Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6d2e587e-a3f4-465c-a9a6-2345accba31b/9d4c9644-5d28-310b-81bf-333c26f2c4f5.roa
File: 9d4c9644-5d28-310b-81bf-333c26f2c4f5.roa (raw, json)
Hash identifier: vXcJzrFue4Ffc6V6rKavBQ/KW/vKXoGKq1UKIv69sOg=
Subject key identifier: 2C:43:21:65:B9:33:12:B1:A0:EC:14:A0:92:AA:B6:48:01:2F:1F:C8
Certificate issuer: /CN=6d2e587e-a3f4-465c-a9a6-2345accba31b
Certificate serial: 010D0C9F43285849287E6DCB4562B71AA3AAD900
Authority key identifier: 32:59:98:74:62:AC:29:51:5D:EA:6A:9C:9E:D0:B9:B7:C0:69:E8:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6d2e587e-a3f4-465c-a9a6-2345accba31b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6d2e587e-a3f4-465c-a9a6-2345accba31b/9d4c9644-5d28-310b-81bf-333c26f2c4f5.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 400050
IP address blocks: 23.191.144.0/24 maxlen: 24
23.191.145.0/24 maxlen: 24
23.191.146.0/24 maxlen: 24
23.191.147.0/24 maxlen: 24
23.191.148.0/24 maxlen: 24
23.191.149.0/24 maxlen: 24
23.191.150.0/24 maxlen: 24
23.191.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:6d:cb:45:62:b7:1a:a3:aa:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2e587e-a3f4-465c-a9a6-2345accba31b
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=3904d29a-522d-4f0f-8dbc-6b908ba224c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5b:51:1b:27:9b:f0:a1:f8:f6:f4:4e:a7:69:
4c:18:d5:18:1a:f4:dd:94:6e:13:26:a6:6a:75:df:
71:87:15:6e:94:d4:1a:32:a4:21:bc:c7:cc:06:bd:
cf:11:ad:55:bd:d5:c7:f3:94:9a:6c:54:f5:06:82:
a4:88:0b:e7:d7:96:02:c2:5e:36:e5:c2:3d:e1:c1:
01:48:bf:21:9c:14:a7:bc:9d:74:4e:6d:f1:bf:2b:
c5:27:80:ef:f6:06:e2:0b:3e:15:9d:7b:94:23:84:
9f:0b:ea:34:75:93:3c:ad:ba:01:cb:d5:8e:e5:de:
da:80:0a:92:ad:eb:01:e4:08:d3:f5:40:62:b4:5d:
fa:da:7e:b2:43:ad:ed:4f:8e:fd:97:fc:8d:2d:f8:
29:a3:29:4d:57:37:49:fa:1d:f8:4e:6f:55:b0:00:
63:d5:0f:dc:7c:dc:21:5a:81:a3:fa:59:a1:bd:e3:
3a:8e:43:31:17:44:13:c5:6c:21:87:4f:37:12:3b:
04:08:53:c2:95:37:3b:29:a4:d4:3e:0e:12:23:d4:
0b:d3:8d:af:05:42:08:77:69:ac:46:86:33:e3:12:
66:94:99:37:c8:58:f5:d6:3c:f6:be:d3:d4:f4:5d:
a0:61:68:2e:bd:17:aa:cc:19:14:55:3f:63:65:24:
ac:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:43:21:65:B9:33:12:B1:A0:EC:14:A0:92:AA:B6:48:01:2F:1F:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6d2e587e-a3f4-465c-a9a6-2345accba31b/9d4c9644-5d28-310b-81bf-333c26f2c4f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6d2e587e-a3f4-465c-a9a6-2345accba31b/6d2e587e-a3f4-465c-a9a6-2345accba31b.crl
X509v3 Authority Key Identifier:
keyid:32:59:98:74:62:AC:29:51:5D:EA:6A:9C:9E:D0:B9:B7:C0:69:E8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6d2e587e-a3f4-465c-a9a6-2345accba31b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:d4:30:c8:76:3d:a8:11:30:52:39:6b:7b:18:77:95:63:7e:
f8:d2:b7:a3:e3:6b:2b:5c:9c:54:7c:d8:8c:4c:85:bb:d3:1a:
b1:d0:d3:e3:a0:d7:bc:7f:e5:00:fa:09:05:0e:c9:42:a2:1f:
7f:cc:44:b5:16:28:71:b8:80:28:d0:34:db:0e:51:1a:be:f6:
d1:00:10:a5:e7:66:6a:6b:a0:e8:7b:56:74:33:9c:19:01:6c:
b0:26:3a:47:2b:b4:f1:2b:bf:f7:06:8d:85:54:df:ee:4e:e3:
f0:b1:be:3e:e5:8d:5c:74:b8:3d:fa:aa:09:fc:a8:3e:3d:ec:
3e:92:78:3f:62:80:7f:7d:9c:95:f2:eb:93:e8:fe:80:7a:f0:
1c:9e:03:66:75:18:60:8b:93:9f:df:8e:ff:dd:4c:a0:00:8f:
71:88:81:6e:01:c8:72:dd:7b:60:60:70:95:b3:58:83:47:a6:
f1:0e:d7:53:c4:5f:56:36:23:0e:0e:c0:e0:b7:7b:f9:45:26:
cb:23:43:70:ed:9c:06:31:03:6b:86:61:89:1d:26:37:cb:52:
08:ad:dd:96:0a:2f:fe:07:84:87:17:7b:1d:74:d0:1d:a1:3f:
e9:1d:82:26:fb:e5:7b:c3:24:36:c0:5a:c3:b5:82:c4:a9:3b:
9c:39:67:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:39 2025 by rpki-client