Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
File: cfaae5c8-a32a-3937-8b38-0909380010e1.roa (raw, json)
Hash identifier: CuEZP8r9+F5/EFWUFUNRZAHwNP/ISrdIR6jH4cIPifs=
Subject key identifier: A1:51:78:1D:53:43:5D:81:69:F8:26:05:DD:81:35:7A:CC:54:F6:DB
Certificate issuer: /CN=8deb6383-7043-43c4-b39c-395a97ee0114
Certificate serial: 010D0C9F43285848811B1250540719904C376600
Authority key identifier: E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 13925
IP address blocks: 23.131.160.0/24 maxlen: 24
23.131.161.0/24 maxlen: 24
2620:138:5000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:12:50:54:07:19:90:4c:37:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8deb6383-7043-43c4-b39c-395a97ee0114
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=7bf42c3d-0928-42a7-9021-2ddd0b4080d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:d3:cb:ae:ba:a9:72:25:bb:a9:b5:2a:f2:
a7:bc:7a:79:ca:98:ae:d5:c2:ee:39:7e:c6:9b:b9:
78:24:f5:be:b5:ab:da:ba:13:96:bb:b8:d9:3b:78:
8f:38:8b:bb:a1:5b:76:b4:67:8e:f3:ac:d8:86:21:
ed:54:e0:8b:73:17:de:3a:c0:fc:db:18:9b:15:c6:
fa:26:be:ea:7a:de:ba:f3:f7:7b:ac:7e:76:28:ca:
5c:35:46:88:9d:59:5b:34:62:30:89:77:90:37:83:
73:1e:60:1e:0c:21:58:70:6c:95:14:6c:c3:d0:2d:
1f:12:b5:a5:6d:89:cd:ed:5e:af:e9:bf:48:64:d6:
68:5a:e9:b2:10:cb:75:24:9e:a1:4d:59:e7:a2:3f:
e5:0a:2f:97:53:13:f8:b0:ef:ab:df:04:6d:6e:ce:
4f:af:3a:14:6e:92:74:4d:e7:67:2f:fd:bd:49:28:
99:d8:70:b0:a2:ab:0e:f3:f5:94:b7:b7:72:78:4b:
31:05:30:31:7d:cb:2b:41:0f:09:77:a4:5c:02:69:
d8:8f:9c:53:5c:32:9c:56:8a:1c:41:c6:c6:f7:88:
8c:52:98:28:20:46:e7:42:a0:3a:cf:ed:6b:c9:ab:
78:41:fe:94:85:ee:49:24:68:84:db:98:b9:79:4e:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:78:1D:53:43:5D:81:69:F8:26:05:DD:81:35:7A:CC:54:F6:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl
X509v3 Authority Key Identifier:
keyid:E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.160.0/23
IPv6:
2620:138:5000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:8f:eb:0c:11:5b:c2:44:c4:99:a3:e2:b4:5a:b8:61:aa:65:
15:5a:77:c5:c3:5c:fc:7f:d5:62:c9:f0:4d:19:12:c8:5e:64:
a2:65:12:0d:b2:eb:2c:50:da:67:9c:57:0e:55:ad:9f:39:66:
17:d9:28:25:06:73:f7:10:35:43:68:df:06:c7:c7:48:f9:36:
9e:21:71:57:1f:3e:82:0b:57:6a:55:c9:f3:1b:6e:47:cf:9d:
ef:d0:a5:e3:de:35:5f:da:93:65:5f:34:93:39:49:a9:25:37:
9a:54:96:39:d5:64:8a:8e:ec:92:38:35:7a:54:c0:1d:2c:b8:
7b:48:6e:4d:79:c0:a3:ce:50:15:54:3f:a2:d3:f6:c9:6a:7b:
e1:88:c5:dc:d5:29:44:31:2c:b6:bc:11:1c:08:5a:e5:78:07:
21:4f:f5:c6:ce:46:40:6d:93:ff:68:c2:65:d4:84:62:02:a4:
d5:ea:ad:29:cc:35:2f:2e:a2:43:d8:c7:ee:f1:b4:70:21:49:
1b:98:50:68:6d:89:13:81:a2:e3:8d:c3:00:e1:4c:b2:c3:04:
50:ba:ac:fc:43:2d:5f:21:48:df:09:b8:7d:51:c2:a2:4b:e7:
de:be:5f:80:4c:f4:b6:2c:7d:14:39:3f:cc:af:97:a1:86:32:
c7:53:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:25 2025 by rpki-client