Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7eeffff2-ead2-3c15-b288-2f9b9a033511.roa
File: 7eeffff2-ead2-3c15-b288-2f9b9a033511.roa (raw, json)
Hash identifier: Mfh+xLMYxcXzxZSO4xs67ohpD5Kr/Ne7yyCFjjHaZhs=
Subject key identifier: 0A:9B:8A:4E:94:A3:F5:79:72:48:03:30:80:3A:E4:6D:C9:9C:DA:7F
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584898D610083FAAFF9E185B9B00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7eeffff2-ead2-3c15-b288-2f9b9a033511.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 4229
IP address blocks: 23.91.109.0/24 maxlen: 24
98.98.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:10:08:3f:aa:ff:9e:18:5b:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=ab792945-8a8b-41e8-b0ad-129364479811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:58:9c:db:4f:44:0c:23:5b:a1:fd:32:c6:
21:00:d5:c7:1a:db:be:b6:63:cc:af:a6:15:00:61:
ad:35:2a:41:36:44:42:7d:8c:ad:e9:43:9f:f0:36:
ea:e0:47:5c:a3:3a:0c:e9:87:df:7d:6b:80:ed:c0:
fa:57:89:56:76:4e:10:ca:de:9f:8a:c1:38:0d:50:
62:d1:e6:b6:10:c9:b7:f2:51:81:d8:99:05:96:a6:
51:f3:04:31:f5:5f:e3:79:e7:26:19:51:e2:52:8b:
ee:0a:71:b9:26:c9:5d:ba:dd:46:04:d4:73:89:09:
74:52:44:3c:7b:fb:84:d6:29:10:d9:de:08:a4:f0:
7a:ca:a9:29:c0:52:33:8a:f6:f5:69:00:0a:0c:0c:
71:38:2e:60:99:53:5f:02:8b:7e:90:67:d3:67:e0:
05:66:2a:51:c0:f7:ee:c5:14:a6:b0:97:21:81:97:
52:ad:95:e8:57:45:82:67:e6:66:7e:2a:08:a9:66:
2f:7d:89:1e:b3:93:7d:8f:2f:c1:83:86:fd:1d:91:
ed:04:4a:73:5a:ac:5c:b8:0b:0c:e7:d5:f7:2a:36:
8c:ee:84:b8:4d:dc:7d:4e:fe:d5:a3:d1:d7:a7:9e:
d6:61:51:3a:81:83:f8:6f:05:70:63:07:a5:7c:3b:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:8A:4E:94:A3:F5:79:72:48:03:30:80:3A:E4:6D:C9:9C:DA:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7eeffff2-ead2-3c15-b288-2f9b9a033511.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.91.109.0/24
98.98.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:11:55:38:75:b7:66:f0:d0:9a:ed:7a:e0:64:7e:6b:be:4b:
df:74:71:a4:b4:92:a7:12:59:27:6e:73:43:a5:e0:0f:bc:1b:
c6:80:ef:1e:12:e1:ef:90:79:e1:df:f0:41:a2:80:87:9d:bc:
e9:63:a9:95:ca:4a:f5:58:66:89:b7:fc:36:ca:8f:4f:d8:07:
0b:7f:60:b7:93:46:e8:09:cd:1e:6d:ce:bd:42:4b:3d:d9:d6:
79:99:0e:12:20:cf:6f:9a:28:04:56:96:55:58:3c:ab:61:26:
8c:32:1e:83:e6:de:e9:e6:cd:13:f6:41:f2:c6:ad:ef:14:26:
d4:00:7f:e2:c7:e8:e1:2d:47:d9:23:66:dd:bb:42:23:87:2a:
b0:ae:5a:21:34:38:f8:81:21:77:f3:84:c6:a7:2b:de:32:ee:
f5:0f:0b:3e:35:23:c5:98:cd:7c:39:a8:b4:65:1d:0f:2d:64:
34:e3:da:57:69:a2:67:61:ff:19:de:d5:b5:63:08:a6:dc:d8:
20:b5:38:42:57:92:a6:35:be:6d:21:23:94:c9:2c:dc:26:75:
80:3a:32:91:2b:62:54:aa:cf:91:56:ce:a4:d3:ed:58:b6:87:
90:c4:1a:a5:38:da:6f:13:69:40:30:5d:aa:81:50:86:3e:d2:
68:b2:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:52 2025 by rpki-client