Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa
File: ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa (raw, json)
Hash identifier: q+WrY4vv2BgZmI9TjJGGtCUEw/tu3jsoPzwF7slGJJM=
Subject key identifier: 92:4B:E6:08:AA:26:52:F2:C2:35:DA:96:53:C8:A3:98:7C:B8:5B:CD
Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc
Certificate serial: 010D0C9F432858492E13BE682A190CE1F4330000
Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 400519
IP address blocks: 23.133.216.0/24 maxlen: 24
147.185.221.0/24 maxlen: 24
2602:fbaf::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:be:68:2a:19:0c:e1:f4:33:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=81127858-bd2d-436b-a993-7b3c3cfac6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:ba:9d:42:1b:ec:d7:e4:e2:d6:d9:62:ad:
b7:ce:57:f6:d2:04:17:ac:9e:02:b3:b0:51:84:99:
5f:8d:8e:ee:6b:75:e4:81:27:e9:90:18:15:b0:a6:
0e:c2:58:5e:26:d3:8d:bc:78:e4:5c:f1:92:84:dc:
e6:4a:b2:ee:dc:67:a1:b8:9d:3b:55:f2:1d:47:eb:
65:be:89:20:72:ff:1d:45:4c:e2:98:ac:21:fe:cc:
40:83:8a:4f:65:98:9f:a6:47:42:41:80:a5:fb:d4:
30:67:68:22:0a:8d:2e:e0:54:cb:97:42:c4:d1:31:
73:91:5b:18:5f:d0:dc:41:88:57:4b:66:e8:b7:01:
a0:1d:0c:a6:74:1d:9a:c2:44:f8:ee:f8:9c:21:ad:
5b:a1:90:08:80:a9:60:54:7a:12:f3:7b:23:53:30:
06:1e:36:02:66:5c:3f:dc:aa:d4:73:21:42:c7:be:
3d:e2:a4:c7:d6:56:63:68:ad:71:8b:4f:a4:72:04:
1d:52:48:12:2d:07:d0:f6:ff:6c:e3:38:56:e4:f3:
ca:c0:8a:73:74:af:3e:3c:c0:4b:10:6a:d9:a5:96:
c3:27:4d:c3:f4:eb:c5:18:6c:e0:fa:bc:cb:97:30:
c5:17:fe:c9:bc:97:10:76:88:44:94:2d:71:ad:d4:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4B:E6:08:AA:26:52:F2:C2:35:DA:96:53:C8:A3:98:7C:B8:5B:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl
X509v3 Authority Key Identifier:
keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.216.0/24
147.185.221.0/24
IPv6:
2602:fbaf::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ac:47:c1:20:7d:85:03:51:10:65:8c:8b:5b:21:42:9f:3d:
d9:ab:d5:a2:ad:1f:ee:e7:b3:09:c4:01:b2:1e:af:96:2b:b8:
7d:dc:21:3e:21:6b:95:2c:38:37:b6:95:b1:b2:32:0e:75:3c:
72:20:78:7a:6b:f3:ca:72:ec:a0:46:d0:62:52:85:68:33:81:
c9:e1:f5:86:62:17:73:5d:04:75:65:d1:d7:c7:c2:b5:5f:83:
32:27:bc:15:11:df:7e:d8:8b:88:bb:4b:9d:e1:01:fd:7f:43:
33:d2:00:0c:8e:7b:c9:9c:0b:aa:33:90:af:e7:56:67:8f:87:
dd:ed:e0:0d:0a:08:49:63:41:ca:70:e4:7d:08:b3:eb:9d:04:
ec:3f:24:70:a8:d9:e9:8b:ce:bd:cf:0c:aa:05:cf:38:a7:dc:
4b:c0:4a:0e:f6:21:80:73:b0:7b:04:2b:9c:45:15:53:1a:9b:
72:5a:fb:1e:99:03:dc:a4:8d:1f:7d:19:aa:eb:96:a2:7e:00:
4a:47:e5:99:f5:55:3a:09:e9:f1:3c:68:ef:b3:11:01:ac:c7:
1f:fd:d7:d7:33:73:7b:e3:34:59:f8:6e:66:b5:7e:15:62:0e:
71:97:17:db:bb:be:29:52:4e:ed:fa:43:7e:e7:ac:54:33:8b:
56:dd:74:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:18 2025 by rpki-client