Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/f72e9ac0-b88b-3ad3-8b97-4beaa42f9bbb.roa
File: f72e9ac0-b88b-3ad3-8b97-4beaa42f9bbb.roa (raw, json)
Hash identifier: 5TqyXPdQTv6nyBs0gETLchTSbnjYRCznai2hlgTG8OQ=
Subject key identifier: C0:9A:84:2A:70:A1:2B:50:52:04:61:FD:16:66:72:FC:EF:E6:E8:06
Certificate issuer: /CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
Certificate serial: 010D0C9F43285848960B5B1572449F73304E4400
Authority key identifier: A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/f72e9ac0-b88b-3ad3-8b97-4beaa42f9bbb.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 23.148.128.0/24 maxlen: 24
2602:ff0d::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5b:15:72:44:9f:73:30:4e:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=76115d82-971b-4528-ad74-246d7d3f94fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1e:19:c7:c6:44:58:7f:05:a1:cf:75:2b:60:
8b:08:23:e2:38:86:6c:de:86:fc:ee:e1:c2:b6:a5:
11:df:d4:e7:55:0c:73:be:db:1c:92:90:cf:e7:a5:
10:a9:9e:d7:e7:3f:ac:e1:ac:3d:d3:2b:90:a5:11:
ce:e7:27:b8:d2:6e:51:5b:1b:17:ac:6b:87:d9:fe:
af:3f:e0:f9:e9:31:bd:c3:f2:cb:34:04:02:4f:13:
0c:3e:76:03:ff:7e:f1:eb:2f:cb:e1:0c:ea:43:34:
51:28:8d:cb:f0:a9:16:50:8f:97:59:df:41:3c:66:
27:cd:18:a7:6c:9e:c2:f7:7f:7f:e9:92:61:43:47:
8c:44:42:63:8a:ca:2c:bb:8c:36:83:f1:59:bd:db:
f6:68:c9:c5:70:05:f3:46:2e:a1:ff:a4:3f:d0:4a:
01:9b:1f:18:1a:b4:76:65:cc:7d:6b:7a:7a:9c:e1:
9e:b4:43:97:31:b5:32:af:d2:42:1e:16:e4:c1:78:
2b:9a:69:ba:a8:b0:e1:f2:37:1e:5e:41:ea:9f:38:
4c:81:24:87:73:a5:22:88:95:3d:88:a5:7d:55:fe:
e5:b5:1f:1e:ce:1c:8f:05:b5:13:82:d8:c3:69:c5:
9b:73:71:3e:35:5d:35:e2:37:c6:b4:ea:42:6c:9a:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9A:84:2A:70:A1:2B:50:52:04:61:FD:16:66:72:FC:EF:E6:E8:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/f72e9ac0-b88b-3ad3-8b97-4beaa42f9bbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.crl
X509v3 Authority Key Identifier:
keyid:A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.128.0/24
IPv6:
2602:ff0d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a6:aa:09:88:0a:93:b6:31:f0:39:7d:3d:db:a7:2d:a4:a8:
fd:ec:61:0f:51:dc:fd:5e:2d:27:91:b2:c1:cf:25:6f:c5:b3:
ce:92:d9:dd:62:42:af:bb:85:8f:26:c2:ac:1e:67:4f:84:d0:
2a:d2:3f:e9:05:a3:82:a4:d4:1a:d4:d9:9b:ec:59:37:d2:34:
a9:ec:55:39:23:57:e9:79:c7:5e:b2:cd:98:ef:f5:74:10:f5:
b9:b5:9f:44:08:bd:b2:f8:7f:66:af:43:e3:34:d0:c7:7b:41:
d5:da:81:48:51:0c:42:78:22:6d:97:61:56:08:6b:8f:db:00:
a5:2e:b8:ee:cf:b2:10:2f:0e:dc:8a:f1:8a:7f:05:c0:25:d7:
91:04:01:e1:97:b0:a9:64:fd:a7:b1:31:b5:49:f8:ed:db:9a:
3e:90:1a:81:3a:46:1b:bb:90:e9:04:f2:df:2e:0b:94:91:aa:
7e:f1:7c:1c:f9:6d:e9:fc:79:7a:2c:c9:b1:05:dd:03:d7:a8:
40:86:e5:aa:f5:21:92:ef:4c:e9:90:f0:72:84:9e:69:68:85:
c9:ed:82:40:b6:59:95:fc:1d:c2:08:12:1c:e9:16:be:af:7d:
18:9a:db:e3:51:e1:ff:7b:50:5b:24:09:5a:7a:43:e0:51:3a:
fc:6a:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:20 2025 by rpki-client