Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa
File: 2de66478-b3a7-3d96-906b-0f63430b0ee2.roa (raw, json)
Hash identifier: 7AmNFIyW+HrToafuh2UZ3/lP33yKVv5PzHOcybT6zN0=
Subject key identifier: 1D:C7:83:F9:C2:38:28:16:2F:4D:33:99:5A:10:8F:D7:CE:F3:52:5F
Certificate issuer: /CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
Certificate serial: 010D0C9F4328584892B8155BD5D93F58B02DD300
Authority key identifier: C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa
Signing time: Fri 17 Jan 2025 09:25:49 +0000
ROA not before: Fri 17 Jan 2025 09:25:49 +0000
ROA not after: Thu 17 Apr 2025 08:25:49 +0000
asID: 138997
IP address blocks: 23.128.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:92:b8:15:5b:d5:d9:3f:58:b0:2d:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
Validity
Not Before: Jan 17 09:25:49 2025 GMT
Not After : Apr 17 08:25:49 2025 GMT
Subject: CN=8f4addde-4586-4d2d-87cb-4266c13f234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:5c:d8:a3:f4:ab:3f:55:37:7a:47:7a:84:
6c:be:04:36:98:f3:19:44:b0:a4:59:f6:ef:92:d1:
28:1c:07:f2:b0:ca:54:ae:e5:1e:ca:a3:07:96:e0:
2c:e4:c3:cf:c0:0e:9a:8b:ec:ff:64:ca:60:5c:a5:
36:a5:ee:86:87:91:51:a3:d3:dd:ba:b1:af:09:da:
9f:6e:0a:ba:e6:dd:92:30:08:76:85:60:0b:70:0f:
89:88:9b:cd:ee:82:39:8d:97:9b:cf:91:55:a3:6b:
42:17:d2:dc:5d:24:b7:c8:38:6e:a4:eb:23:dc:af:
40:3d:1c:db:99:63:ab:bf:c2:97:3b:ae:37:a9:c1:
c6:aa:b8:5c:3b:07:a8:fa:c1:68:36:a1:65:1a:b8:
70:91:e9:3d:5a:ac:75:aa:f1:ae:d6:25:b5:a4:dc:
3a:01:d7:bf:5a:c5:93:79:5f:17:f1:21:24:12:34:
42:f7:76:3f:1f:06:dd:ab:d5:3f:f0:27:3a:19:f4:
67:a2:1d:26:b4:4b:d2:75:39:ac:70:c9:0e:a7:25:
58:1a:73:47:4e:78:fd:7a:02:1c:76:e5:ca:3f:3b:
8c:e4:9c:33:74:d7:91:76:60:7d:aa:a0:13:af:8b:
11:9b:db:f2:85:93:f2:d5:8c:89:11:b5:75:2a:9b:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C7:83:F9:C2:38:28:16:2F:4D:33:99:5A:10:8F:D7:CE:F3:52:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl
X509v3 Authority Key Identifier:
keyid:C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ae:24:c1:09:ca:59:dc:15:87:f6:c8:35:22:e3:f4:20:7e:
1e:dd:03:ac:19:ba:9d:4c:08:e5:79:5a:b8:dc:ca:cd:50:52:
09:16:e5:fd:ea:b9:ae:b2:04:86:7a:20:b8:c4:e2:6e:13:a9:
1e:69:26:77:e0:5d:ba:ae:56:48:4e:45:8a:d4:f6:ed:0c:72:
b7:7f:bc:14:e9:31:e0:4e:06:c2:ca:57:07:46:28:1e:9f:e8:
aa:f4:60:39:3b:39:01:86:c9:e2:31:ed:b9:0a:4e:3a:07:ee:
fc:79:ae:8a:ea:7f:f0:b2:45:30:ba:ae:72:d2:6e:fa:90:56:
28:ea:be:e6:35:32:08:73:cb:1a:7e:49:7a:7c:f2:30:2e:7b:
6c:e8:9f:a3:f0:f2:34:99:93:1d:0b:5a:69:b3:f3:51:17:d4:
7f:12:d0:6a:cb:cc:05:b9:b5:bc:84:ae:28:07:a2:a1:39:04:
39:2c:ec:8b:5b:b5:9e:a1:e8:91:65:34:94:39:89:f8:2f:62:
4f:1b:fe:83:8e:c0:d8:26:25:31:4c:d6:83:f4:52:6f:ba:0f:
1a:e0:34:5d:51:b8:f4:7c:4d:f4:0a:d0:da:c4:86:d1:96:3e:
65:9e:6d:0c:d5:bc:e7:a4:2e:05:97:19:7d:00:a0:d6:12:78:
6c:54:4a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:04:15 2025 by rpki-client