Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/9d8a32ae-2de3-314d-9a4e-866bb69a053f.roa
File: 9d8a32ae-2de3-314d-9a4e-866bb69a053f.roa (raw, json)
Hash identifier: fKPUdFyf2ljDy8FOE8zVHsTkmDj7z5QIUIpvvCkZuP4=
Subject key identifier: 00:5E:B1:E6:9F:B8:D8:C0:39:DA:63:41:94:60:9E:E7:D3:3A:6B:C1
Certificate issuer: /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial: 010D0C9F432858494CC9372C4A64A778DA28FFFC
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/9d8a32ae-2de3-314d-9a4e-866bb69a053f.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 16509
IP address blocks: 23.131.60.0/24 maxlen: 24
2602:f763::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:37:2c:4a:64:a7:78:da:28:ff:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=fd0bfdcb-2ce2-4096-a2bd-33b90acc4453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:4f:9d:73:39:51:74:6a:7f:d2:c2:0c:a4:
f2:f3:73:f9:49:2d:7b:9c:45:bf:53:03:7a:a2:50:
33:c1:64:9d:a6:f0:db:58:90:9e:23:fc:8d:a0:bb:
51:b7:6c:13:e5:9e:fe:e0:af:2d:10:89:98:fc:fc:
9d:bd:6c:1e:4d:65:ae:f8:f6:3e:3e:62:68:3d:95:
94:59:31:29:ae:85:38:a8:d3:5b:4c:a8:52:c3:2a:
fb:70:07:83:3a:c2:a3:11:00:81:f4:50:90:db:29:
65:0e:cb:74:fd:8f:2e:a7:71:37:7f:00:59:9e:ba:
a5:03:7d:7f:09:c2:74:a4:09:83:ab:50:39:1f:1f:
25:7d:b5:7e:1c:76:79:01:13:13:92:92:8a:50:f5:
98:d8:47:4b:35:17:3d:eb:74:d9:a6:78:05:b2:b9:
92:ed:59:44:39:64:58:09:fc:f1:ee:a0:7f:bf:06:
fe:b9:d4:7a:be:c7:46:d1:9a:3e:74:cd:5f:fe:c3:
1a:97:e1:c6:a4:18:b8:9b:9d:46:83:df:35:95:61:
de:7d:55:03:42:41:28:7c:6b:a4:04:6e:3e:a3:bd:
01:1a:cf:37:f7:5e:a5:44:67:d4:4e:b3:dd:96:c7:
72:85:f1:09:6f:4a:0a:11:87:5c:20:2b:a5:59:e4:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5E:B1:E6:9F:B8:D8:C0:39:DA:63:41:94:60:9E:E7:D3:3A:6B:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/9d8a32ae-2de3-314d-9a4e-866bb69a053f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
X509v3 Authority Key Identifier:
keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.60.0/24
IPv6:
2602:f763::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ad:7c:d2:81:aa:e6:72:b2:16:92:76:12:0a:bc:fb:63:fe:
38:b5:45:27:2d:83:81:56:4c:91:2b:5a:89:34:c7:60:82:87:
59:a5:a4:c1:17:99:ea:88:2e:33:30:0c:7b:79:37:4c:cd:ae:
76:2a:ae:05:ac:78:9c:1d:85:17:ce:b4:e3:a5:68:e8:72:7b:
34:c6:4d:78:15:8a:5b:9d:98:95:dd:8b:8e:ec:95:d7:82:75:
fb:1e:8e:30:45:8e:34:61:db:84:4d:62:c6:d5:99:12:01:53:
cd:5a:97:66:e5:11:4b:62:88:bf:d8:d4:2a:88:d7:8f:59:b5:
4d:da:1b:13:b3:d4:6f:21:2f:44:64:14:0e:e1:61:25:bb:5f:
f4:91:9a:62:e5:35:8a:3b:54:ba:80:86:59:5d:18:f6:c5:59:
b5:e8:8b:46:48:1e:3e:c2:56:9c:07:eb:d7:95:9e:33:63:29:
c3:59:73:db:e0:13:9e:04:23:04:2f:1e:9f:9c:35:62:b4:7e:
f4:0d:0c:23:4c:25:67:d9:3f:d4:62:f8:6f:aa:a4:c9:9b:f7:
b0:81:8b:69:40:1e:45:8f:f3:93:fa:72:8c:e7:93:68:53:09:
d9:de:a0:d1:df:43:32:46:8e:18:d6:47:42:4d:6e:36:18:e3:
15:98:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:12 2025 by rpki-client