Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa
File: 5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa (raw, json)
Hash identifier: OlhKcDWGFGqjdT0w/zxQyzJvZboISlYgzQOJsHKGxEg=
Subject key identifier: A9:1E:26:77:2E:15:A5:7F:54:9D:65:1A:08:49:06:4B:3F:2E:0E:23
Certificate issuer: /CN=7405a32c-964c-4b30-a008-0f287767e1c1
Certificate serial: 010D0C9F4328584913AC1A6D3BD0B104CC34BD80
Authority key identifier: E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 34939
IP address blocks: 23.247.212.0/24 maxlen: 24
23.247.213.0/24 maxlen: 24
23.247.214.0/24 maxlen: 24
23.247.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1a:6d:3b:d0:b1:04:cc:34:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7405a32c-964c-4b30-a008-0f287767e1c1
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=914b1da7-b445-469e-82b9-c38e0335b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:9b:e6:ab:ef:19:c0:18:97:1b:d7:66:5c:
05:57:3b:69:70:33:67:f8:f0:74:d2:3d:8d:54:ed:
ce:5b:8f:51:00:c8:00:25:03:a3:06:aa:2a:23:59:
5e:39:6b:b4:78:87:3a:60:a2:3c:58:c2:a0:c6:a2:
ec:6f:5b:14:b1:4c:dc:b4:86:1b:52:43:72:ed:51:
e6:ca:6e:cb:c5:79:5c:e8:dc:63:7d:1d:d8:4c:b3:
0c:14:c1:94:2d:1f:da:e6:1e:1c:5e:c7:7d:b8:ef:
ae:38:c4:88:01:0b:1e:81:3f:80:a4:44:81:a0:7f:
a3:09:e7:8c:b8:35:d7:b7:fa:0b:e9:94:e4:da:cd:
b2:aa:1d:88:0c:21:cb:de:67:ec:7d:84:34:f6:2d:
c7:46:97:70:02:ae:ee:a6:6d:a3:a2:de:a9:08:03:
2c:43:ce:34:23:07:de:28:fb:cf:3a:75:4e:f2:69:
23:79:59:48:b5:db:ae:ae:da:53:1b:72:34:e2:40:
97:dc:c0:8f:13:d6:3f:88:5f:31:bb:28:7a:d3:5a:
b3:b4:ab:ae:d3:fa:61:ab:19:16:f1:9b:49:23:55:
fd:39:b2:9e:d4:8d:6f:49:ed:14:28:bc:50:66:3f:
fb:ad:7e:5b:a1:22:57:5b:92:a0:0a:0e:02:33:60:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1E:26:77:2E:15:A5:7F:54:9D:65:1A:08:49:06:4B:3F:2E:0E:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl
X509v3 Authority Key Identifier:
keyid:E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:af:db:00:cf:51:fd:76:89:a7:25:40:31:33:bb:79:b4:08:
d2:17:22:14:4a:14:3c:17:28:e0:8f:31:a6:3f:25:5b:1a:82:
85:99:a7:c9:08:97:ed:66:6d:a7:40:b9:3e:ff:b7:1d:6b:58:
be:32:2d:23:f6:76:56:c9:94:dc:59:c8:e9:fc:cb:d0:ad:7d:
e7:e3:3b:24:da:b6:a4:63:d8:c4:d3:90:ed:bd:a6:7a:dc:f2:
76:f8:b2:ec:d5:b0:da:3c:90:75:bc:f2:69:0a:59:09:22:72:
12:68:8d:f5:92:1a:e9:f0:6e:8c:6c:f5:67:97:a4:7d:b4:9d:
b2:e6:c1:c4:2a:23:01:bd:b4:db:3a:5b:cc:21:33:31:af:3a:
81:e5:a4:71:04:72:0a:dc:08:e0:05:f6:4d:14:c8:08:7c:26:
b6:5c:43:f4:51:50:98:4d:2f:b9:24:61:2f:9f:09:a6:79:5f:
6b:80:1f:c9:15:30:bf:2c:3f:d6:47:87:89:bc:e6:7c:16:7a:
b2:3a:31:54:39:75:14:2e:d3:b7:9c:cc:60:0e:2b:9a:1b:26:
bd:1d:cc:e8:fb:1a:d6:ee:9b:a8:7d:25:0a:de:ee:ca:b0:d5:
2b:10:b6:9a:20:45:43:05:97:d9:8d:7a:80:3a:f4:da:17:f8:
22:f7:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:25:45 2025 by rpki-client