Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/f1a81da6-2388-309b-8b1e-df542cbc1f2b.roa
File: f1a81da6-2388-309b-8b1e-df542cbc1f2b.roa (raw, json)
Hash identifier: 3Dsjgdz22KalBpjIJkFhGiBEDtJrfTkp8YDe21slNlA=
Subject key identifier: 14:EF:FE:97:7B:BD:C7:78:A4:6B:88:59:63:07:B1:A5:F5:81:F1:5D
Certificate issuer: /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial: 010D0C9F4328584909E6A655E5C8C741C1B02A00
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/f1a81da6-2388-309b-8b1e-df542cbc1f2b.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 198100
IP address blocks: 23.175.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a6:55:e5:c8:c7:41:c1:b0:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=a62ee702-9f42-4ab0-b086-12d7409a7d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:30:18:5d:01:d8:80:62:25:8f:37:0c:87:
f4:2e:48:b7:cc:c9:b6:63:a7:84:93:f0:b1:08:70:
a7:ce:5a:63:7d:78:56:21:7f:7e:bb:91:82:fb:46:
ab:f8:e8:b8:2c:9d:a8:83:ba:4f:5a:2c:2d:2e:13:
d4:8e:c7:4e:88:5e:27:4e:db:7f:7d:9f:14:da:17:
0b:fe:d4:76:ac:73:89:3f:20:4b:a2:05:e6:30:30:
ac:de:f3:c3:36:cc:f0:df:cb:fb:d5:c4:12:2f:15:
86:f9:51:b5:1f:4f:99:3b:ba:25:b7:95:fa:bd:85:
42:4d:da:59:d0:1f:c7:9c:1c:72:a3:2f:25:0c:b9:
73:ed:45:97:11:b7:7a:14:f7:6e:25:b4:0e:77:62:
6e:e3:c3:b2:13:f7:72:eb:e1:e8:12:48:ea:f7:e2:
36:c4:af:c3:17:8f:49:d1:59:14:66:39:69:72:91:
26:10:7a:57:70:fd:93:0f:83:33:cd:ba:ff:fd:51:
01:7f:9c:bf:8b:df:3b:33:29:56:cd:74:e4:43:6f:
af:97:25:eb:8d:94:0d:0c:a9:89:83:3b:e3:b0:9b:
d1:39:5b:8a:2e:31:15:7d:d4:bb:b9:f1:ba:0b:92:
23:c9:e1:91:cc:60:43:c3:97:cb:29:4b:e6:b2:32:
07:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EF:FE:97:7B:BD:C7:78:A4:6B:88:59:63:07:B1:A5:F5:81:F1:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/f1a81da6-2388-309b-8b1e-df542cbc1f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
X509v3 Authority Key Identifier:
keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:c2:34:d3:7e:b8:e3:3c:af:69:b5:28:5d:bf:1e:28:82:6a:
ce:2c:40:d3:a9:ec:df:5d:2b:5a:1a:13:67:3c:d0:a8:a3:70:
eb:72:b1:38:63:74:73:62:f7:44:5b:0d:c1:51:36:4c:eb:11:
03:d9:ac:7f:c3:37:08:75:b7:f6:7c:4c:ab:e6:3e:57:5b:0b:
5b:53:d2:11:42:ca:95:01:ac:ac:66:d6:52:51:1f:a9:f5:21:
3e:e9:2d:d9:fd:b7:4d:40:2b:f9:ba:11:9c:c7:ca:c5:03:0d:
51:cc:4e:65:e2:88:63:42:78:d8:a7:73:dc:41:fa:25:8d:da:
fd:1f:fc:b2:2d:10:0f:d2:52:fa:08:d4:b2:bc:ce:16:28:66:
e8:73:f0:d1:dc:07:fe:8c:57:51:a7:b5:4b:01:3c:0e:71:e5:
5d:ea:bd:b8:ba:ee:75:95:6c:ad:3c:08:df:16:01:bb:c3:61:
17:52:d7:48:22:b6:c0:9b:ea:a3:dd:df:f5:47:a9:5f:0c:95:
e6:15:b3:db:81:77:e2:26:8f:cb:cb:ed:b6:ba:1a:36:6a:61:
31:90:22:0a:0e:e0:1a:66:d1:d1:cc:cf:86:16:ad:b7:97:3d:
49:6d:00:ea:8d:e4:b2:1c:1a:45:a3:3b:da:14:99:2a:1c:c7:
c8:2f:e4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:36:19 2025 by rpki-client