0b:bb:39:53:
b6:4a:50:e0:ef:ad:f2:cd:88:59:c1:10:84:eb:5b:
27:9b:bb:6e:b9:6a:bd:5f:bd:c0:3e:25:a1:fe:32:
c8:49:21:1e:1b:5b:da:24:0c:a8:0d:b0:62:08:11:
2f:20:36:cf:a5:9c:a9:eb:47:ce:90:a1:70:4d:d9:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:83:D0:60:6F:0D:8D:E7:A9:1E:3E:B0:1A:0F:5C:32:AA:96:22:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/21ab033e-43b4-38f5-92bd-9cc6081b6c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:23:ab:1a:05:88:f5:69:b6:9b:40:c6:04:8d:92:e7:30:61:
ad:09:9a:92:38:23:b0:3a:fa:44:b0:0b:db:8b:1c:69:f7:8a:
97:12:66:e3:7d:f9:5f:c8:8f:93:91:73:55:ac:0e:80:61:0e:
d6:47:e8:20:cc:df:af:5e:96:ff:86:b4:53:dd:0c:94:a6:30:
dc:f3:67:91:c9:70:3f:a2:9c:4c:9b:c3:63:7a:a3:71:d1:32:
c0:d6:4b:07:b8:72:20:b9:8b:28:ad:e6:65:5c:0a:15:68:80:
e9:b7:f3:30:34:20:78:a5:38:ec:67:e9:74:3d:b7:26:42:8f:
c4:b8:b6:0e:22:eb:6f:3f:c1:24:d7:54:82:fa:a2:87:4e:51:
9b:5a:2c:cd:8d:c2:c2:da:8d:b8:4a:ba:a7:7d:08:59:82:33:
86:c2:e4:2e:09:a0:8f:5b:e2:e9:ce:7a:a7:d7:e5:da:f6:bf:
d6:9a:a8:81:08:3b:d5:27:94:2d:be:ca:28:d8:3c:92:fd:1f:
c7:73:eb:e9:49:15:8d:97:73:09:94:1a:b3:3f:aa:8c:4f:cf:
eb:ce:01:a1:71:a4:1a:87:43:cf:9e:f6:b2:81:1c:f7:bb:89:
5d:cf:4d:1b:37:07:e5:52:3e:09:49:97:1f:7b:30:77:d6:ea:
ef:da:08:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:51 2025 by rpki-client