Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/7be29a41-fcb9-3b5c-8008-973edf6d37a2.roa
File: 7be29a41-fcb9-3b5c-8008-973edf6d37a2.roa (raw, json)
Hash identifier: Q1LTe4Bs3cSyq+9QW9vIahP1bEG9GgFSYZapez4+GEY=
Subject key identifier: 2E:FF:B5:C1:23:67:CB:2A:60:D8:B2:1F:5D:C2:DC:EE:5B:9B:B1:31
Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial: 010D0C9F43285849240BE982EB5FD7E80F1F6580
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/7be29a41-fcb9-3b5c-8008-973edf6d37a2.roa
Signing time: Mon 10 Mar 2025 10:46:56 +0000
ROA not before: Mon 10 Mar 2025 10:46:56 +0000
ROA not after: Sun 08 Jun 2025 10:46:56 +0000
asID: 396356
IP address blocks: 23.133.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:0b:e9:82:eb:5f:d7:e8:0f:1f:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
Validity
Not Before: Mar 10 10:46:56 2025 GMT
Not After : Jun 8 10:46:56 2025 GMT
Subject: CN=1722d0a4-8526-4200-b2da-94afe91d5e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:65:0a:c6:41:3c:7f:60:e8:82:41:8b:cb:
61:5b:6a:b3:91:90:e1:82:bc:90:04:9f:d4:af:ed:
33:c3:ef:1b:2b:fc:1c:36:9e:79:cb:66:d0:ff:ca:
34:0c:c8:a2:54:5e:0a:cd:63:08:a7:95:ae:f9:8e:
23:3b:db:35:1f:c0:92:fe:ff:d4:8f:b7:9f:84:cc:
a2:e2:7c:d1:7f:36:ee:ad:ef:4f:af:55:37:12:9c:
56:0c:19:39:cb:12:ef:5b:99:1e:11:87:95:26:92:
7d:42:d9:f2:aa:74:94:e0:3b:58:6c:0e:ac:ee:1d:
e7:aa:2d:c2:dc:78:57:35:59:76:cb:5c:70:bf:6a:
d8:92:fe:27:c8:9f:0d:e7:f0:15:1e:c7:46:b1:0c:
7c:a8:d0:f8:2c:ec:8d:39:23:11:d2:a4:28:a0:3b:
ef:ae:1c:1d:e1:1f:96:32:75:d5:79:e9:70:e4:ba:
61:b8:e0:5e:b7:00:f4:3a:30:31:d5:fd:65:45:9b:
0a:b2:dc:74:a5:9c:36:ce:d7:40:61:cd:62:b3:3f:
8a:bf:24:7a:00:c5:dc:65:08:e7:1d:71:5b:df:f9:
b2:8e:9d:21:28:91:22:d2:d0:31:57:5c:02:b2:2a:
d5:5d:e8:21:7a:a4:d0:22:3a:56:c2:40:42:29:ea:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:B5:C1:23:67:CB:2A:60:D8:B2:1F:5D:C2:DC:EE:5B:9B:B1:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/7be29a41-fcb9-3b5c-8008-973edf6d37a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
X509v3 Authority Key Identifier:
keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:90:86:4b:dd:bc:c6:4e:4a:ef:cc:54:6e:8f:2f:7c:15:44:
23:96:b0:6a:c7:af:db:11:e1:87:49:be:06:6e:76:90:3b:15:
e9:3f:a7:81:c9:4a:1d:2a:aa:d2:61:56:0e:96:28:5b:4a:fb:
c2:c8:26:87:a2:2b:15:8b:fb:b5:99:d1:57:86:f9:10:04:2f:
6d:8d:ae:0c:8f:21:5a:55:a9:40:86:0d:97:8d:59:22:0c:de:
0f:8d:68:89:cd:d4:d1:73:ef:ee:04:8d:9d:34:23:c1:fe:6d:
03:19:83:15:74:b6:fa:9b:40:10:98:f0:4a:85:f0:2c:5a:13:
7a:54:b7:9c:ba:08:6f:ca:5b:5b:5c:57:fb:ba:54:e6:3e:e1:
4b:de:75:5b:9a:14:72:f8:5e:16:a3:cd:fc:d6:6f:0e:27:a5:
f4:bb:77:b8:28:35:14:0e:08:09:fc:83:3c:f3:4e:a9:30:cb:
5c:76:98:20:17:ea:8e:dd:d4:86:ce:e2:87:7f:c7:01:b7:9d:
eb:56:d7:33:e9:2c:6b:f6:73:8a:89:c8:b7:b6:91:7c:53:a0:
00:a7:12:b6:cd:9d:ff:3c:bc:9a:7f:ed:3f:d1:ab:a1:f9:b4:
a5:ef:c5:fc:16:ea:4f:75:9f:ae:19:27:0f:77:e8:89:1b:8a:
f0:e2:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:10:45 2025 by rpki-client