Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/6cee352c-a308-3b23-8fce-80ac82c1531a.roa
File: 6cee352c-a308-3b23-8fce-80ac82c1531a.roa (raw, json)
Hash identifier: 8NPPvQtqxpDclpbXYJVucPvRZsDe/zXDCNjkov+7wT0=
Subject key identifier: F3:92:34:E1:14:60:2C:74:11:B3:04:DA:A3:75:6F:BC:3D:60:29:B9
Certificate issuer: /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial: 010D0C9F43285849244E86CCE2977F7124FB4E80
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/6cee352c-a308-3b23-8fce-80ac82c1531a.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 6233
IP address blocks: 23.83.224.0/19 maxlen: 24
174.137.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:86:cc:e2:97:7f:71:24:fb:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=ab23f5ac-74e3-40ca-895c-55c10bc7f1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:8a:cc:86:8d:70:67:ab:ed:2e:0d:ad:13:
34:7d:3e:60:a1:2a:a3:ba:d6:fb:94:01:38:a2:88:
44:4f:3f:f1:10:ac:eb:fb:58:61:03:54:d7:b2:54:
6c:03:70:3a:06:43:d0:3e:16:e3:31:ad:ad:d4:14:
55:36:01:42:dd:7e:e9:dc:26:1b:13:b4:31:c3:40:
0e:8c:8f:05:5c:64:31:26:08:f5:3f:e9:6a:a1:ef:
9d:86:fb:cd:b1:69:38:a9:3a:7b:5f:ca:47:ca:bc:
51:01:4a:5e:e6:99:59:e4:a9:87:19:01:73:80:ed:
27:21:c0:33:64:28:fe:2e:0d:72:a5:96:27:94:58:
38:ba:4c:09:42:e6:2e:aa:68:c3:db:14:08:2b:3b:
d3:3e:3f:f0:d7:c5:92:c6:06:ee:1d:95:07:41:30:
80:27:f1:fd:c3:0f:05:24:7e:63:b8:37:f1:ab:ed:
2d:6e:10:3e:51:e2:c3:4f:27:b0:c2:dd:46:f1:7a:
49:4f:33:ce:6a:c1:ef:a5:91:65:9e:c5:94:aa:c4:
0d:8f:9e:4e:01:0b:88:71:2f:6f:a0:78:fa:8b:5f:
0e:3d:dd:29:d3:52:1c:c9:a4:7a:8f:79:3a:41:0b:
48:bf:7a:3b:1b:8c:22:dc:6c:7a:52:f6:ad:1f:37:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:92:34:E1:14:60:2C:74:11:B3:04:DA:A3:75:6F:BC:3D:60:29:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/6cee352c-a308-3b23-8fce-80ac82c1531a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
X509v3 Authority Key Identifier:
keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.224.0/19
174.137.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:c3:3a:4c:20:21:d5:6b:a4:39:a2:32:50:b9:9c:cb:29:7b:
1e:d3:25:17:f0:da:86:6e:28:bf:6e:f9:18:7b:b0:15:7e:84:
3f:b5:46:32:4b:80:94:b2:34:51:c4:42:2c:27:48:7a:10:39:
c1:18:86:93:e5:39:19:93:24:cd:7d:23:2f:10:a5:f3:e4:af:
21:6b:cf:7b:b2:a1:ae:38:89:76:64:4d:85:50:14:1b:e8:20:
9d:f1:99:99:d8:e0:08:40:bd:54:81:2c:5a:4c:ed:a7:db:e0:
44:50:f3:73:58:9a:6c:fb:73:c1:56:05:fa:00:be:0b:c3:e9:
ce:6a:3a:94:a8:55:31:73:1d:d0:c4:94:f4:95:a0:8c:a2:e2:
c1:59:10:cc:04:b3:a9:7c:ee:68:cd:15:77:4d:75:b9:19:01:
5b:70:fb:57:bf:e0:ef:b9:9f:92:bb:10:b9:36:7a:6f:2f:4b:
76:b2:27:3c:7e:c2:23:82:86:6d:fd:30:4a:c1:4a:78:cb:7b:
98:bc:9d:ff:de:08:3c:2f:27:a2:58:db:1c:16:e9:83:25:ff:
86:48:fd:7f:54:4b:02:87:a3:ff:e3:a1:f6:d5:4e:c4:1e:f7:
a3:76:f8:8b:72:6e:75:cb:c5:19:c8:d1:fe:0c:3b:59:7e:30:
70:30:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:06 2025 by rpki-client