Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/6efcafb6-e593-3fa7-b56c-55b742147120.roa
File: 6efcafb6-e593-3fa7-b56c-55b742147120.roa (raw, json)
Hash identifier: j3eZvuTU6K3C5g7t6NG20/qyZlSCH+gBPFhpy6ScHdE=
Subject key identifier: AB:CD:0B:50:DD:2A:39:9E:7D:A8:95:15:14:B2:54:2B:35:23:6E:7F
Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Certificate serial: 010D0C9F43285848A1361A8AD8CBBE31DA222480
Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/6efcafb6-e593-3fa7-b56c-55b742147120.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 32913
IP address blocks: 23.157.152.0/24 maxlen: 24
67.206.182.0/24 maxlen: 24
198.135.178.0/24 maxlen: 24
2606:c40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:1a:8a:d8:cb:be:31:da:22:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=e297b394-537d-498f-a7b7-f0b8784149fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:4f:61:9c:6e:8b:53:4d:46:45:53:c5:aa:
0c:15:8c:bd:54:61:63:23:c3:cf:76:51:7b:de:a2:
bd:0d:59:a3:72:32:f8:a2:ea:a5:7c:23:6e:08:9c:
fd:ba:bd:8d:29:c7:62:af:9f:65:30:fd:6d:1d:5e:
2f:ba:da:e1:84:70:3b:b6:0e:01:f5:79:18:ea:f0:
1f:af:4f:e4:e7:e5:f8:a1:00:e9:f1:e1:88:37:42:
82:de:21:3c:fa:49:c7:6b:47:b2:9e:d2:39:7d:d1:
72:27:96:71:c7:0d:2d:74:6b:4c:ce:06:a2:9c:ca:
00:ef:0d:cc:f9:6b:89:47:49:37:0f:30:a6:9f:94:
d0:87:f9:18:07:3d:74:db:89:66:35:a5:35:20:84:
90:4c:d5:2d:ad:6d:13:f9:75:c7:6b:6d:fe:ca:29:
f6:17:3e:e8:ef:67:40:10:e7:31:f8:c4:dd:9a:e3:
a3:ac:18:b3:79:d4:7f:7d:ec:8b:2d:f1:f1:db:15:
b6:68:7f:97:44:00:6b:9a:43:80:3a:17:5f:68:ef:
3a:03:ad:29:79:e5:99:ae:bc:39:1e:48:a2:69:ab:
fe:dd:8f:9d:74:34:e7:f6:a6:d2:7b:b1:01:13:1d:
17:59:cf:f7:84:d5:c2:e4:8c:ba:55:64:91:0e:4a:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CD:0B:50:DD:2A:39:9E:7D:A8:95:15:14:B2:54:2B:35:23:6E:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/6efcafb6-e593-3fa7-b56c-55b742147120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl
X509v3 Authority Key Identifier:
keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.152.0/24
67.206.182.0/24
198.135.178.0/24
IPv6:
2606:c40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:80:26:2f:94:ed:1a:9f:6d:48:8c:95:ae:3f:41:24:66:eb:
2a:c3:0e:c4:3a:41:84:27:f8:0a:86:82:96:4b:0e:93:3a:99:
a6:cf:74:ee:ba:34:28:34:73:22:69:4f:c5:81:23:a4:93:c1:
01:6e:30:7c:2c:9f:c1:07:f9:71:17:54:13:ef:8c:74:6a:e1:
81:a8:f0:ef:a2:c3:17:ed:f2:02:1e:9e:eb:a0:43:4a:99:2a:
2c:7f:8f:e5:ca:4a:1d:48:bf:37:7b:d5:b6:8c:61:3c:20:fe:
9a:bc:17:fa:b7:26:d1:70:64:54:18:dd:15:08:4d:31:b8:bf:
8a:58:bc:e9:df:18:ef:7c:e6:e8:8e:b1:c5:e8:44:26:3b:06:
3c:ff:49:59:80:20:45:aa:8e:1f:fc:5c:3e:3c:67:b0:fd:ea:
81:ca:e5:31:c4:53:af:72:2a:a5:ea:cf:65:07:39:82:85:c2:
d6:b6:06:07:65:54:30:70:92:c6:a7:ff:5f:e5:7b:0e:39:b6:
dc:70:46:6a:a7:e5:e6:50:ad:0c:d4:f2:e6:00:34:65:eb:4a:
f5:29:53:de:24:b3:11:b2:2a:f9:57:2d:c5:a0:de:35:fc:27:
4d:9b:16:f7:9d:fe:51:8d:00:4a:57:37:70:98:e9:bd:33:f5:
22:20:60:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:24:49 2025 by rpki-client