Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/cf738f03-939e-3c47-ac2d-324d33da8d13.roa
File: cf738f03-939e-3c47-ac2d-324d33da8d13.roa (raw, json)
Hash identifier: mEEk2dfwCBqomKqAP74Hj+mQqJ+3KIPXCb7o9Lfib98=
Subject key identifier: 9B:21:19:74:C6:6F:6D:4E:93:64:D4:70:AE:6F:E4:DE:78:87:57:33
Certificate issuer: /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial: 010D0C9F432858494F93E7027CCE92F64B4E0600
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/cf738f03-939e-3c47-ac2d-324d33da8d13.roa
Signing time: Wed 26 Mar 2025 01:00:40 +0000
ROA not before: Wed 26 Mar 2025 01:00:40 +0000
ROA not after: Tue 24 Jun 2025 01:00:40 +0000
asID: 23470
IP address blocks: 23.172.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:93:e7:02:7c:ce:92:f6:4b:4e:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
Validity
Not Before: Mar 26 01:00:40 2025 GMT
Not After : Jun 24 01:00:40 2025 GMT
Subject: CN=5b157338-b08f-43e1-afff-f5caecd7966d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:72:32:0c:91:6b:19:64:51:75:3a:1e:61:
2a:46:01:2f:6f:fc:75:98:8b:1e:9a:2d:d2:c5:1c:
c1:47:3d:be:39:33:15:4f:69:d5:1a:47:40:8b:39:
4a:81:14:7b:91:e9:2a:2f:96:ba:dc:93:e7:e4:31:
89:5e:02:2d:3e:de:44:6e:4d:a2:e5:b0:db:02:02:
4d:57:a1:07:57:57:74:d0:fe:f7:04:b6:3c:b9:e8:
9e:14:ce:10:ae:e5:59:2c:c9:54:ee:4b:dc:7a:cb:
63:df:a5:b9:ce:93:26:af:89:08:76:e9:aa:18:71:
27:3b:f1:63:43:19:09:38:c8:54:a1:30:09:7d:1e:
f1:1b:39:a4:60:70:bd:aa:b0:92:0e:b4:a2:82:5d:
e6:d4:90:38:32:a3:d1:a1:dd:14:ed:22:93:3c:be:
fd:f3:db:15:58:ae:96:00:fb:80:60:13:cb:b8:5b:
bd:11:74:14:35:d2:1e:9c:d7:29:12:00:04:e6:a0:
32:1c:68:9d:a7:f3:2f:6d:73:d2:68:f8:50:38:4e:
98:bf:00:93:0f:6a:35:5c:64:a4:82:68:c9:84:93:
8c:fb:4d:e3:f7:56:89:b5:31:98:f2:94:65:df:b7:
14:20:56:0d:c6:d0:8e:f2:95:3e:ae:5e:fc:cb:7e:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:21:19:74:C6:6F:6D:4E:93:64:D4:70:AE:6F:E4:DE:78:87:57:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/cf738f03-939e-3c47-ac2d-324d33da8d13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
X509v3 Authority Key Identifier:
keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:bb:1a:ea:69:2c:c9:86:fc:cc:90:4c:d5:7b:d2:06:a1:26:
39:93:f3:36:13:af:77:61:69:64:cc:21:12:8f:65:a4:be:10:
ee:6d:24:45:eb:62:06:f9:5f:ee:11:dc:43:ea:5a:57:75:98:
5e:2a:23:db:4e:d1:5c:27:b5:1c:51:7a:42:ba:62:e2:62:94:
54:2e:ca:93:7f:f8:62:90:55:72:be:b9:d2:9d:5e:ea:51:a1:
27:40:8c:f0:46:a8:0d:4d:a2:4c:8e:f8:5c:6f:d7:98:bb:b8:
11:ab:11:18:75:c0:df:55:91:a8:f8:c9:7c:8f:67:2c:6f:d9:
1a:c2:1d:18:6b:f2:76:eb:64:e5:2d:d9:68:07:24:ae:06:06:
a1:a3:f4:b1:b0:b6:10:78:7c:b3:39:74:ff:76:c0:c4:42:bc:
e0:17:aa:4f:bf:ec:71:65:55:c7:29:ad:85:1d:e6:0c:49:d8:
d6:97:3a:d9:76:2e:fc:1e:40:ef:7e:1c:cc:a6:e1:40:9f:e7:
2e:f7:c4:96:c6:9e:85:c3:17:54:97:78:b0:f9:fa:17:84:40:
7f:53:a3:97:36:0d:1a:88:05:00:1a:52:31:3b:b3:7b:ef:60:
14:40:49:5d:dc:db:46:e1:19:7d:12:b5:0e:64:86:dc:15:9e:
c1:82:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:08 2025 by rpki-client