Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa
File: 23108a10-4450-3a24-b6ea-1b522a5b1f91.roa (raw, json)
Hash identifier: O7P+dIrrVncPP+AS9Y4cSFvNjwtwvKzrhdDnzOxArfY=
Subject key identifier: 99:CA:4B:28:F1:E7:61:67:18:58:36:67:BC:28:B6:C3:A7:8E:31:47
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F43285848090FA6F4FF3EBDAE185668C0
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 62651
IP address blocks: 209.107.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:a6:f4:ff:3e:bd:ae:18:56:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=391ce83a-6b11-4f26-8cde-eb5ff13bd03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:4d:e2:ef:83:07:6c:f6:05:f1:bf:15:06:
6a:ee:47:2b:c1:51:0e:67:72:b0:b1:79:10:82:06:
c2:a3:58:25:d7:7a:cb:8f:44:9b:eb:f7:5e:78:0d:
5c:e9:a2:10:67:7f:ba:b8:d7:8d:0b:75:4f:bf:0c:
d5:26:77:88:36:9f:3f:17:8d:56:6d:a3:eb:a0:c7:
61:e0:ee:96:d7:e0:09:65:69:bf:4a:61:cd:bf:e2:
57:60:a3:74:8e:34:38:cd:e5:51:7e:87:d1:68:b1:
6f:52:fd:e9:25:76:41:14:a1:04:0a:35:a7:4f:02:
30:e5:cc:10:be:7f:fe:87:a3:9e:72:cd:4a:88:20:
b6:e7:84:be:c6:3b:51:26:8b:8f:2d:9e:80:70:01:
69:4c:ec:3a:22:fe:9c:e0:1d:13:78:88:f0:dc:f2:
56:8f:ea:49:19:e6:d3:9f:a9:ff:af:d0:ed:8a:55:
69:ea:df:25:7b:84:7c:ea:24:15:76:43:8e:dc:a1:
da:85:fa:99:a1:0d:e6:7d:2b:41:84:da:60:07:05:
f3:fd:b1:53:59:df:0b:d9:76:10:7d:0c:e3:f4:43:
16:ed:cc:eb:d3:a2:8d:79:37:d6:29:9e:3d:c7:99:
6a:74:e4:fc:24:0a:06:51:89:84:40:9f:3d:cd:bd:
ab:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CA:4B:28:F1:E7:61:67:18:58:36:67:BC:28:B6:C3:A7:8E:31:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:20:b6:2c:2c:a1:c4:7c:c0:17:71:0d:24:21:93:13:7e:08:
40:99:09:26:38:38:10:ba:9e:ba:f9:7a:35:98:d6:56:83:32:
23:56:d1:e5:49:13:52:27:98:fd:66:3c:60:a2:ec:85:21:32:
1c:ca:fb:a2:94:eb:e5:e3:81:dc:a2:7c:66:b7:84:a2:6e:58:
99:67:2e:e2:4a:c2:07:e7:c6:3e:1f:06:03:c1:a6:1d:fa:d3:
47:e7:83:f6:77:65:cf:39:1b:67:db:6e:7c:d5:b8:84:f5:f8:
cd:34:31:46:c6:fa:35:5c:30:b1:01:24:ec:7a:b6:a5:4c:ac:
8c:33:bf:b8:18:cc:98:50:3d:49:18:02:76:7b:fa:d4:42:41:
50:4a:5d:44:03:91:5f:41:d3:5f:c4:fd:93:73:a2:a2:f2:5c:
de:ec:ea:4f:c8:b0:b4:2b:e1:80:ff:ca:a4:79:8c:cf:16:e7:
2d:be:70:2a:e1:80:05:e4:6d:d6:59:e6:86:50:6c:6a:79:35:
ab:05:80:26:31:1e:f4:34:de:aa:46:fd:f5:7e:fa:27:89:58:
f1:da:40:80:b6:c1:07:21:26:f1:1d:19:d1:84:68:a9:13:93:
0f:f6:10:df:db:91:06:06:7f:c8:2b:a6:d8:68:da:5f:92:ec:
a9:74:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:40:36 2025 by rpki-client