Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa
File: d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa (raw, json)
Hash identifier: Dt59/SA82PQRNbcB31+t5ScQ+fO3V0NU4Mg7AfeNk6c=
Subject key identifier: 08:0A:7D:42:4D:2C:43:27:58:BA:4C:61:20:A8:D0:6F:D1:01:20:F9
Certificate issuer: /CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
Certificate serial: 010D0C9F432858489FD096D0C573AD7E308EB800
Authority key identifier: 38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa
Signing time: Wed 22 Jan 2025 02:00:39 +0000
ROA not before: Wed 22 Jan 2025 02:00:39 +0000
ROA not after: Tue 22 Apr 2025 01:00:39 +0000
asID: 394256
IP address blocks: 23.173.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:d0:96:d0:c5:73:ad:7e:30:8e:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
Validity
Not Before: Jan 22 02:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=6e56670c-2df2-432a-b7f4-1d5064cd7c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:79:43:22:92:f6:e4:51:34:e8:96:14:3c:
a5:bd:2c:e7:54:e0:3f:da:8b:2e:e6:d9:aa:33:1a:
ca:61:19:18:e3:ec:8a:ee:82:56:b5:e4:18:6c:d8:
b0:6c:97:2a:34:7a:fa:56:9a:87:84:bb:55:80:92:
7c:0f:8a:55:ca:28:a3:51:5f:76:a6:a8:75:f1:ff:
d6:e0:59:c7:5b:28:7b:dc:76:8e:0d:fa:b3:28:45:
7b:50:6a:03:20:18:64:ec:35:4e:ff:84:23:fb:b1:
b0:e1:4b:f0:95:23:5e:e8:1f:d7:7e:73:50:20:78:
a5:09:6f:2c:f1:c5:5c:6f:8f:7e:c1:3e:2b:4d:54:
0d:b7:ee:c5:fd:dc:0b:01:89:47:78:2f:dd:53:14:
2f:ea:c4:f6:00:bf:ff:1d:e5:65:25:a8:7a:7d:bf:
ec:98:84:85:79:4d:37:5a:e4:c1:45:b0:5f:db:31:
a8:59:6c:d9:5c:7a:ce:dd:d8:e1:90:b6:e9:c4:e5:
8a:4b:99:64:d2:1a:88:4e:cd:f8:8b:9f:21:49:86:
ef:58:e7:5a:a1:02:44:28:1b:2a:64:e6:dc:db:f9:
2a:27:b9:95:d3:08:45:7f:8f:6f:4e:0b:a7:50:40:
68:e9:cb:b5:2b:89:58:17:69:d3:34:56:c2:3d:8e:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0A:7D:42:4D:2C:43:27:58:BA:4C:61:20:A8:D0:6F:D1:01:20:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/d0c9ddfb-71b8-3f1b-a8d9-5bededd53340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl
X509v3 Authority Key Identifier:
keyid:38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:73:ba:22:0e:ee:be:df:3e:1d:13:f4:63:b7:c8:c8:f5:70:
9e:fe:ab:10:24:80:fe:88:f3:54:2a:46:26:5b:9b:f5:d1:89:
c0:9c:0d:33:c7:ca:8b:b6:96:a1:4f:f7:6e:6d:40:53:46:ee:
e6:cd:e0:6d:d5:f0:8d:cc:44:0b:28:47:56:70:69:08:e2:59:
70:9c:e4:20:2a:9c:15:3a:28:ab:19:ff:ed:9f:ce:c5:bf:a0:
da:cc:93:06:07:0b:0f:51:53:e3:06:a0:c0:d3:c9:ab:bb:fa:
9a:17:49:8b:25:db:89:97:41:58:0f:ef:3b:17:25:fb:cb:67:
84:1e:b5:d0:04:f9:de:83:2a:1b:ce:fd:a4:14:06:56:02:9f:
d2:dc:af:44:58:51:cf:f7:f5:ff:1b:4d:63:93:92:e9:f8:82:
79:7c:79:fb:2e:54:1c:46:e1:80:a3:2a:c5:0f:9e:4b:48:09:
90:c2:a3:8d:f7:77:39:d6:52:2f:74:0d:1c:10:a8:ea:94:f8:
ba:5e:07:9d:bd:fb:ef:1a:f1:57:1a:9d:9d:ea:e9:69:f2:fc:
d8:15:be:16:fa:71:be:8b:8f:fb:e8:9d:c9:7f:58:cd:eb:14:
fc:70:2a:f8:12:86:83:5d:41:26:80:92:70:71:bb:ce:0b:af:
54:8b:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:05 2025 by rpki-client