Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa
File: ea7ca2b1-e689-373f-a9ca-9e3008107917.roa (raw, json)
Hash identifier: Czj7TDX6ePrKaQCCi1lweZc+ezSJU1A4+gMQ3BXrzpo=
Subject key identifier: AF:33:E1:6C:23:B3:60:6B:AD:A8:2C:50:B7:DB:36:C9:C3:C6:B9:07
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848159FFC470A1FD0D96AF14D80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 28753
IP address blocks: 23.19.197.0/24 maxlen: 24
2607:f5b5:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:fc:47:0a:1f:d0:d9:6a:f1:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=b7cdf425-7774-434f-a83b-f17454efe1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:51:6c:b2:b7:bb:24:40:a4:49:60:04:7d:
25:a6:28:a9:0e:ca:cb:a8:bf:8e:e4:b4:a2:ed:5b:
12:93:4b:6a:32:97:fb:8b:d7:5c:4a:19:93:25:81:
7e:f1:b3:f1:4e:72:c3:2d:ca:af:d5:de:56:ba:1f:
95:2d:12:fd:a6:67:2c:4d:9a:0e:21:17:2b:56:d0:
ce:3e:7d:76:10:a0:10:21:4a:aa:73:38:52:c6:a3:
65:d0:05:bc:f2:f6:ed:db:c8:91:ce:49:d3:72:43:
02:8a:d7:17:09:da:98:6a:d7:23:92:90:33:92:59:
14:b0:47:40:95:8d:29:b1:60:ee:9a:00:73:46:c4:
d4:83:5a:aa:f5:06:db:2b:a8:ed:de:f8:65:20:3b:
63:44:1e:dd:52:19:b6:c6:f1:04:c9:cb:a7:d9:b3:
31:9b:27:97:96:12:61:19:41:84:a2:2f:f8:19:5b:
0b:8d:76:55:3f:30:58:3a:6b:64:b9:e4:8b:72:f1:
4d:64:e8:4d:32:31:3a:1b:7e:8f:12:67:ea:8b:7d:
dd:92:e4:ca:7b:6b:98:e6:5c:e9:eb:aa:ed:6a:07:
0d:93:03:9a:08:59:d7:7f:72:03:56:c5:ff:69:ab:
19:39:73:c3:05:54:fb:76:0c:a1:40:6c:69:92:3d:
a9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:33:E1:6C:23:B3:60:6B:AD:A8:2C:50:B7:DB:36:C9:C3:C6:B9:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/ea7ca2b1-e689-373f-a9ca-9e3008107917.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.197.0/24
IPv6:
2607:f5b5:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:f6:b5:23:c5:01:c2:84:de:37:1d:d1:eb:98:c1:f1:bc:20:
10:04:d0:45:a4:a2:29:98:00:31:02:d3:da:62:6d:3c:99:51:
fb:3b:50:f7:b9:77:bf:9f:73:97:2d:b0:b6:85:81:d4:6c:fe:
d9:26:7e:02:36:cd:71:da:51:ac:46:bf:65:4b:89:a0:7e:d3:
00:0c:7a:09:8a:f9:eb:06:54:17:b0:ce:f2:86:04:1e:ed:a1:
be:71:87:73:de:56:42:bc:b8:e8:dc:ce:2b:b1:52:a9:bf:d8:
77:f4:79:71:3c:7a:18:aa:6f:85:2d:ee:fb:dd:f0:97:33:c5:
e2:a9:64:8a:ce:b9:9a:18:58:66:21:c9:2d:94:1a:ea:5c:92:
80:4f:04:d3:39:97:1b:d0:2f:db:2c:80:f9:56:46:69:da:d5:
cd:df:9f:60:77:0b:98:0e:98:e0:25:3f:26:cb:9f:2a:9f:6b:
11:0f:2b:ae:4f:f4:00:8e:e6:fe:55:3c:64:26:ac:39:10:42:
22:52:ab:da:c0:3b:27:31:c6:e4:2a:99:9c:b4:27:f9:53:4b:
f0:2a:12:7d:57:54:45:10:ef:08:a6:ec:27:58:27:ed:24:60:
06:1d:79:31:23:2d:38:d7:fa:3b:70:36:93:e9:d6:3e:df:00:
50:1d:7b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:32:38 2025 by rpki-client