Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
File: 52166749-1228-3cb2-be42-612a2e17d6bc.roa (raw, json)
Hash identifier: FrlvTcq+5y++0xJs3MTIgr9mGksLd4pjElPY7YFaV5U=
Subject key identifier: C9:C1:1D:39:51:41:BF:55:3B:6B:0E:13:FE:C4:0C:43:85:22:1F:93
Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial: 010D0C9F4328584940397DB46C2F81F7BBB3C000
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 401009
IP address blocks: 23.177.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7d:b4:6c:2f:81:f7:bb:b3:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=9ad36c52-e04c-48e8-8365-7a70d7a5869a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:0c:20:3e:e5:6d:4c:16:c5:e3:54:a6:fa:
d0:f9:bf:cd:db:18:0b:0e:28:ab:2b:53:7f:19:4a:
24:24:55:98:a7:6b:1c:c5:d3:6b:73:8a:bd:d5:ae:
28:e5:13:49:96:8b:5c:34:05:3c:77:fb:b7:17:b2:
56:5c:09:25:b7:1f:08:44:d3:41:34:f7:da:ca:4c:
8b:86:a6:ab:7d:71:ab:81:01:ed:1b:9e:bc:ee:8d:
fc:cb:a4:39:6d:eb:55:c4:ab:f3:6a:6a:a7:a0:8d:
44:d5:21:ea:4e:6f:02:1f:30:c5:44:fe:53:5f:ff:
07:9c:84:c5:db:a6:ca:af:19:bd:f9:58:54:52:33:
2a:e5:67:3c:b3:e6:d8:26:31:11:37:f0:dc:1b:f7:
46:32:f2:1f:b0:08:39:c9:28:11:5b:71:a0:12:f9:
c9:33:4d:08:38:b4:de:d2:30:04:07:92:3a:48:67:
d2:47:55:0a:d0:f5:5e:62:42:d9:a6:a4:41:e5:65:
c9:c0:8b:8a:22:b3:d1:91:80:29:0a:f5:3a:27:46:
b4:49:04:2d:3d:61:73:6f:e9:6b:04:8c:ac:7b:e3:
c4:54:c3:42:22:c6:a6:12:28:ab:92:ea:e6:9a:2f:
d5:e9:1a:77:8a:15:96:ec:28:03:fb:0b:72:1c:5a:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C1:1D:39:51:41:BF:55:3B:6B:0E:13:FE:C4:0C:43:85:22:1F:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
X509v3 Authority Key Identifier:
keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.177.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:4f:a1:7b:c1:e4:c3:4f:48:e1:49:ab:91:2d:15:69:90:25:
e0:50:44:bb:01:66:6a:dc:e2:2c:94:c0:1c:80:de:28:da:4d:
27:83:ba:41:74:2d:e3:c7:20:14:c7:ad:34:8f:4f:b0:b3:06:
7e:0b:19:66:7d:c4:97:90:ad:fa:47:c6:2e:58:db:fd:ec:fe:
6b:58:ed:24:bc:fd:3b:9e:d1:ce:22:45:34:c3:3b:1a:8b:d2:
3d:21:73:ca:7f:99:2d:84:10:d5:61:62:34:95:84:e0:a3:1d:
c2:5b:00:35:2b:9d:13:54:45:32:6f:7c:d3:08:ec:6c:cf:cd:
8d:c2:3c:56:e0:d1:f9:ae:cf:a1:a3:2d:34:78:24:ca:93:4b:
4a:f3:fd:bb:29:a7:b1:f0:30:28:e7:14:39:0f:68:55:9e:29:
24:6f:fe:71:5c:fb:9b:48:91:1f:03:7a:56:ca:67:f7:8f:d5:
58:cc:78:70:09:ea:20:99:b5:7a:86:19:bd:1b:7b:32:c9:67:
28:9a:a0:b4:62:d9:a7:db:8b:b8:c3:29:71:e7:70:44:48:93:
1d:de:23:f5:cb:bd:08:d8:7f:7d:8b:15:72:cb:40:47:45:5c:
3c:45:62:ae:82:10:63:37:3c:39:05:47:12:16:07:4d:5a:51:
9e:7b:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:16 2025 by rpki-client