
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa
File: d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (raw, json)
Hash identifier: i1MuFNeoiCHRGa4BzCB82IaQtr3qi1jXvwtNzxPpQSo=
Subject key identifier: DD:D9:E4:A6:8F:14:4C:1C:77:67:2E:01:E2:1D:12:6A:25:CB:86:F9
Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
Certificate serial: 010D0C9F43285848B35B6A891B2D548B816B5B80
Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 209242
IP address blocks: 23.170.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6a:89:1b:2d:54:8b:81:6b:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=9601bb68-770e-4c19-8a0d-0a8de9e86fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:d6:3c:e0:42:ff:84:22:7b:92:8f:17:ca:
f8:a1:e5:ae:8e:11:aa:8c:b5:ef:73:f7:41:66:31:
37:af:49:89:6b:f4:59:07:2e:81:18:55:e5:55:36:
9c:30:8f:3c:d6:59:c9:a5:a6:30:cd:de:db:2d:64:
5b:6e:d5:d1:d4:9b:12:cc:46:52:2c:c3:6e:be:18:
48:41:b6:78:d3:3e:94:8d:7c:b9:e8:e9:8b:f1:da:
5b:22:52:bd:76:a2:cd:cb:d6:42:f9:50:e8:88:d4:
f8:4f:3a:45:60:e1:c1:5b:27:61:9d:e9:ee:8a:36:
f9:4b:d7:d1:24:8f:8a:78:12:32:7b:89:7f:62:ab:
17:4f:72:23:87:b2:d9:a6:ba:5d:b5:9f:f7:3b:c7:
6c:1a:75:8b:28:c0:0e:82:1e:11:9c:5e:08:33:25:
c6:db:64:e5:24:bd:43:38:99:ad:e5:76:bd:8f:ce:
77:5b:12:03:65:08:ce:06:db:f3:a9:54:9a:3e:25:
f3:9d:0c:93:13:c0:90:cd:a0:21:c8:73:21:35:83:
46:ab:fd:fa:db:53:8f:3d:d7:ae:cb:12:5e:ec:f3:
f5:33:3c:d7:8b:7c:0b:16:a3:35:45:78:17:44:50:
54:2b:15:79:24:8a:dc:86:fc:5b:13:fd:6f:de:e2:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:E4:A6:8F:14:4C:1C:77:67:2E:01:E2:1D:12:6A:25:CB:86:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl
X509v3 Authority Key Identifier:
keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.170.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:d7:52:90:20:48:a0:f0:7f:62:0b:fc:fe:f7:f5:87:08:5a:
8f:0f:7b:fc:e5:25:0a:e3:2f:9c:90:a7:c0:f3:2c:ee:16:90:
27:53:24:62:86:bf:f3:ec:e5:6c:44:40:4e:0a:ac:3e:4e:a9:
c5:10:7a:e1:73:9f:23:49:a6:4b:27:1d:b3:ef:d7:bf:87:8c:
31:11:82:8c:bc:9e:e1:1b:3a:87:9d:63:28:8d:a5:25:82:7c:
09:86:77:b3:30:a3:46:45:ae:64:c7:f4:61:71:df:e3:37:c3:
03:7f:f2:55:f7:39:c2:09:75:2b:1e:5a:75:d9:86:1d:53:9b:
6c:96:05:c1:da:88:51:71:20:8c:10:2b:c2:43:5f:3d:db:52:
f1:89:33:61:bc:55:61:eb:de:dd:f8:b5:9d:0f:10:8d:d8:8d:
7e:4a:1f:7e:24:77:51:52:0e:09:e4:27:f0:d7:68:a3:72:8d:
26:b4:c5:8a:e4:7b:2e:60:5c:04:9c:74:89:34:3b:37:a3:9d:
2c:b1:0f:2e:4b:b9:3f:4a:10:59:b7:49:b0:53:12:5b:05:4c:
98:49:1f:39:6e:00:d7:39:2a:f7:9c:1c:93:cf:53:c9:b6:2c:
64:12:7d:33:63:01:2e:66:df:ab:21:d0:76:85:ed:f4:c3:d0:
cc:85:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:25:01 2025 by rpki-client