Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3f82cdde-c2b4-38d3-a824-4741830db185.roa
File: 3f82cdde-c2b4-38d3-a824-4741830db185.roa (raw, json)
Hash identifier: NeRwHOEKVeBGiAHiklSJkhUYYDWSnh2jOQYRZNtd/XI=
Subject key identifier: 5D:DF:F1:01:74:FF:95:07:6B:54:B2:89:E9:D9:CB:B9:D9:65:AF:37
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858482EC00AEF5465AB582F9BF760
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3f82cdde-c2b4-38d3-a824-4741830db185.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 271
IP address blocks: 207.23.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:0a:ef:54:65:ab:58:2f:9b:f7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=de5c7c64-9b6a-4a25-bcae-ff649c6cd676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:bf:b2:22:29:13:62:77:58:20:80:fe:3d:
64:e5:ad:7d:46:0a:d6:87:e5:d9:6a:ad:a8:b7:40:
be:bd:ab:19:71:11:32:3a:d2:37:b0:83:af:bd:19:
fa:7f:58:a3:16:42:f6:f2:d3:72:8c:c5:09:b7:3e:
67:f5:29:a2:2c:17:4d:3c:d9:b5:99:e5:53:21:d7:
76:a9:01:16:cd:a0:47:6d:d0:d4:00:67:74:70:fa:
95:a0:c8:c7:30:ec:0f:21:45:68:1e:15:6c:b0:3a:
1a:3b:f8:6a:d7:bc:cb:c9:7b:f5:ad:e2:31:ff:35:
7f:b4:78:1c:7b:d7:4f:74:65:d1:53:5a:8a:de:5b:
a7:bd:f0:6f:7f:4a:1d:42:be:02:5e:3c:4d:4c:95:
c7:6c:7f:5b:9f:cc:bf:bf:52:d4:d3:8f:9f:49:ef:
c8:c1:c7:07:29:a0:54:43:38:73:09:4c:e7:f2:65:
40:e7:87:72:0e:51:99:c8:71:d6:c8:5e:2b:99:af:
5f:fd:36:4f:d0:46:68:f6:69:f6:7a:69:58:1c:0f:
4b:aa:d9:67:3f:5d:7d:27:56:df:af:a0:23:96:20:
db:ae:92:ce:5a:02:79:73:d5:f1:bc:d3:18:d0:d0:
ed:08:9d:dc:3f:f7:26:d6:87:66:00:5a:22:55:1c:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:F1:01:74:FF:95:07:6B:54:B2:89:E9:D9:CB:B9:D9:65:AF:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3f82cdde-c2b4-38d3-a824-4741830db185.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
207.23.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:50:cf:5a:54:77:e9:a3:00:02:95:c8:cc:85:89:e6:15:f2:
82:60:11:b4:09:93:e2:a3:b8:d4:e9:54:64:1b:26:f8:5f:97:
28:1c:d9:80:63:b0:2a:40:08:d8:60:06:24:28:75:75:56:fa:
f0:26:44:fa:98:e6:c5:1d:65:af:46:0a:02:19:86:3d:e1:18:
44:65:93:50:85:c3:56:26:e1:1c:fc:73:12:a4:10:00:3b:5a:
82:32:56:51:0e:d5:4c:fc:a7:91:fa:7f:9e:5f:7b:71:26:17:
f9:07:87:fc:1a:2e:ec:19:a4:70:ce:12:2b:9c:5c:ec:f1:1c:
75:99:5c:75:90:a2:0f:b9:57:2b:bb:b2:e7:f7:25:a9:8f:e3:
c7:77:04:29:47:24:b4:34:43:f6:78:73:ae:a6:91:bc:dc:f3:
d2:56:38:b3:46:40:08:24:40:4c:eb:ee:fe:05:7e:f9:4c:8e:
22:78:cc:0d:f6:a8:2b:c5:01:c2:bc:e1:43:23:e4:be:eb:fe:
e0:dd:ac:85:cc:fe:7f:fd:d9:73:58:3a:4c:be:92:0d:95:12:
0c:c1:5d:e3:47:97:72:3b:85:78:3f:ff:91:24:e5:84:44:60:
83:6a:92:a8:d6:db:96:49:6b:f8:c8:54:d0:bd:bc:0f:f7:44:
67:1f:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:00:52 2025 by rpki-client