Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/779bc1a6-9390-313e-bd63-5ce2a9882cf7.roa
File: 779bc1a6-9390-313e-bd63-5ce2a9882cf7.roa (raw, json)
Hash identifier: 56iIMRg0cSv4G7CXZuP6oS207Wo6rsG+hnrCetuhPdw=
Subject key identifier: 09:81:29:E5:BA:B8:97:71:BF:CE:64:AF:F4:9A:49:38:93:3F:C7:BB
Certificate issuer: /CN=729e94ba-1bc1-4cb8-93c9-7fad762ef687
Certificate serial: 010D0C9F432858489E6B5EFD3486B40047F702E0
Authority key identifier: 1B:3C:C5:65:CA:F1:23:4B:AB:1C:B3:72:CD:AA:41:63:82:FC:94:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/779bc1a6-9390-313e-bd63-5ce2a9882cf7.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 400414
IP address blocks: 23.138.200.0/24 maxlen: 24
128.254.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:5e:fd:34:86:b4:00:47:f7:02:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729e94ba-1bc1-4cb8-93c9-7fad762ef687
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=2827d4cd-de7f-4734-b39e-a96c2e49cf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:68:6f:7a:f0:06:56:e5:0c:45:30:e0:69:85:
f8:bf:78:41:51:e4:9b:64:73:e1:5e:45:0c:da:6a:
ca:7d:01:a5:bb:2d:75:d8:7e:f9:1c:3d:f7:c8:42:
bd:5a:6b:5e:a1:b1:04:58:f1:53:a5:55:79:a6:3e:
6b:47:a8:b2:1e:c5:a2:9c:3c:5f:7f:53:18:0b:a5:
1f:63:02:bd:b9:95:75:ec:00:ff:1c:82:92:cf:c6:
fb:c4:3c:1d:5e:d5:b1:b4:be:f0:6b:2f:4a:50:09:
f5:0e:c7:85:20:5a:3b:ab:21:ae:9b:66:ad:74:d2:
f8:6a:cd:32:0e:37:d9:e7:72:fc:97:1d:b2:6c:43:
d1:a8:4c:29:93:35:21:b2:b2:f9:17:7d:20:e5:a0:
73:bb:d1:b1:c8:47:49:80:eb:7c:a0:63:e7:4a:83:
b7:6f:c5:0e:37:8f:14:2e:e3:e8:45:a0:1b:fa:28:
3a:14:86:05:fc:53:49:32:aa:92:ea:e3:48:ae:08:
e2:b4:76:b5:24:7c:4a:b7:42:00:e1:0b:85:b3:c4:
aa:38:d0:76:c6:40:e9:f2:21:9c:79:0d:3b:2b:50:
21:e2:6a:73:7f:c6:8d:46:b0:29:fc:96:33:96:54:
d1:07:59:6b:9e:31:8a:0d:0b:04:63:4b:7b:4d:7b:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:81:29:E5:BA:B8:97:71:BF:CE:64:AF:F4:9A:49:38:93:3F:C7:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/779bc1a6-9390-313e-bd63-5ce2a9882cf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687/729e94ba-1bc1-4cb8-93c9-7fad762ef687.crl
X509v3 Authority Key Identifier:
keyid:1B:3C:C5:65:CA:F1:23:4B:AB:1C:B3:72:CD:AA:41:63:82:FC:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/729e94ba-1bc1-4cb8-93c9-7fad762ef687.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.200.0/24
128.254.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:28:dd:9a:5a:76:cb:4a:fe:f5:06:18:1b:b2:65:7a:7b:ec:
6d:f4:fe:c4:cf:ce:ff:14:da:0e:83:eb:4b:10:23:c6:ec:8d:
a2:c4:85:ea:36:fd:ba:cf:05:43:2a:48:17:15:7d:23:31:9a:
4e:79:6a:49:88:7c:b6:9a:03:fb:c8:0e:23:48:ea:61:58:47:
83:55:3c:3a:5c:a9:0a:59:49:ba:5b:fe:93:9c:f7:0a:d1:ca:
3c:36:b3:9c:f0:b7:5e:d3:73:2a:7f:88:3f:20:da:3d:a4:02:
5b:ef:0c:23:41:ce:62:cf:c2:c7:bb:8a:58:77:72:cf:27:83:
a3:e5:b0:e1:0f:16:0b:a4:9b:e0:94:fc:bf:fe:8b:02:d7:a5:
d6:9e:a5:7c:11:5f:21:b6:bf:43:bc:92:66:74:39:14:17:c8:
6a:37:13:ac:fa:8e:7c:f7:f0:74:c6:93:c0:12:54:4c:24:cb:
c2:5f:71:0f:18:a1:d8:05:f5:fc:d6:94:43:5a:11:0d:aa:1a:
6f:6a:2d:2b:86:5a:a7:07:b3:fd:5d:d7:c5:de:ec:67:fc:5e:
a8:42:b0:db:4f:0c:62:15:2c:38:02:da:3d:59:ea:90:d0:9b:
8d:f7:e2:72:59:2b:07:0e:77:b9:39:43:0f:5e:63:95:73:68:
58:c7:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:26 2025 by rpki-client