Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa
File: 32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa (raw, json)
Hash identifier: mJBC35Eyu2nX4uqLhCMkZmU26xAzaOqb1CxTfRrYSmc=
Subject key identifier: B5:47:53:02:A3:83:20:07:37:0A:6F:D7:16:DD:BE:13:D7:EA:1B:66
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584917DC24D97D2C4504D20BDDB0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 20473
IP address blocks: 8.9.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:24:d9:7d:2c:45:04:d2:0b:dd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=279a4477-0222-4cd9-80c3-a3cd5c156f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e2:c0:3a:6c:22:e1:50:34:8c:2e:c1:db:27:
f2:12:18:03:cb:ca:b5:7b:9d:a0:8a:c0:88:1a:18:
ba:61:2c:c4:de:3b:ae:fd:ff:cf:93:38:5e:92:b0:
73:83:3b:74:26:6b:6c:54:91:69:2c:a9:d5:dc:1b:
49:c4:9a:d6:f0:68:ac:4c:32:4e:d3:8f:b6:3c:ee:
7d:0e:2e:57:cf:2e:24:62:1e:f5:26:f0:04:c0:1c:
13:9b:d0:82:1b:f7:5b:9a:30:f4:97:65:76:a9:18:
3a:cc:a9:ef:03:21:90:a8:c8:98:20:66:ef:9c:43:
83:41:8e:20:ca:68:da:1d:b1:d0:a7:a3:e5:d4:22:
0f:e8:a3:c2:dd:33:5a:a9:a7:22:3d:19:aa:1e:24:
88:37:3b:ae:11:14:b3:eb:50:b0:52:c1:3c:8f:a0:
08:32:cc:76:79:dc:a5:35:19:be:4a:6f:a5:94:2d:
f9:bb:b3:bb:50:5f:94:97:17:30:d0:a9:11:2e:64:
fd:35:23:54:fa:cf:d9:31:cd:f3:3d:17:48:79:be:
81:ec:c5:81:a7:9e:93:5e:2a:10:78:5a:90:cd:c5:
76:06:ad:a6:d9:28:c5:a8:d3:e9:48:2a:db:97:31:
4e:65:6d:a8:5f:3d:90:64:36:dc:c5:2a:78:c4:e4:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:53:02:A3:83:20:07:37:0A:6F:D7:16:DD:BE:13:D7:EA:1B:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.9.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:34:0a:6a:c6:91:08:03:ad:f3:04:d8:6a:b0:e7:77:66:11:
c0:fa:b0:95:a9:aa:7f:2e:fc:90:2e:4d:d8:96:73:7d:25:1e:
69:c3:6a:bd:2a:76:2d:39:b3:4d:05:da:aa:60:98:cb:21:ea:
6c:40:83:31:2b:42:de:13:72:3f:dc:42:3a:e1:15:af:52:82:
4a:d4:bf:ef:28:fb:49:34:52:2e:39:f8:e3:66:88:02:2e:91:
5d:59:08:23:83:6e:69:85:41:e8:bc:25:b6:5c:9b:20:50:19:
8d:34:33:a3:e2:a1:ab:6e:ff:82:74:f5:98:bd:1a:f5:c7:16:
aa:ee:5d:8c:b2:a4:e6:7a:56:d7:3f:97:d3:fa:d8:ce:27:91:
0e:44:c1:80:3b:ce:7e:b6:a1:ac:4e:00:81:86:48:72:b4:89:
74:91:70:09:89:ee:08:40:f7:6c:e8:ef:ee:d5:29:df:77:32:
82:e6:01:36:5e:7e:94:8e:d9:02:2d:34:85:9b:fd:2d:23:bd:
ca:63:7d:ed:8a:cd:50:7a:85:28:64:42:19:47:7a:fb:6b:d0:
cf:b4:42:2a:9f:18:8b:5b:44:31:c7:38:60:cb:06:97:1e:79:
5e:f6:6a:38:e1:31:b3:23:6c:37:80:91:e3:cd:4a:c0:cf:d3:
d4:d7:3e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:07 2025 by rpki-client