Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/b396882a-2f5e-36ca-be3d-03bb63ca1127.roa
File: b396882a-2f5e-36ca-be3d-03bb63ca1127.roa (raw, json)
Hash identifier: FgemPE1mNvH9YFUsPUhhq+FZM5w5nPdWzQN2mDlTBSs=
Subject key identifier: E6:68:54:7C:D6:9F:EA:55:D9:F3:FB:0B:B0:70:9B:AD:9C:02:20:D7
Certificate issuer: /CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
Certificate serial: 010D0C9F43285848A29B4FB72303733D760CF700
Authority key identifier: E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/b396882a-2f5e-36ca-be3d-03bb63ca1127.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 40864
IP address blocks: 23.144.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:4f:b7:23:03:73:3d:76:0c:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=abafa33f-caad-4f22-bb4d-32ca32bcf88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:43:4e:1c:c2:74:ba:12:b9:00:df:79:6e:
d9:8f:b7:6a:0c:c2:ce:9f:5c:22:72:c6:d2:44:cf:
4c:d2:8c:30:06:87:39:b8:34:99:73:1e:de:3f:7e:
43:b9:29:d7:a5:b5:0d:41:63:2b:66:bc:1b:2a:2e:
ef:34:b2:1f:e3:b5:38:33:5a:0c:6b:4e:2f:be:45:
ca:8f:ef:78:12:5d:cf:6d:a0:ad:4c:54:bf:5c:ff:
0b:68:18:69:03:b6:05:9d:63:ee:e6:82:9c:e8:3f:
ef:20:36:32:54:a4:47:42:7e:25:4f:00:c3:ac:2e:
11:3d:bb:9d:a4:fc:02:25:fb:8c:f3:d2:14:3c:5e:
87:85:be:2a:c4:a8:ae:8a:b6:2a:29:b2:7d:9c:b6:
56:7d:b2:d6:42:4e:cb:79:fb:ce:e7:8f:f6:80:8e:
ee:46:55:70:fb:12:e7:9d:ed:8a:3c:84:6c:6b:d8:
ec:79:50:18:75:75:0f:f9:a5:c3:98:69:b7:8b:2b:
b6:11:ef:e2:ee:fa:ee:65:69:8b:5a:80:de:cb:ce:
f0:90:26:5f:43:e5:5f:4f:90:4a:6d:61:63:4f:1f:
6d:67:26:f3:df:48:6a:15:e9:df:20:08:68:c9:7e:
b9:c8:ba:08:9c:0d:1a:fb:43:f3:a6:73:28:20:da:
4d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:68:54:7C:D6:9F:EA:55:D9:F3:FB:0B:B0:70:9B:AD:9C:02:20:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/b396882a-2f5e-36ca-be3d-03bb63ca1127.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl
X509v3 Authority Key Identifier:
keyid:E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:60:6f:41:95:f0:f1:25:2b:c7:c4:2b:91:a9:39:bd:15:39:
2c:22:0a:4d:c9:e2:66:79:10:4e:ee:cb:0b:f6:33:90:ad:54:
59:79:68:fd:09:4b:ac:37:f1:f6:1b:fa:e0:5d:21:fb:7b:e1:
6d:4a:32:e2:ba:9d:13:68:48:04:ec:56:8d:d0:d1:d4:55:18:
80:06:01:62:30:7e:4c:a5:23:d3:8d:e7:be:25:02:83:0f:c7:
11:f7:b6:81:74:2b:78:d7:4e:29:21:97:b8:dd:21:fe:93:34:
ce:b6:5b:a5:6b:8d:f2:30:a0:cc:4e:f9:58:16:a9:03:6a:52:
33:3a:6e:20:c7:83:23:9f:dc:02:93:cf:71:26:96:1d:0a:c8:
3d:33:3b:04:7b:a0:4a:83:0b:1d:21:1a:8e:41:5b:31:0d:ae:
0f:bd:bf:15:96:99:43:a2:9e:63:03:db:85:95:5d:3d:33:05:
17:67:c9:61:86:b5:24:65:54:26:da:31:83:da:8e:ab:99:05:
d1:97:8a:7e:7b:9c:ed:96:86:16:17:b4:51:fa:ff:b9:85:1c:
97:cf:b6:1f:75:09:40:27:6d:29:f9:51:ed:c1:48:56:9b:a0:
fc:43:04:99:ca:82:28:8a:cf:6e:72:c0:aa:95:c1:59:29:2e:
79:53:fb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:40 2025 by rpki-client