Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/dbb60073-5b02-33a2-87ca-90890e8164b4.roa
File: dbb60073-5b02-33a2-87ca-90890e8164b4.roa (raw, json)
Hash identifier: M+MYwbUMbnhgIAzROHOluzx4dIOtpWB0NkAZGVqIFXM=
Subject key identifier: 45:64:A3:56:18:CC:B3:DB:A5:DA:54:66:AE:F2:9A:A0:30:A2:C1:42
Certificate issuer: /CN=240f0cd1-f4ec-43b9-ba41-c969c0fd524a
Certificate serial: 010D0C9F4328584886B07CAB907AE21CA3B17B00
Authority key identifier: 33:3C:D8:62:53:9E:B4:A4:D7:CD:7E:47:D8:35:D4:12:DC:D4:A1:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/dbb60073-5b02-33a2-87ca-90890e8164b4.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 399756
IP address blocks: 23.172.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7c:ab:90:7a:e2:1c:a3:b1:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240f0cd1-f4ec-43b9-ba41-c969c0fd524a
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=eb41b217-586d-4059-b908-52e7db80980b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:23:ec:04:50:19:5f:be:bd:fc:b5:3a:f0:
cb:e5:de:7e:44:26:98:5c:8b:cb:d6:93:d7:b5:f8:
49:e5:3a:59:33:66:41:58:e1:46:83:20:df:ef:68:
49:19:53:df:d9:6c:0a:69:8b:48:0c:f9:29:e0:f8:
44:d8:9c:18:e3:49:59:f7:3b:18:30:30:56:3d:b5:
24:26:d0:db:f3:87:e2:ab:ec:34:6d:d9:d9:6e:6f:
61:b6:29:81:96:d0:d1:c0:83:f5:ac:f1:b2:1b:c8:
70:bc:52:05:ba:fe:7f:ca:bd:11:28:b1:2e:cd:5c:
a8:cf:db:e7:22:c4:1a:31:d5:24:a8:f8:b8:d1:c6:
ea:34:96:5b:4f:52:5f:e4:63:bd:45:cb:18:f0:6f:
56:59:c9:79:f9:ae:16:b0:00:8a:ca:f6:69:3c:52:
e1:e5:3b:90:17:5a:37:0f:2e:38:08:f1:d4:d6:d3:
f0:9c:71:67:f7:3a:ba:fa:61:24:b2:4b:73:78:aa:
b3:b6:5b:8e:6b:d4:d5:ed:75:f6:94:3b:36:07:38:
c6:26:7d:71:09:30:ad:73:ff:3c:a7:35:2c:b2:23:
3b:67:5c:e6:14:b6:24:a7:45:08:51:e8:d9:f7:ca:
60:5b:2f:95:f0:f4:8a:0c:77:1a:3e:04:5a:fc:5e:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:64:A3:56:18:CC:B3:DB:A5:DA:54:66:AE:F2:9A:A0:30:A2:C1:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/dbb60073-5b02-33a2-87ca-90890e8164b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.crl
X509v3 Authority Key Identifier:
keyid:33:3C:D8:62:53:9E:B4:A4:D7:CD:7E:47:D8:35:D4:12:DC:D4:A1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/240f0cd1-f4ec-43b9-ba41-c969c0fd524a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:aa:53:d3:ab:b2:d4:63:5e:5a:1d:2d:3e:c0:ce:bb:0a:45:
6e:f3:94:d7:24:8d:36:25:c4:4d:a0:d2:35:d6:46:99:7e:ea:
0d:53:80:ee:06:3b:90:c4:2b:50:44:12:91:ba:12:01:d3:c7:
4d:69:a8:17:3b:fd:62:7f:1c:bb:10:88:7f:d8:42:6d:e1:a4:
86:eb:a9:05:f6:4d:b3:8c:7d:3c:11:3b:7d:1d:26:c1:95:8c:
fb:f2:d4:fe:6f:5c:d5:d6:15:fb:a0:45:ba:2c:b0:05:93:fc:
40:ae:81:e6:4c:50:d0:19:db:33:60:ee:1d:34:c8:8f:e7:ca:
2a:50:2b:aa:38:f2:e6:be:99:14:02:16:99:55:ba:7d:2d:70:
91:24:53:63:d0:1f:27:aa:d6:a2:88:68:e4:4f:ba:de:f8:6e:
63:13:f0:6a:d1:0f:83:e9:09:5f:94:33:57:fc:54:97:38:7d:
0f:ba:63:f8:7c:80:40:8c:11:d9:18:82:fa:4c:9d:f8:b8:05:
33:6e:c2:df:a0:09:45:f7:55:8b:87:03:1c:ad:39:2a:16:cc:
b5:bc:78:3b:16:a0:82:51:e2:e5:80:c4:1a:d7:83:43:ca:76:
dd:c9:b5:3e:31:af:f9:69:7c:c3:5a:53:e9:e5:5b:d0:48:1f:
c2:9e:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:25:03 2025 by rpki-client