Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ba68ace-a9cc-344a-98a1-d9552fab4136.roa
File: 6ba68ace-a9cc-344a-98a1-d9552fab4136.roa (raw, json)
Hash identifier: fn7W3vrzoUPIRX3rxDSRGJSgtWL8MNzeYJkpV0fti5o=
Subject key identifier: BC:BD:12:88:15:20:FC:41:0A:B6:82:54:8E:BA:95:90:F1:88:3D:5B
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858487FB5DCC5B124867EF4411680
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ba68ace-a9cc-344a-98a1-d9552fab4136.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 989
IP address blocks: 8.30.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:dc:c5:b1:24:86:7e:f4:41:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=340a5f17-5e8b-472f-973c-748db4e11622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:94:9f:f1:33:5e:f4:cb:53:e6:05:e4:f0:
b4:26:fa:36:1d:48:62:c8:f8:93:b9:c4:b0:d2:c1:
99:d5:63:38:56:99:b5:1d:b4:06:eb:b3:c1:3f:95:
8d:2b:64:9a:73:02:16:66:aa:f5:8f:3e:af:24:ad:
b0:3d:72:db:de:09:c9:ca:98:50:5b:5e:ea:56:c9:
ed:e4:5b:39:43:53:43:59:35:f5:69:7c:0b:f8:48:
2c:d7:ea:24:61:d0:a7:16:e8:71:36:f0:c4:76:78:
6d:4f:99:f4:dc:e7:58:83:f2:46:4b:03:59:9a:45:
9c:4a:2f:1b:46:db:4e:e7:fb:7d:98:cb:dd:7d:d4:
41:57:15:ae:b5:92:d7:ef:4c:cb:70:c3:75:04:c1:
78:fe:22:c9:da:a9:18:30:1d:5a:a0:e9:5e:df:7b:
3a:a5:97:82:f6:8e:36:90:98:66:20:3b:c1:69:fe:
9d:e0:e7:93:7c:13:d5:e6:99:fe:a2:3d:13:4f:08:
04:df:27:ba:9e:fc:89:58:fc:b4:02:2a:d6:ec:8f:
64:44:17:ac:c6:09:51:12:a7:be:80:2c:8d:5b:39:
55:02:64:e0:ed:bc:fd:1c:e5:a6:a6:3a:c0:c5:a4:
da:ba:41:31:17:ef:c1:92:3f:06:2b:be:4d:9e:92:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BD:12:88:15:20:FC:41:0A:B6:82:54:8E:BA:95:90:F1:88:3D:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ba68ace-a9cc-344a-98a1-d9552fab4136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.30.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:0a:e3:0e:7e:15:14:ee:b1:71:b0:59:df:23:ec:f7:67:59:
3e:ed:ca:6f:4f:cf:1f:fe:e3:53:df:67:58:77:f0:f5:46:44:
a3:49:16:3f:dd:aa:1c:74:e5:f4:df:7e:84:0e:73:db:08:68:
bf:50:41:50:a6:6f:72:dd:e2:f3:46:fd:a6:d6:00:34:be:d8:
ba:d6:b9:5f:02:76:6e:2b:32:48:2d:b3:06:1a:ac:6d:0c:d5:
06:db:b2:11:f2:ec:89:dc:d7:b1:f4:75:0d:4d:9d:93:da:4d:
1b:d0:60:01:da:c1:7e:f3:2c:1b:31:79:d3:82:bf:0c:7d:d1:
0a:c4:51:71:d4:94:24:88:55:8c:2d:7d:9c:8a:e9:db:2d:e4:
b7:67:33:7e:b4:9c:17:f3:b6:8f:2a:0e:ff:ce:44:d2:eb:0c:
c1:f4:8f:9c:d0:f8:63:00:97:42:0e:71:ab:94:cc:3e:df:24:
e2:16:36:31:cc:f3:14:6c:da:b2:5a:58:4b:fe:d2:9d:6b:10:
36:22:fb:4d:21:0c:a2:f3:1e:0e:31:d4:c2:16:d2:56:26:4a:
9f:9e:b8:82:d8:88:b3:0e:54:75:b1:40:a1:af:09:e9:0e:a4:
08:8c:1d:d2:22:42:f2:70:98:5f:ba:ea:11:ea:01:40:55:80:
67:6e:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:32 2025 by rpki-client