Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa
File: 9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa (raw, json)
Hash identifier: i2GcDqw6mru3aFkRt6jlAIvp9UZMQzCey23fVFXqINg=
Subject key identifier: BC:36:F2:9C:75:F0:EC:4D:4D:CE:81:7F:F6:9C:F2:83:9C:25:9F:1E
Certificate issuer: /CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b
Certificate serial: 010D0C9F43285849350E9F7AD70CAE6E9BB8FB00
Authority key identifier: E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 63023
IP address blocks: 23.168.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:9f:7a:d7:0c:ae:6e:9b:b8:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7ff3d3-2f19-43a4-a36d-ece1ee05055b
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=23e601ab-57a5-4dd5-ba4e-bc9cba2060f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:64:4e:f3:e7:59:1a:89:d4:2d:fe:27:ed:
f7:53:b0:dc:29:0b:c6:49:85:af:24:54:d2:ff:03:
e3:6c:72:fa:c9:84:f5:99:2d:e9:44:fd:23:44:68:
49:2b:39:b7:5b:dd:52:fd:e6:1e:db:5a:7b:81:66:
e2:6a:3f:40:02:56:dd:04:06:9d:ec:e0:b7:0e:f9:
15:d1:a5:c6:a5:b1:4e:fe:25:34:5b:45:fc:44:89:
ab:f3:5b:d8:1e:43:15:71:a3:f8:ea:12:7b:81:cb:
69:c8:5e:cb:ab:28:17:15:06:2d:01:75:34:9b:ab:
ed:d9:51:2c:42:57:71:da:9f:6c:48:77:ac:d4:a1:
44:02:46:d6:ae:b3:ed:3e:9e:8b:3d:fa:6b:d0:bc:
69:60:de:f4:d5:bc:2a:18:cd:36:b6:c1:4e:5a:4d:
80:89:1f:e6:8c:6c:c4:9e:be:7c:83:44:da:59:56:
f7:8d:47:f2:bd:85:b7:d0:c2:c1:a9:62:4c:ef:5e:
17:ee:0f:b5:e1:e7:8a:02:eb:bd:cb:25:6d:70:0e:
47:b3:ce:c2:57:12:b0:1b:00:c8:48:db:14:c6:1e:
12:61:d4:f5:3b:f2:6c:5e:c5:5c:14:41:d0:0d:df:
b9:35:f9:8c:11:a6:31:c4:5b:05:09:af:45:b1:3b:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:F2:9C:75:F0:EC:4D:4D:CE:81:7F:F6:9C:F2:83:9C:25:9F:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/9221c9b2-21e5-34e5-ae90-e5a01dcced4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.crl
X509v3 Authority Key Identifier:
keyid:E7:A1:6E:79:93:AD:1C:35:B1:EE:64:2D:25:BE:67:5D:02:9D:ED:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a7ff3d3-2f19-43a4-a36d-ece1ee05055b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:c9:e2:ed:90:b0:f0:24:d1:a3:a9:d3:6b:16:23:b1:ff:6c:
fa:70:07:e2:37:80:fa:6d:cf:4b:6c:6c:b3:f7:77:d2:34:45:
e9:f4:5b:53:eb:e2:be:c1:85:48:cd:85:cc:b3:29:2a:ae:85:
bb:9d:47:23:45:16:0f:61:0f:85:1b:35:82:68:e6:8d:b6:07:
ea:44:6c:5b:56:2a:b2:15:da:09:6b:66:b5:4c:4e:1c:53:60:
dd:94:a3:1a:e4:b4:3a:df:31:04:ec:0f:5d:4d:84:50:e9:bf:
f2:87:75:31:b9:d9:c0:f8:84:65:c6:65:a8:8b:2a:b7:4c:1f:
80:07:cc:70:4a:d1:0d:86:04:af:4b:e6:31:4c:09:17:87:3f:
92:d1:fe:58:26:ba:ad:73:f9:ea:0b:db:87:e8:d1:bc:b2:23:
fd:3b:43:28:0e:02:a7:34:77:96:1e:b1:5a:99:31:6a:a9:50:
b7:f8:8c:4d:b7:5e:23:af:12:f1:87:28:b8:90:57:7c:9a:64:
7c:8d:a1:99:be:ee:2f:73:33:dc:f8:59:a4:09:7e:cb:23:92:
d5:83:88:3e:1e:a9:4e:65:91:b4:71:45:de:a5:02:52:7c:98:
96:64:db:0c:22:84:80:f1:da:c4:a2:4e:ca:d7:76:a4:04:a3:
c2:87:70:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:53:40 2025 by rpki-client