Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/28457a96-ef2f-3af1-9c93-e95f44f6dbed.roa
File: 28457a96-ef2f-3af1-9c93-e95f44f6dbed.roa (raw, json)
Hash identifier: vXWd/ZDOiNXiZj0oUiHiImFbhtO65kmyafT+IrG+4WU=
Subject key identifier: 35:17:AB:2D:F5:F3:21:55:14:BE:C3:4B:8C:66:01:D0:F2:E6:06:5C
Certificate issuer: /CN=cbf89b78-1e86-4629-abdd-682f04ffb165
Certificate serial: 010D0C9F43285848D771C68F1E8A3C549D116BA0
Authority key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/28457a96-ef2f-3af1-9c93-e95f44f6dbed.roa
Signing time: Tue 11 Feb 2025 00:14:56 +0000
ROA not before: Tue 11 Feb 2025 00:14:56 +0000
ROA not after: Sun 11 May 2025 23:14:56 +0000
asID: 12129
IP address blocks: 23.172.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:71:c6:8f:1e:8a:3c:54:9d:11:6b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf89b78-1e86-4629-abdd-682f04ffb165
Validity
Not Before: Feb 11 00:14:56 2025 GMT
Not After : May 11 23:14:56 2025 GMT
Subject: CN=fcdb8d8e-907c-4967-937f-5d672770122a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:e8:8b:5b:f1:9c:00:21:b9:3e:c4:a4:aa:
94:cb:de:cf:73:76:81:33:c4:1e:40:89:1b:de:f0:
7b:c8:68:00:9f:2a:fc:88:5f:16:9a:89:0f:2a:4a:
8c:cc:db:72:31:f6:57:60:7f:25:a8:97:44:a2:4b:
b3:6d:9f:96:4c:8f:3d:b8:e4:8e:1c:3b:ca:00:38:
9f:99:b7:24:7e:28:54:de:01:01:20:a2:0c:48:c2:
81:fb:94:cd:dc:23:ee:6d:92:d6:f4:3c:e0:0f:90:
4a:89:06:b9:4e:34:9b:28:34:0d:95:d9:d4:a1:71:
d3:ed:2e:ea:15:43:72:47:52:36:45:74:2a:0e:51:
ec:70:2a:5e:4d:bb:0a:69:e3:26:f6:48:2c:fc:f3:
44:53:8e:ba:46:bf:df:12:6d:56:ac:7f:ce:7f:64:
e9:91:38:e1:7e:48:2d:92:ad:49:64:3a:a0:df:64:
e4:ff:01:f3:5f:93:b9:2d:b7:03:28:5e:c0:fa:f6:
72:25:76:c7:46:d9:8b:90:97:dc:05:02:41:41:72:
11:a2:70:0f:52:2f:44:f1:4d:78:ac:3d:f0:45:ca:
ae:1e:ab:e1:66:aa:8f:8d:b6:6d:96:b0:8d:13:9e:
85:7e:8a:22:92:5b:8f:76:8c:af:81:85:b9:54:13:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:17:AB:2D:F5:F3:21:55:14:BE:C3:4B:8C:66:01:D0:F2:E6:06:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/28457a96-ef2f-3af1-9c93-e95f44f6dbed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl
X509v3 Authority Key Identifier:
keyid:84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:fd:d1:ec:77:2b:de:7f:47:d4:b3:bc:3f:86:73:0d:18:05:
c8:94:16:08:fa:3a:4c:c2:51:d5:a0:77:50:41:32:33:be:a9:
08:bb:9b:7c:4e:d0:30:8f:ce:74:66:8b:f7:ac:e7:bf:1d:86:
f4:4b:e6:ce:a6:4d:7b:f9:8a:6c:7a:e4:c1:3f:da:40:bf:0b:
ce:c6:90:9e:60:b8:ed:60:6e:4d:55:27:8e:94:83:a6:56:f0:
75:8c:f9:b3:35:51:8e:52:f9:4f:d2:0b:a0:a2:b7:19:c8:dc:
d8:2e:d5:f3:b5:15:38:8d:ef:02:e3:f5:80:24:10:c8:25:cf:
c0:f3:a9:df:b3:e3:6c:5c:1c:71:e4:5c:83:a8:35:fa:c6:18:
05:1d:d1:7d:0c:f6:ac:fb:e3:d2:33:09:86:cd:f2:e2:3c:68:
09:14:69:ea:68:f8:8d:4e:52:60:50:6e:26:06:45:93:c0:b5:
14:78:e1:e3:59:0f:60:ff:ca:91:5e:72:ae:1b:05:50:b2:e9:
c1:46:77:19:6c:b7:5e:aa:ec:49:de:90:84:6e:ec:2e:8b:dc:
20:c9:3f:60:5b:bc:69:a5:4b:40:3e:b6:cf:81:d4:bb:c0:82:
c6:31:33:93:ca:aa:3b:57:b7:61:da:5e:f8:6e:9d:1d:4e:ea:
ff:1f:c7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:40:26 2025 by rpki-client