Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40f2502b-beb7-34c9-aaac-b479848aa819.roa
File: 40f2502b-beb7-34c9-aaac-b479848aa819.roa (raw, json)
Hash identifier: LQDv8cj0I5RAclEa5iS8UARtG1ROVGx0H8Fc58qcZ4A=
Subject key identifier: BE:A9:0B:41:18:21:A3:AC:A6:98:30:07:93:A1:41:65:08:FB:DF:FD
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285848D0ABC54D317204FD820EBE00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40f2502b-beb7-34c9-aaac-b479848aa819.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 44477
IP address blocks: 23.230.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:c5:4d:31:72:04:fd:82:0e:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=42f9e643-e5de-46bb-b31a-d3180c060513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:46:7e:fd:5a:a9:37:09:88:66:5a:05:45:
f0:ff:70:31:60:6d:38:73:7d:5f:e3:4a:4f:96:32:
e0:0f:f5:43:95:f9:22:31:12:cd:fc:2d:4c:98:b5:
5a:b3:47:6e:da:1e:c2:26:4a:07:7a:15:2e:e5:43:
f8:93:01:f3:fe:7a:02:fc:71:a6:a2:cd:01:9a:da:
4a:1b:f0:c8:0a:72:20:3e:b0:da:ae:f6:ea:8a:6f:
81:4a:be:c8:d0:8d:91:a1:01:60:16:8d:1b:29:50:
2b:5e:8a:81:4c:39:88:41:99:c7:79:26:5a:bb:cd:
76:fc:c7:9f:9b:cc:05:5f:1c:1d:2d:e9:4c:f0:6c:
e7:5e:ca:d7:1a:5f:5d:5d:e5:3b:5f:eb:f6:b9:0d:
2d:c2:85:be:25:3a:0a:db:14:55:5f:b4:0a:87:58:
bc:9d:2f:76:43:64:17:a7:0b:5c:87:c7:b6:55:1d:
ae:1c:d3:e5:14:47:25:30:eb:b6:db:ab:e8:97:b6:
1f:33:f9:51:06:62:23:af:37:07:db:c6:cb:7e:05:
07:57:04:ec:a7:ea:72:3f:e5:a7:2f:92:3b:9c:ca:
36:7e:55:b0:e3:54:b3:f4:19:20:da:f2:cb:51:9b:
6a:c6:4f:22:40:1c:f4:24:2f:f8:0e:fe:38:e3:c5:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A9:0B:41:18:21:A3:AC:A6:98:30:07:93:A1:41:65:08:FB:DF:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40f2502b-beb7-34c9-aaac-b479848aa819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.230.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:a7:00:53:c7:a8:23:69:3b:d4:ae:ed:40:1e:b3:ae:0d:34:
37:c8:a8:6b:a6:63:de:7b:7c:ad:04:90:b0:07:b9:98:d4:02:
b6:13:76:34:4b:bc:23:7c:a6:6a:7f:dc:02:bf:2d:5e:82:05:
6d:80:22:0b:13:df:e9:13:58:2f:ec:2b:da:ee:e0:f1:4c:47:
98:9c:e4:40:c6:f8:86:1c:f9:25:37:35:f9:9a:09:be:58:fe:
e8:64:20:3c:1c:d6:78:ec:53:db:28:c6:12:6b:58:a3:79:93:
b9:59:cd:b8:2e:01:87:ee:77:0a:ab:77:9d:1c:3f:f4:60:aa:
7f:bd:a7:85:d6:ab:3a:a6:68:79:c9:49:f8:48:d0:d5:e5:e8:
fe:63:00:bf:45:39:77:65:da:a0:5d:88:c1:66:2f:d2:25:93:
fe:65:a6:43:fa:6e:a9:42:75:09:0e:1e:53:2d:10:04:0c:2f:
72:ce:f4:4c:f8:4e:95:1e:f7:2e:e7:f4:1b:1a:f7:f4:57:15:
23:a8:18:75:c7:5d:ea:c4:89:9f:f0:98:5b:eb:7d:e0:7e:22:
ba:bc:1a:b2:77:07:27:ea:69:1d:7c:ba:55:cd:c9:b1:08:da:
ab:8a:28:aa:f7:0f:1c:2d:df:16:95:f3:cc:84:2b:08:66:c6:
22:62:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:45 2025 by rpki-client