Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa
File: 0209baa9-389a-393c-b685-be2cd86201f7.roa (raw, json)
Hash identifier: GOhNpEvGh5itT7TFYJaCC77Z+J/u9ll2OtodiAHy2NI=
Subject key identifier: C4:B9:88:41:03:E4:BF:FA:4B:CF:59:1A:71:DE:AD:3A:30:88:CD:3B
Certificate issuer: /CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1
Certificate serial: 010D0C9F4328584804DFB9B4AC6E1FEA3FD9B5E0
Authority key identifier: 68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa
Signing time: Wed 27 Nov 2024 14:00:52 +0000
ROA not before: Wed 27 Nov 2024 14:00:52 +0000
ROA not after: Tue 25 Feb 2025 14:00:52 +0000
asID: 398310
IP address blocks: 23.157.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:04:df:b9:b4:ac:6e:1f:ea:3f:d9:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1
Validity
Not Before: Nov 27 14:00:52 2024 GMT
Not After : Feb 25 14:00:52 2025 GMT
Subject: CN=8e52ec7c-764d-459c-a989-bf4ed35e9149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:68:46:d4:8e:51:ea:6e:56:8d:d7:d1:7b:
ff:34:9d:63:e8:b9:a3:70:e0:55:c0:e2:63:44:27:
44:fe:77:81:19:c4:ec:02:32:93:7b:4d:50:45:bb:
3e:fb:85:cb:37:99:97:1d:f0:54:80:dd:2e:cc:b6:
fc:f0:38:c0:ea:0e:a5:51:16:ef:9f:04:82:f5:47:
11:0b:1a:ef:f4:21:c3:da:dc:3c:67:d3:07:bc:aa:
76:4d:63:16:b4:e7:02:cc:dc:45:2d:c1:31:5c:21:
3c:7e:0b:b6:0a:c1:56:66:ee:00:75:89:27:53:42:
ee:f7:5d:fe:f2:a6:98:bf:96:aa:9b:ff:54:13:c5:
de:66:17:ba:78:b0:e0:90:30:f0:4a:64:4b:ba:92:
a3:4b:2f:f3:21:77:39:bb:9b:fe:ae:09:71:3a:74:
08:88:d4:d5:f8:6a:f0:66:1b:a5:94:ce:cf:94:f0:
3b:9b:74:36:74:da:57:c6:5a:b5:33:ff:2b:18:29:
48:41:03:b4:64:e0:de:bf:91:2f:8a:21:ce:b8:67:
49:45:a4:84:ee:5d:38:44:b3:af:e2:54:92:0e:8e:
5c:39:68:e2:ab:86:e4:69:f3:ff:e3:6c:c2:2b:d8:
d9:8f:9f:99:b3:c6:e9:06:c5:b8:0b:23:40:92:54:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B9:88:41:03:E4:BF:FA:4B:CF:59:1A:71:DE:AD:3A:30:88:CD:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl
X509v3 Authority Key Identifier:
keyid:68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:e9:99:ae:b5:4d:de:03:29:8c:24:ac:cd:00:9d:ab:0f:36:
fe:ee:4d:52:79:b2:f8:24:bd:15:d6:1e:1c:21:c7:76:cd:80:
15:d7:0c:2b:3f:de:eb:85:2b:5d:f0:46:d4:ad:ff:8b:d4:af:
c0:b7:8f:4d:78:95:9c:05:cb:c3:5a:61:f9:b0:fe:b6:df:19:
c9:ce:da:b1:33:22:61:13:dd:49:4f:54:36:97:79:74:56:c5:
a6:b7:56:ee:97:b4:74:39:c2:70:29:78:a0:8f:52:ad:7d:7e:
b5:fd:97:7e:d4:07:34:89:f4:e9:71:c1:19:45:83:ba:92:19:
09:df:76:45:cb:9a:b0:1b:5f:3b:90:33:d3:52:4d:ba:6a:ea:
26:aa:ad:c2:6c:69:19:08:61:ed:79:3c:70:0b:92:d9:76:ae:
b0:fd:43:74:08:09:df:de:11:a1:a9:7c:50:46:70:78:66:4a:
84:1a:86:8f:a1:67:3e:e1:35:4a:c0:a9:63:f8:8a:56:36:57:
da:62:7c:15:08:0a:9e:41:6b:45:ad:e0:cb:c3:d8:bc:cb:8e:
a8:ef:58:12:35:56:a0:e2:2d:ba:fd:b0:61:63:85:01:73:6b:
4b:63:39:a4:a3:32:1c:80:0a:1a:d5:56:be:62:3f:e7:ad:5b:
1f:13:e0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:41 2025 by rpki-client