Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa
File: 685b8c27-a767-3702-ae11-c7cb2ff820be.roa (raw, json)
Hash identifier: P1V+1FsPhWAdEYQXXtnzaf/aJa4APSobXqmVQfiMuxo=
Subject key identifier: F0:DA:E0:DD:BD:F6:A0:7D:A1:F3:A1:2D:A0:B8:B4:48:AF:DF:62:34
Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial: 010D0C9F43285848C580F71E06B9D8CCA4767280
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 11870
IP address blocks: 167.23.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:80:f7:1e:06:b9:d8:cc:a4:76:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=0192639e-6f67-45c0-9298-10ce3860a490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:58:1d:3d:46:9a:16:fc:55:f9:52:58:26:
63:9a:28:0d:42:70:64:a2:3e:f7:21:52:a8:69:83:
91:e4:92:43:94:bf:fc:47:5b:2d:3d:29:b8:8e:58:
46:c9:88:9c:35:6c:5e:d1:3b:e2:2c:32:23:a4:7e:
e0:67:42:c0:ae:52:b0:c5:ea:62:a6:54:06:3f:96:
25:12:8b:0e:43:fd:3c:8e:45:03:a8:77:3c:f3:f4:
f8:f7:69:c6:e5:6b:6e:2d:66:24:2b:26:ac:4d:35:
c5:42:66:10:85:ab:97:f9:8d:83:ca:d8:26:12:80:
c3:40:4c:35:99:24:82:33:e0:d3:65:ab:72:db:9c:
3b:fb:bd:ae:47:b3:81:52:5e:4f:52:31:76:2f:5e:
d9:a1:e1:cb:ca:1f:8b:c0:8d:49:28:2b:f1:10:97:
08:c2:c5:03:52:47:3d:cc:a7:52:18:f8:0b:90:b5:
7e:11:d7:6b:f2:92:ae:af:b1:01:1c:29:13:0c:d6:
3d:03:06:15:32:7f:b7:8b:41:a6:bb:ee:e3:f0:d6:
60:29:1b:c0:d4:bd:cd:36:82:ce:a0:d5:47:5f:0a:
63:e0:6e:fd:56:5f:a2:cd:40:48:39:61:1a:18:91:
0d:0d:96:aa:bc:22:ff:3a:27:9e:33:91:3d:8f:e5:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DA:E0:DD:BD:F6:A0:7D:A1:F3:A1:2D:A0:B8:B4:48:AF:DF:62:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
X509v3 Authority Key Identifier:
keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
sbgp-ipAddrBlock: critical
IPv4:
167.23.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:64:86:98:6c:5a:ac:f2:77:36:3d:38:00:01:fe:cf:2a:71:
05:95:48:76:13:f8:89:1b:1f:a4:b4:a8:f8:1d:07:4b:7c:de:
fc:4b:fa:a1:98:9b:d8:87:bd:38:a6:3d:52:bd:20:42:5a:a6:
06:b6:1b:f3:bc:4f:07:da:c8:65:a3:52:01:20:85:2d:4c:6d:
2b:07:7e:10:e7:37:60:d6:c3:5f:44:c0:1d:d0:7b:92:fd:96:
0c:1d:38:19:b5:15:7c:f2:81:a0:2d:1f:de:a7:18:6f:9e:28:
65:26:03:59:24:45:58:c9:e9:4a:c2:d0:fd:ad:b9:7f:86:c4:
b2:21:99:3a:e1:98:cd:46:4d:42:5d:ec:25:b5:d9:06:6a:be:
b6:84:c1:76:d5:cf:ec:89:52:5c:28:b3:e5:93:f1:b1:bc:58:
3c:b1:6e:eb:28:dd:43:50:fa:3d:7e:2a:52:64:2d:a9:05:d3:
b1:06:07:7e:eb:2f:26:e6:69:d4:e6:3d:e1:91:36:70:6d:ad:
59:16:df:4f:bd:73:43:4d:c1:52:65:a7:44:46:36:e7:97:bd:
f2:7b:fa:b5:db:53:c8:63:3b:a1:3f:dc:d3:fb:12:7b:69:94:
59:e3:7e:2c:ee:16:a7:9d:d0:a0:50:22:18:2e:d4:ab:59:fa:
05:1e:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:40 2025 by rpki-client