Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa
File: bf924dbd-34bc-3c73-9911-e6e933405f1e.roa (raw, json)
Hash identifier: le0PxjHo0Zy7TxPigryC0TMxk3ldYY1tKGEJ3OMe3GM=
Subject key identifier: FF:AD:4A:C7:D2:9D:3B:93:81:26:B2:5D:E0:FF:0A:00:B3:F0:45:15
Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial: 010D0C9F432858491D718405E38101AAA6546B30
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 26904
IP address blocks: 23.247.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:84:05:e3:81:01:aa:a6:54:6b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=7ce2ac97-f4df-41b6-af6f-09a925a44649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:33:bf:1b:da:e9:ef:00:df:3b:2c:34:bf:
af:13:8a:56:92:f9:9c:40:5c:9b:6c:a9:40:06:dd:
6c:58:46:d4:cd:90:6d:3b:ed:6c:e2:c7:2d:7c:e3:
31:58:32:f0:bb:a0:2c:af:d7:53:ad:e2:c8:54:43:
65:da:d5:7f:39:59:8e:37:76:b4:61:c0:b7:f7:5d:
bb:ce:e6:f1:48:ea:84:e0:ec:fa:ad:5d:ae:23:2e:
6c:75:c5:c9:d2:e2:3f:dd:bd:9b:cb:73:85:f6:29:
06:15:f8:ec:95:b4:42:7b:3b:74:19:c9:9d:43:05:
cf:bb:52:ca:0a:86:97:e5:89:69:a5:4d:af:dc:9c:
7d:0c:f8:fa:f1:18:cf:09:e8:f6:51:9c:1c:d7:f9:
65:29:c3:18:b0:55:38:fa:c1:ae:60:40:b6:bc:9d:
d9:da:28:64:4e:c6:af:59:b3:c4:7c:7e:7e:6a:f8:
7a:47:b9:08:6d:e5:93:e4:16:b3:52:7c:68:9d:cb:
c8:44:d5:fb:8f:73:cc:69:6d:b4:dd:a4:4e:90:12:
d2:30:1f:1a:dc:cb:c1:71:23:6c:2e:62:58:aa:03:
df:d3:02:36:17:1e:51:17:7a:e1:a2:b5:db:e7:0e:
12:f6:97:4f:48:0e:4f:c0:fe:ef:a3:e8:21:3c:7b:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AD:4A:C7:D2:9D:3B:93:81:26:B2:5D:E0:FF:0A:00:B3:F0:45:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
X509v3 Authority Key Identifier:
keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:ff:55:5f:71:40:b0:44:c7:b2:2e:fe:34:de:54:45:1b:3e:
bb:8f:08:59:41:26:f9:25:45:a4:1d:bd:78:08:2f:82:70:90:
09:60:70:57:58:15:ec:33:5f:98:6e:b6:90:a7:ae:91:4a:10:
81:89:a7:a8:35:83:29:a7:82:f9:42:ad:1b:cd:97:82:aa:7c:
30:c9:2a:fe:02:9c:46:10:3e:8b:f6:25:94:2a:f3:8b:34:0b:
4b:04:3d:92:8e:a4:7b:19:d2:39:bd:8e:f9:d4:a1:95:07:6b:
c1:5b:14:e7:94:ec:3e:e2:e0:5a:2a:3c:ac:e0:cd:13:40:c9:
b0:15:c6:28:88:e7:dc:72:4e:82:b5:d6:ab:0b:97:39:7f:2f:
8b:66:c0:b5:8e:c3:4a:2d:8d:ce:c7:71:37:73:b0:da:72:56:
67:e6:a4:52:e7:f3:81:52:fe:8b:10:88:1d:0c:b8:e2:5d:89:
66:61:e5:f5:d5:60:8f:d3:5c:e5:d0:a6:1c:09:d1:19:97:51:
0f:de:87:c2:65:27:3c:a3:ea:98:14:57:1f:68:13:f3:db:8b:
8c:f0:85:fa:26:78:42:bf:90:5a:3d:35:b6:98:63:6d:12:42:
e2:d5:4b:73:d5:48:8f:ee:0e:17:5e:0a:c8:02:e8:49:ff:6a:
18:e7:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:48:45 2025 by rpki-client