Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/a9ef1dd3-971a-352a-8601-5da36a79924f.roa
File: a9ef1dd3-971a-352a-8601-5da36a79924f.roa (raw, json)
Hash identifier: PHbvHZhK0xzcusyHaB7excm35waiXt7AmEzcvxZKU1E=
Subject key identifier: 56:75:91:3B:24:58:43:77:59:6F:5E:0A:0D:EE:51:7C:E3:4D:FD:AC
Certificate issuer: /CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b
Certificate serial: 010D0C9F43285848D0ABB88DC3EC199824C73680
Authority key identifier: BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/a9ef1dd3-971a-352a-8601-5da36a79924f.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 202662
IP address blocks: 23.143.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b8:8d:c3:ec:19:98:24:c7:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=49f602da-3d32-4066-90a4-f8811a375371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:dd:60:90:e6:be:40:6c:f8:e6:ad:54:38:
94:7d:df:3b:fc:5f:14:cb:6c:91:8e:ad:67:3f:07:
df:3f:66:35:63:25:37:a7:79:af:ba:a0:5e:1a:fe:
71:96:2e:46:b7:e0:a1:78:41:f9:2a:49:a7:3a:09:
f9:01:73:af:bc:f0:ec:7a:e2:3f:00:b2:08:f8:79:
46:b2:54:27:c7:29:49:61:c5:68:a3:0f:33:7b:33:
a0:33:2e:41:38:73:2d:3f:78:0f:e9:fc:53:de:66:
18:63:58:c4:e0:7e:2b:f8:3b:cd:ce:2e:74:08:8f:
a9:1f:d0:44:ae:ad:19:c9:33:f7:2a:f4:ea:7c:75:
df:f8:20:0f:d4:3e:e1:f6:f5:0b:a2:35:d6:0b:1c:
50:c2:4b:af:d0:82:d1:f5:34:38:d2:3d:42:61:bd:
9f:ab:d6:09:7f:07:98:a3:34:dc:2a:57:85:5a:0d:
6e:3a:d0:56:c6:d3:87:0e:bf:d0:8b:55:bc:e6:e5:
8c:95:47:a9:96:89:d1:a0:f4:d9:db:dd:0a:33:f5:
9f:b5:0f:20:2f:3c:fe:93:fa:3c:0f:4a:7c:17:4f:
11:bc:68:2c:88:f4:88:a0:9d:5c:8b:80:ed:55:49:
47:bb:4e:f1:30:4d:79:8b:00:75:3c:6c:3a:13:ed:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:91:3B:24:58:43:77:59:6F:5E:0A:0D:EE:51:7C:E3:4D:FD:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/a9ef1dd3-971a-352a-8601-5da36a79924f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.crl
X509v3 Authority Key Identifier:
keyid:BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:13:97:05:63:ac:8c:7a:b1:99:54:8d:0c:45:e2:44:2d:58:
74:0d:b6:5b:dc:65:ab:20:5f:32:49:f7:d3:80:73:f1:9f:73:
d3:a7:1c:39:64:be:ff:f7:38:14:a7:5d:6a:8b:f6:7a:2b:e0:
64:15:5e:a3:3b:a3:cb:6e:a8:e4:c9:70:e5:ed:c2:f1:03:9e:
de:f0:f9:62:ae:9d:95:76:d0:91:2a:bf:a8:87:87:c1:06:19:
b8:b0:9b:13:4d:88:c7:0f:6d:28:f8:ef:aa:b6:e5:a3:f5:ce:
89:5d:09:c7:2b:63:ca:d6:77:68:07:92:5d:bf:c0:de:ea:3a:
b1:8a:c6:5d:c0:05:35:7f:28:b4:c2:61:34:33:95:a4:b3:b9:
88:e1:8c:09:0b:f0:a4:93:3d:6b:14:ba:75:1b:12:1e:9b:8a:
ff:0f:44:39:32:ab:02:73:c2:df:6c:ed:c5:21:b8:27:80:68:
03:e2:a7:51:e1:14:83:6e:7f:64:39:40:8b:66:6d:59:c3:24:
c5:cb:29:d8:2d:7c:2d:68:a2:6b:41:8b:b8:5a:e1:e4:72:bf:
98:b4:73:fc:d7:2e:82:2b:90:d5:11:84:fd:85:bf:57:c3:b6:
92:5f:08:3c:f4:f9:4a:be:0b:8f:16:4c:30:96:db:e8:22:f5:
20:84:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:17 2025 by rpki-client