Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa
File: 5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa (raw, json)
Hash identifier: 9ff9N21MShYmP+PKUAEH1A4ol8Ni02bCNOeR3dEu9pY=
Subject key identifier: DA:24:44:43:DC:CA:D4:97:10:B5:52:C4:EC:98:5A:AF:30:6A:31:8B
Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial: 010D0C9F432858491D7183F62D4ED9B53E891B00
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 26904
IP address blocks: 23.247.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:83:f6:2d:4e:d9:b5:3e:89:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=5e816486-cd8e-4fb7-8b33-2551ef03df8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:57:60:b0:e7:18:ae:cf:12:3a:76:12:6b:
b3:0f:06:c7:db:6e:ca:55:18:5b:da:21:6f:56:5d:
3e:25:6d:c0:5f:4a:db:1e:aa:20:36:09:cb:52:90:
8a:1c:06:8c:99:9b:f8:fc:9d:0f:39:36:1f:c2:47:
7e:6d:e1:ef:90:c5:e6:a1:fc:89:f1:b7:84:7c:31:
6c:55:e3:ff:3b:53:69:6e:75:40:68:4c:d7:18:68:
a7:44:fd:f5:fb:33:1f:4d:29:68:ae:49:47:1c:45:
d3:6a:3a:04:c6:7f:74:f4:bf:76:2f:99:c1:38:90:
d4:82:43:03:f0:51:ce:7e:68:4a:d0:97:dc:95:55:
ee:d1:73:70:f0:01:6f:62:36:dd:f1:f8:20:36:74:
c6:d0:d0:81:d3:99:05:16:b8:9a:fb:2c:a3:ca:bd:
47:d7:75:0e:8f:72:c1:16:5d:2e:ba:2f:4f:bc:60:
28:5c:bb:ca:e0:77:a1:c9:78:75:fe:3e:17:eb:b6:
d1:34:1e:8b:15:c2:6b:8f:52:24:54:48:6e:73:d2:
1b:54:cb:ef:1d:83:6b:4c:39:2d:bb:f0:70:50:34:
c4:7e:82:38:3f:58:17:d5:5a:cd:e8:aa:97:44:3b:
ec:c4:cc:90:29:27:db:49:a2:10:fe:6b:69:af:94:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:44:43:DC:CA:D4:97:10:B5:52:C4:EC:98:5A:AF:30:6A:31:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/5d8c78b7-687e-392b-97b9-ee57e34dd94e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
X509v3 Authority Key Identifier:
keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c8:af:37:10:4f:14:f1:b2:a8:30:92:1b:bc:ef:4b:69:7c:
d5:11:df:57:af:f5:88:f6:77:1f:49:10:fb:98:d2:6f:3c:af:
67:ba:8d:78:48:cb:68:07:b9:a2:e5:5a:60:9c:ff:e2:19:d7:
bd:cb:ba:11:a0:b8:88:b7:3d:d1:83:22:7e:f4:07:5c:b5:2a:
5d:97:65:c1:c4:a3:ae:70:b5:f3:1c:5e:fb:af:78:e4:6d:a7:
16:18:fb:dc:d9:94:7c:7d:a4:cd:a1:53:89:c5:d4:df:52:f6:
ec:e3:93:02:95:91:6a:55:e0:b2:86:6b:9b:b3:5f:06:ae:8e:
94:11:f8:04:7c:a2:37:44:0a:f8:2a:70:92:65:40:d6:1b:d9:
be:e2:0e:b9:ee:12:ce:92:8c:b2:82:d6:7e:c6:1b:e7:74:0f:
b7:a5:b4:fa:6f:77:3b:96:28:38:50:af:4d:1c:a8:43:05:b9:
bb:ac:94:9f:b9:1b:ef:40:1e:18:11:25:1b:a9:44:28:f1:ae:
5c:b3:d6:0f:c9:db:c9:a2:41:27:d2:48:a3:e7:db:cc:99:f9:
0e:c9:2d:d7:63:d0:75:10:7e:9b:b1:f8:c5:4a:e5:85:a6:e6:
8e:ec:2e:ca:a6:83:d1:8f:2f:15:e1:00:0c:0a:42:85:d9:c1:
5d:53:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:35 2025 by rpki-client