Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
File: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json)
Hash identifier: F5g1J8XDc1/3uoeyDNhfCIbCDrTzuKcwWlMCDHzjPAY=
Subject key identifier: E1:52:82:5E:6E:29:45:8E:F9:1F:63:27:03:96:2E:92:5F:7B:3A:91
Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15
Certificate serial: 010D0C9F432858490E16BD46031A1691F7063C80
Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 399717
IP address blocks: 23.179.176.0/24 maxlen: 24
64.112.106.0/24 maxlen: 24
2602:fc7e::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:bd:46:03:1a:16:91:f7:06:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=e0ea05a7-10f7-45a5-a30b-1e79c592520a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:f1:7e:63:65:b4:58:0d:48:34:56:6c:3f:
77:55:e8:74:84:7a:12:d5:d5:c9:51:f1:e6:16:c5:
9d:04:e8:f0:58:37:45:c5:56:c8:f8:b4:5a:1f:6e:
22:d5:7a:ac:46:5f:e8:b8:1a:df:87:2a:86:03:67:
85:8a:b4:a1:3b:0e:77:87:f1:09:65:f3:32:04:e7:
1d:2a:ce:83:d4:c5:90:00:f1:0e:d4:a0:49:80:4e:
88:be:f5:6b:be:5f:ad:9a:48:b5:af:58:e9:83:53:
1b:64:4e:28:0b:2d:a5:c2:11:fb:33:99:5e:91:3b:
63:b0:d4:dc:15:0c:a9:f2:d0:cc:84:c4:5c:f1:66:
74:b3:47:e5:26:9d:21:cd:ee:b9:f0:ed:1d:40:47:
ff:41:1c:39:aa:65:3c:e4:bd:be:ad:16:8c:3b:5a:
2b:c0:11:43:d5:31:9a:13:97:20:28:d7:a2:29:98:
81:53:29:85:63:f3:e5:60:bb:7a:05:a6:87:60:aa:
12:11:57:07:52:73:3d:6e:dd:6d:3f:17:94:51:fa:
2f:b2:4e:60:bf:34:71:48:08:ca:7d:d7:f5:dd:76:
f9:a3:0e:3a:db:c9:26:64:c7:d9:83:05:20:30:a7:
8b:00:a4:b2:07:79:0d:11:91:2a:18:20:4b:b9:cf:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:52:82:5E:6E:29:45:8E:F9:1F:63:27:03:96:2E:92:5F:7B:3A:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl
X509v3 Authority Key Identifier:
keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer
sbgp-ipAddrBlock: critical
IPv4:
23.179.176.0/24
64.112.106.0/24
IPv6:
2602:fc7e::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:8f:60:c7:45:43:ba:ff:fb:0f:2d:02:01:4a:4c:b2:80:5a:
8a:20:74:23:40:56:22:22:82:00:1a:ee:b3:43:b1:4e:e7:e7:
2b:43:f6:c3:19:18:bf:6e:1a:24:10:42:8e:63:9d:28:b5:f4:
e5:0e:97:23:1b:f6:5b:48:ba:b1:8a:d0:96:5c:a6:64:aa:ac:
30:4c:5b:e2:91:25:b6:41:dd:eb:65:d5:7d:25:2f:8d:c4:41:
f4:2c:86:8f:a8:74:5f:f2:53:48:fb:7c:59:d8:56:c6:6f:d6:
fd:26:1c:2a:43:2c:06:ca:3e:79:35:42:b9:78:51:35:35:70:
2d:21:fd:5b:65:44:52:f8:87:5c:e4:6a:50:2a:aa:53:04:ee:
dd:6c:73:20:31:19:23:80:c6:cf:d9:d3:3c:25:63:f7:83:2c:
47:5e:ee:5a:f8:27:98:eb:1f:16:d8:f2:78:84:95:9c:aa:0b:
4b:a3:2f:59:88:cf:2a:e2:90:6a:73:64:f0:6c:3f:a0:6e:88:
4a:8a:8c:4c:86:85:e8:4b:c0:2c:af:71:e4:6b:a7:b9:7c:dc:
ac:60:96:ac:a3:78:92:7e:1d:94:7d:b8:d6:aa:d5:55:b0:c5:
ae:cb:bb:bd:35:37:b4:db:a8:3e:93:9c:cb:7c:c8:21:c7:28:
2c:a7:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:00 2025 by rpki-client