Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa
File: d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa (raw, json)
Hash identifier: A4X1/kewZXPPs317SEYJp1kHbuhSHugfPur4PjdPijY=
Subject key identifier: 0D:2D:F4:E0:6A:64:44:AB:19:1E:44:CB:97:C7:AD:FD:17:72:E2:07
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285848222FE35667EFBE5500EF3A00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 35997
IP address blocks: 207.67.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e3:56:67:ef:be:55:00:ef:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=3adeb1e6-836e-497c-a435-b44831547e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:17:7d:58:e7:9d:fc:1d:27:f4:8e:a6:f8:
62:3a:dd:f6:ba:80:4e:b4:72:43:8e:ab:01:a0:d5:
1e:be:26:eb:54:1c:92:e4:0c:f0:c5:9e:3f:6b:91:
e9:23:2d:eb:4b:fd:f0:7f:62:d9:f8:67:7c:b4:e8:
67:28:a8:0b:81:06:46:f8:e6:87:9b:de:7d:8c:62:
67:05:7e:e6:83:c5:a2:d3:34:e6:d8:db:d6:07:86:
d9:e7:e3:29:e4:36:34:86:01:9b:2c:c9:bc:5e:64:
a0:21:f1:01:f3:e7:1c:b5:49:e2:5c:c5:08:fd:11:
37:67:d7:05:fc:3e:18:83:87:a4:e0:cb:ff:03:67:
15:75:a4:16:74:b6:e6:a6:02:de:2f:2f:64:d4:9d:
97:2d:8a:ce:53:6f:05:82:33:5f:fb:72:01:76:b3:
fd:18:78:34:39:cc:18:fb:bd:d3:ae:c8:a0:c1:82:
5a:24:b8:c8:7a:d1:c3:51:65:26:6a:b9:75:73:d6:
0d:b9:a9:7c:da:ab:db:ad:34:2b:cb:62:9d:e5:b8:
ef:d2:dd:71:eb:b0:2d:70:c3:d3:aa:5e:47:f3:ac:
aa:88:c8:39:be:0c:60:6a:78:bc:6a:67:9e:7d:a2:
3c:2d:f7:13:8a:66:ab:ff:65:d0:13:2d:d9:cc:db:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2D:F4:E0:6A:64:44:AB:19:1E:44:CB:97:C7:AD:FD:17:72:E2:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.67.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b2:8f:b6:91:d9:ad:b6:f0:a8:e2:1e:d3:60:42:e7:85:f6:
35:b2:ee:7b:3d:7c:83:84:27:ef:d5:92:36:f5:8b:c9:2d:f7:
ef:8e:c3:29:30:51:8f:56:c3:59:10:fd:dc:9f:b4:19:93:0d:
9b:63:e5:20:1a:e9:64:f2:ff:81:c1:08:f7:9c:a1:13:98:bb:
ef:7c:eb:7a:92:85:a5:36:9f:34:d8:64:94:7b:f6:93:dc:b7:
db:4f:2f:c7:cb:d9:c4:71:aa:1f:25:00:0b:ed:ec:33:07:ba:
9d:94:b7:f6:41:1c:25:cb:f7:a6:5c:fc:5c:3c:41:a2:9c:ef:
39:35:11:7f:7f:0b:4d:1c:4a:f6:71:41:13:fa:b5:0f:cf:95:
8e:da:60:b1:77:34:3c:5c:b6:82:76:8d:78:c1:d1:47:78:c4:
77:8f:6f:cc:f2:b1:42:dd:e9:15:46:f8:a5:17:5f:61:aa:26:
2f:f6:3e:98:e2:51:ca:17:10:83:b2:94:a8:97:6a:e8:5b:4c:
0e:f8:30:de:48:c0:9a:51:0b:ef:b6:43:8d:50:60:50:7a:34:
31:34:9f:57:03:3a:e7:19:34:a4:c7:f6:4a:50:b1:1a:a6:e5:
c7:4b:b1:12:fd:c1:66:80:9d:1c:e7:da:c4:4e:45:20:44:0e:
ce:83:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:41:57 2025 by rpki-client