Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/7d5ece4f-eb3f-37d2-914e-3842f38415ac.roa
File: 7d5ece4f-eb3f-37d2-914e-3842f38415ac.roa (raw, json)
Hash identifier: SHqQ+A3mhiKtQyKioN9qGlo+ljMY2zrXqP7oHuWM9f4=
Subject key identifier: AD:C1:E3:28:07:59:F9:2E:31:55:6B:91:4B:9F:AA:34:38:B0:F2:D8
Certificate issuer: /CN=d85aedc6-8da7-416f-825e-fe535fa92792
Certificate serial: 010D0C9F43285848547020C0BEE7CDED68CA7880
Authority key identifier: 36:9D:65:01:F1:D7:12:D8:D2:09:09:78:CA:97:9C:01:B0:28:1C:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/7d5ece4f-eb3f-37d2-914e-3842f38415ac.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 7260
IP address blocks: 23.147.32.0/24 maxlen: 24
172.82.56.0/22 maxlen: 24
2602:fe49::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:20:c0:be:e7:cd:ed:68:ca:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85aedc6-8da7-416f-825e-fe535fa92792
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=58006b14-a4f2-46dc-a85b-4de43764da1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:5c:c1:ed:e9:c0:d6:50:f2:ac:2b:ae:55:
11:a5:59:02:aa:f7:ed:a1:c4:0a:66:5b:99:11:78:
15:60:1a:88:7f:ef:c9:3e:aa:f8:05:9c:a3:28:eb:
6c:04:4e:8f:dc:e9:f7:41:97:31:62:e8:fc:5e:7d:
c2:2f:5b:82:5f:79:97:22:af:b2:2b:d4:0d:f7:05:
c3:09:32:5e:37:5a:9f:55:f6:61:f0:1a:3c:72:d8:
26:c8:96:e1:13:a5:1d:0d:70:c4:a1:6d:b0:48:bd:
9d:b1:12:a1:01:b3:95:d4:6c:7f:46:e6:0d:c6:57:
5c:ca:3d:4c:b3:35:13:d9:9f:7a:c4:10:16:de:45:
84:f3:41:6f:d6:35:51:0e:19:bd:ca:5e:64:12:5a:
c7:81:cc:fd:8d:5a:ec:93:e5:f1:0b:79:bc:52:d4:
77:96:04:cc:4d:0f:ce:84:62:74:87:86:d0:42:ea:
78:50:5a:c1:2a:bb:81:af:c1:2a:55:88:b6:de:76:
3d:2a:97:5e:5e:e9:e1:90:1d:50:dd:ad:66:c0:e3:
db:66:a9:90:9c:ec:ee:4a:b7:3f:6f:a2:90:73:91:
a5:c6:d5:25:d4:77:ac:4b:92:51:36:79:41:e9:bd:
d2:4b:f1:2f:61:7a:d6:e0:d1:27:28:6b:df:e2:92:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C1:E3:28:07:59:F9:2E:31:55:6B:91:4B:9F:AA:34:38:B0:F2:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/7d5ece4f-eb3f-37d2-914e-3842f38415ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792/d85aedc6-8da7-416f-825e-fe535fa92792.crl
X509v3 Authority Key Identifier:
keyid:36:9D:65:01:F1:D7:12:D8:D2:09:09:78:CA:97:9C:01:B0:28:1C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d85aedc6-8da7-416f-825e-fe535fa92792.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.32.0/24
172.82.56.0/22
IPv6:
2602:fe49::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:e9:0a:e5:d7:ac:11:d8:e0:28:ee:c0:9c:5b:38:a9:73:0e:
03:09:31:63:a9:67:67:eb:c0:59:43:8c:2d:12:e8:54:3b:f2:
0d:b8:5a:06:63:44:0f:81:54:0a:f8:fe:eb:7e:1e:70:47:db:
87:95:7e:d1:9d:b9:59:6a:70:da:2e:d7:3e:a4:ba:08:05:6f:
d2:a2:61:8c:ee:6d:c2:fe:8a:65:e5:bb:d2:2f:21:c9:c8:e2:
b6:d2:ad:80:76:7a:6d:45:ff:bc:a8:62:b6:bf:a9:6e:cb:00:
8b:d7:6f:67:2b:0a:ab:cc:25:32:d9:48:96:bb:a5:0d:95:c2:
9f:ac:05:42:37:5d:e6:1e:05:b7:77:06:55:58:9a:3f:a6:4c:
98:ef:0f:40:56:30:e2:78:23:9e:df:ad:2c:03:55:e6:a7:61:
56:32:88:4d:2c:db:1e:d1:a8:df:71:a7:90:f4:5a:49:a0:eb:
33:e0:5a:fb:a5:3a:17:15:f2:f1:c4:c9:b1:31:cf:c2:ff:09:
8d:d2:d1:91:1f:7a:be:48:5a:b9:42:81:21:e1:59:92:6b:7d:
2b:b7:88:42:9d:a3:d0:a7:61:3b:ea:7d:1f:a7:5f:d8:bf:28:
bf:3e:3f:27:93:c4:1f:b4:29:74:31:3d:ac:2e:96:1e:8a:1d:
1a:1d:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:04:51 2025 by rpki-client