Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/089df9ae-2f5e-3c3d-aaa5-23952fdcddf4.roa
File: 089df9ae-2f5e-3c3d-aaa5-23952fdcddf4.roa (raw, json)
Hash identifier: +N2BtGJWioJoyN/TDK3AKPAB0StQKMXGhmyWGSxfc3Q=
Subject key identifier: D1:FB:93:6C:CA:51:7B:22:62:05:29:4E:57:33:2D:CC:DA:86:CB:EC
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F4328584882809491A14EB7F0E84D2D00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/089df9ae-2f5e-3c3d-aaa5-23952fdcddf4.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 11105
IP address blocks: 207.23.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:94:91:a1:4e:b7:f0:e8:4d:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=23d7cc09-9503-4cae-a728-e05970fdb7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:a8:11:a9:40:3c:b7:8d:93:e9:30:9b:81:
31:26:91:ac:d6:18:8d:0a:1d:0a:c2:83:d5:16:b9:
11:d4:08:fe:70:24:4a:37:e9:2c:14:eb:8c:7e:7b:
e4:86:6f:07:33:27:d6:7b:04:e9:46:ab:f9:56:45:
68:3d:0f:57:af:97:fc:64:18:8f:dd:45:40:35:05:
eb:12:c1:bf:04:a3:eb:91:cd:c0:a8:ee:81:21:89:
7f:1b:02:6c:34:a2:d6:0b:65:cf:09:5c:79:88:63:
bf:eb:d0:97:73:ba:32:41:a8:23:b9:9a:f9:3b:b0:
4e:d2:43:12:e2:1f:cd:48:0f:c8:90:e8:41:bb:c1:
24:16:5e:72:8d:ee:6c:c3:c3:b5:90:b9:f6:29:a4:
3c:6a:20:03:06:55:b4:c7:3c:eb:34:15:2f:5b:9c:
7e:5d:82:31:a8:2d:07:c4:f5:ab:dc:ed:d2:02:d3:
31:aa:60:5c:90:14:23:84:69:04:29:5c:d9:78:2b:
77:2a:6e:27:76:0c:5e:32:91:eb:2a:ff:dd:74:0b:
ec:88:ab:ac:b6:86:48:db:61:95:bf:a8:4e:d6:f0:
bc:39:a1:ca:3a:c1:5c:fb:93:33:4f:29:e4:62:04:
a9:04:bf:d5:7b:b5:90:f0:53:f7:f3:b0:a7:b2:9d:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FB:93:6C:CA:51:7B:22:62:05:29:4E:57:33:2D:CC:DA:86:CB:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/089df9ae-2f5e-3c3d-aaa5-23952fdcddf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:b8:d1:fe:93:1a:68:fb:2b:59:82:49:69:3b:2f:4f:7e:a7:
24:c3:5b:43:19:1a:4a:03:85:12:06:34:06:03:a7:89:e6:17:
d4:61:55:65:16:04:64:fb:66:89:31:d7:80:10:33:36:e7:dc:
7a:e8:71:ac:af:c6:c7:04:ae:f8:32:57:e0:53:1c:83:4e:cb:
25:52:67:c1:39:89:54:6a:70:20:e4:f4:9b:3a:09:ab:eb:4d:
55:54:cb:d9:21:da:c1:ae:40:2e:fa:a6:8a:18:9e:57:8a:20:
6a:88:03:30:22:bf:af:75:e3:ae:ca:02:17:4e:72:1b:18:42:
32:9f:9c:98:dc:7d:84:5a:ea:d0:03:96:3f:80:f7:f2:43:cf:
c6:33:40:b3:c3:67:07:a1:a6:9b:c2:a4:a1:2e:83:f1:9a:76:
de:14:96:a1:3d:58:b2:5a:69:f2:35:6c:3f:02:55:4e:e4:c5:
a6:21:78:ed:63:9e:7d:ae:56:b3:0d:43:4d:ba:ee:d4:3f:31:
a9:00:c2:60:97:76:2f:b3:d1:27:a5:cd:58:a3:cd:6f:59:b4:
85:67:1b:05:5c:4b:5d:56:65:05:74:08:36:a1:92:93:35:04:
b4:f9:1c:b6:d2:8c:bf:93:7f:a1:4a:6f:68:80:09:f0:69:09:
81:e2:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:51 2025 by rpki-client