Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa
File: af16373c-3287-341a-a7b4-1cec1a5c9f48.roa (raw, json)
Hash identifier: GjOfNfXPtbqiskhfECeGfl1UjboSJJAS6Tcum1djO4E=
Subject key identifier: D5:94:DA:08:77:17:45:89:60:89:15:1B:86:28:0C:70:8E:D9:83:A7
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F432858491246AE3505C4E9D587764F00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 19437
IP address blocks: 23.235.224.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:ae:35:05:c4:e9:d5:87:76:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=c1d6bb55-6740-427f-aa15-436ba01db084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:14:52:7f:19:fe:8e:f5:a7:96:7d:6f:26:
8f:35:4c:18:df:75:1c:20:7d:93:61:af:54:3f:be:
99:2f:c0:36:f9:38:a3:16:bc:8e:6a:5f:2c:ea:6c:
9b:dd:23:2f:b8:e2:ca:b0:1e:c0:ac:ce:f3:90:e2:
3a:6d:e3:b4:65:61:4c:87:27:2c:31:ff:2e:3f:19:
ff:12:45:61:62:16:c2:00:f5:d0:1e:55:04:f3:a1:
42:af:a1:d0:1a:68:d7:c8:69:2f:84:cc:13:34:1f:
3b:79:d9:ee:02:ab:0b:df:ac:bf:e4:ad:bc:f2:6a:
c0:5f:fa:f7:a4:58:fd:f3:8b:49:c4:ab:c4:28:0f:
0d:56:17:9e:2f:7f:2d:b5:55:08:f4:bd:8f:f9:74:
19:2c:c3:09:8e:37:c9:96:57:be:e8:e1:c0:6d:21:
d9:81:76:02:1a:6d:44:11:5e:b2:ff:eb:34:d1:83:
0b:e6:29:6b:68:9e:56:77:46:83:5a:df:c3:f3:4e:
f4:a1:82:ed:5a:ae:03:4a:7f:ab:96:70:fb:12:37:
39:18:57:82:5c:e6:b7:49:44:a8:d0:07:b7:8f:f1:
d5:b9:be:36:78:a8:7f:cb:66:46:f4:57:98:c3:d6:
cd:92:b6:77:26:cf:e7:aa:5f:6a:4f:38:eb:f7:ed:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:94:DA:08:77:17:45:89:60:89:15:1B:86:28:0C:70:8E:D9:83:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:7a:fa:83:c9:16:e5:dd:a6:78:45:01:5c:01:04:5d:d0:23:
2d:43:01:41:08:91:74:36:16:4b:23:07:a4:72:90:51:dd:10:
78:2e:b9:ac:a4:dd:58:b9:c1:09:6f:33:c0:c9:06:4a:9b:ab:
b5:ff:1a:70:67:b7:c1:ea:c5:3c:38:e9:29:c6:23:60:49:8b:
6b:ac:ba:b7:eb:27:c4:31:21:f0:57:2b:77:ef:47:92:6b:be:
91:b1:b3:68:15:10:a7:77:b8:76:93:50:4b:72:11:17:9c:9d:
56:03:1e:4a:30:fa:ab:0b:d5:ed:07:9a:76:97:15:48:02:70:
8e:9b:3b:8a:9b:7e:7b:c7:94:91:7c:d9:f8:45:5b:14:92:72:
f1:72:21:53:92:c1:02:50:19:0c:8f:05:2e:43:73:6c:db:e2:
e9:9a:b3:8b:ee:23:3e:f2:09:db:8e:68:20:1a:c9:1d:29:3d:
8b:95:5e:bf:27:48:e1:1f:7d:82:2a:24:b3:82:c3:2d:ac:00:
73:d3:9b:54:55:a8:ae:c2:2f:26:d1:e6:59:a1:6d:5c:a7:7b:
f0:05:91:47:e8:24:2c:50:b5:b4:45:b7:be:f2:85:36:b2:0d:
76:ba:04:c1:78:5c:dd:68:50:57:97:bc:07:e0:30:1f:3a:cf:
3d:eb:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:23:06 2025 by rpki-client