Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/94b26837-184a-30cb-8311-194f75be68b5.roa
File: 94b26837-184a-30cb-8311-194f75be68b5.roa (raw, json)
Hash identifier: eTOsU/hw59jQPpVXFTkuQMlmqKBlMUftsg84OUuS1kA=
Subject key identifier: 73:70:9B:C1:FD:BB:42:6A:D6:ED:C5:E4:3D:2D:2B:A8:F5:4A:E3:50
Certificate issuer: /CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
Certificate serial: 010D0C9F43285848A136132289EE2DE061A292E4
Authority key identifier: 05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/94b26837-184a-30cb-8311-194f75be68b5.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 207420
IP address blocks: 23.144.248.0/24 maxlen: 24
2602:fb3c::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:13:22:89:ee:2d:e0:61:a2:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66a1dc9-26a8-4e01-9916-0d16dd191690
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=ffcca234-3bc1-4f94-a43f-af9f4e8f3481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:bb:73:85:99:ed:6d:1d:0f:3e:97:34:5f:
7c:19:f3:c4:82:3d:9b:7b:83:c5:5e:78:10:ca:60:
4d:19:b4:88:53:77:0d:e4:fe:4c:94:3e:fc:68:49:
61:1f:20:6d:99:7e:2a:f9:53:86:65:3d:26:ec:73:
ea:cb:93:51:0d:06:2c:5d:38:97:cb:38:25:9b:a9:
ac:26:14:26:8d:90:25:4a:e1:57:59:e4:f1:d9:97:
56:cd:be:23:90:61:34:53:74:20:71:e2:79:6f:1c:
46:8a:97:9a:b2:0c:09:62:46:02:59:67:f3:9a:e9:
ea:90:43:01:77:aa:53:85:16:e2:0a:24:26:38:a9:
06:2a:19:a3:f2:95:23:96:ea:c0:16:3b:af:d3:7d:
f4:4b:8b:99:62:ff:23:aa:fe:af:63:0a:ab:f2:7b:
cc:fc:dc:86:94:9e:54:a2:93:d9:fe:34:3a:d6:ce:
89:66:b7:c2:09:90:48:0c:df:32:22:df:7e:ad:39:
70:8b:1a:a0:5d:46:f8:06:4f:20:e9:bf:ed:04:64:
f7:73:f4:82:3b:1d:a6:52:dd:f2:88:05:97:47:f2:
1d:ff:67:67:e5:a9:42:b0:0f:c0:bd:06:e6:61:49:
c6:40:e6:1e:4c:38:c3:96:bc:82:b3:e2:41:cd:67:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:9B:C1:FD:BB:42:6A:D6:ED:C5:E4:3D:2D:2B:A8:F5:4A:E3:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/94b26837-184a-30cb-8311-194f75be68b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690/a66a1dc9-26a8-4e01-9916-0d16dd191690.crl
X509v3 Authority Key Identifier:
keyid:05:2A:1A:AC:C6:03:CD:7E:BC:FC:8C:07:CA:D6:38:03:64:D8:E4:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a66a1dc9-26a8-4e01-9916-0d16dd191690.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.248.0/24
IPv6:
2602:fb3c::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:a8:6c:23:92:1e:42:b6:ec:bf:48:82:e6:db:c4:6b:c3:c6:
46:c0:1b:46:c0:ca:32:ac:43:1a:4c:8b:3b:98:76:a6:7a:59:
86:f8:8c:0a:98:4e:6d:58:af:90:9d:88:e4:6c:d2:11:e8:71:
3b:27:55:17:0c:fc:c1:e4:fa:51:c9:5a:01:ca:fd:89:dc:1b:
35:db:e8:6d:60:c2:8c:5b:74:58:4d:e2:5d:c4:da:c5:55:76:
f4:48:e3:b0:e5:40:37:6b:b2:36:60:7a:2a:41:08:43:16:3d:
3b:fb:c2:87:62:c3:81:f3:c0:67:88:06:76:12:12:b9:cb:f4:
c5:6c:1d:aa:9c:d6:3e:89:c7:7e:63:c9:a5:d0:10:83:2d:15:
fc:93:ab:7a:e9:35:af:46:95:4e:fb:06:31:ce:33:8e:80:ea:
8a:a7:56:7b:fc:5f:35:a7:e5:84:00:89:64:a8:c3:64:72:67:
b1:31:6b:a8:d3:0a:27:39:32:36:e8:5d:59:e9:9c:1c:9f:87:
15:36:ce:ad:9d:54:a3:15:fa:5e:b3:ff:b0:a3:2e:a9:1a:f9:
e5:df:e5:45:10:66:36:f7:b5:e5:77:58:0d:b9:ea:79:46:9b:
eb:86:91:03:00:b7:51:3c:e0:9d:08:a2:cb:7b:a1:0c:c8:86:
80:ef:34:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:51 2025 by rpki-client