Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b3d70b9-6de9-3c2a-b6d3-62c6fb7b4e66.roa
File: 4b3d70b9-6de9-3c2a-b6d3-62c6fb7b4e66.roa (raw, json)
Hash identifier: sfcc7K0ruhu2hhqQWiruAolnrSzJfZAKTHmi6RnAvT0=
Subject key identifier: AA:AA:12:D4:A5:EB:33:AF:C4:31:E9:A7:DD:60:7B:18:A3:17:4C:EC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D9C0E3B8C6EED7789A540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b3d70b9-6de9-3c2a-b6d3-62c6fb7b4e66.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 7015
IP address blocks: 23.30.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:9c:0e:3b:8c:6e:ed:77:89:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=681152ba-c9ab-4d9c-b541-99283819cbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:56:57:39:43:d1:08:5a:99:03:56:a0:16:
1b:a2:31:6a:77:2e:d9:63:4c:0d:a0:4a:cb:89:d9:
ca:ae:e5:44:32:5e:2d:b3:f0:2d:14:f7:90:02:19:
42:40:a1:e1:dd:fb:10:72:87:fb:68:c0:72:08:ef:
ba:06:fc:99:93:81:3b:aa:60:2d:fe:93:7b:2f:5b:
ae:32:0a:92:c5:92:27:ba:1b:84:a8:4c:d4:ca:30:
5b:37:ef:00:6a:13:99:18:93:0d:fd:3e:d1:d8:42:
ba:e6:49:de:0a:d0:ce:02:c0:1f:f4:1d:c4:a9:b0:
e5:f7:a8:a2:f6:3f:39:82:71:c5:69:f7:95:ee:8b:
c2:43:43:2f:25:3c:7a:d3:e4:65:27:20:ff:10:04:
a1:aa:3f:32:20:12:ed:fc:64:f6:cd:5d:29:6f:fb:
90:e5:5e:4f:3b:ac:fb:98:4e:9a:70:36:3a:3d:d2:
18:6a:42:49:80:dc:d6:0c:f5:ef:3f:90:7d:7a:a7:
03:41:c9:04:b6:03:b9:0c:98:34:ee:2e:57:d5:dd:
80:be:fb:7f:83:86:04:62:83:39:dd:d8:81:39:12:
6f:77:e1:0c:48:64:4a:cc:a7:42:7f:3d:f4:4e:2d:
59:c0:df:a6:b4:ff:53:1a:8e:47:2e:a3:ea:f7:2d:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:12:D4:A5:EB:33:AF:C4:31:E9:A7:DD:60:7B:18:A3:17:4C:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b3d70b9-6de9-3c2a-b6d3-62c6fb7b4e66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.30.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:a5:af:ca:df:86:78:3f:db:2f:f7:ea:29:18:25:14:5e:8c:
87:e5:db:ea:f5:6e:04:e5:1b:b3:40:4d:a1:b0:f3:9f:65:be:
23:06:16:8a:1e:bd:a5:47:5f:64:1f:36:37:e4:73:7e:fe:12:
90:0a:c2:09:d6:c3:fd:76:cf:3a:98:9b:89:4d:96:94:c5:9d:
6c:89:41:1a:d1:8a:80:05:c2:fa:ff:5b:68:fe:0e:c8:f0:48:
51:47:ae:51:28:4d:bf:3b:57:a5:61:12:dd:67:3a:68:55:b3:
30:42:0f:c2:0e:dc:42:b5:d5:94:db:92:ef:cf:af:1d:62:12:
ae:0d:f3:65:50:8e:90:04:c6:b5:b8:23:4c:31:f2:de:b2:1f:
94:59:4d:8e:78:c2:4c:ff:cd:8b:14:cb:2d:7a:f3:2e:88:d3:
30:d7:60:0b:a7:80:ad:67:3d:a0:20:18:ac:f2:57:af:00:1f:
b5:ad:df:4b:24:73:e5:14:04:23:88:1b:86:08:18:44:e6:e6:
7f:51:05:eb:d3:b7:ce:2e:c4:ce:af:36:e4:d1:b9:7f:a5:a9:
30:71:5d:82:a8:6a:6a:8d:ee:42:96:94:ba:6f:80:4b:71:5c:
75:5a:92:8b:0e:67:9e:9b:a6:35:c5:b8:30:24:7f:47:9c:ce:
d7:12:40:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:13 2025 by rpki-client