Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/5b9b1057-827d-3378-bedc-a67f58f97a5d.roa
File: 5b9b1057-827d-3378-bedc-a67f58f97a5d.roa (raw, json)
Hash identifier: 2HPrZw6DZUygPMikUYjlflbQwvXaY4xYdq/UnSY2aOU=
Subject key identifier: 6A:EC:F8:9A:EE:BC:D8:EB:FD:78:4E:EC:A8:E3:D7:1C:1E:A0:83:E1
Certificate issuer: /CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
Certificate serial: 010D0C9F432858489075FCE51BA57FE4C2F60140
Authority key identifier: 96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/5b9b1057-827d-3378-bedc-a67f58f97a5d.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 212013
IP address blocks: 23.157.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:fc:e5:1b:a5:7f:e4:c2:f6:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=2b8dd998-97ef-47ab-a025-d4d53fcaf6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:49:f8:ae:36:2a:6d:77:57:c2:92:bb:0d:
de:14:7e:22:d0:57:65:fa:9d:5b:09:9a:7a:70:6e:
47:12:e0:d6:5c:d4:18:74:b2:ce:ad:f7:90:99:8e:
c7:ac:0f:37:ef:5a:93:1f:de:ca:50:b6:bc:28:57:
dc:19:d7:13:e6:f3:35:6c:66:32:dc:dd:58:66:73:
2d:79:c1:48:1b:e9:27:1c:03:10:dd:5d:9b:31:b1:
9d:c1:37:d9:a7:7d:9f:e3:0b:49:95:88:b7:0c:6d:
a9:4d:ec:4f:43:12:73:60:44:e2:3e:f7:da:ab:30:
52:4c:1d:8d:aa:6b:b4:fd:bb:eb:1c:72:51:2d:62:
de:00:e4:07:0a:f9:8d:87:78:d4:c0:b2:a8:8c:74:
37:26:19:5f:e6:cb:84:d8:9d:0b:20:58:df:1e:61:
65:37:45:93:fc:59:cf:fa:9b:1b:88:e2:a5:7a:03:
29:3c:bb:a9:b0:26:19:0e:37:c1:ce:bb:89:70:eb:
79:25:42:93:5e:40:93:84:a2:4d:59:8a:9b:32:12:
20:20:f5:a7:e7:4e:f5:1b:08:1f:c1:9f:1d:6e:66:
24:3a:08:83:13:c7:12:5a:d5:99:af:84:ef:9e:6b:
3b:f0:fd:89:3b:4d:10:43:47:91:11:b4:92:5e:b8:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EC:F8:9A:EE:BC:D8:EB:FD:78:4E:EC:A8:E3:D7:1C:1E:A0:83:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/5b9b1057-827d-3378-bedc-a67f58f97a5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl
X509v3 Authority Key Identifier:
keyid:96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:d6:e5:c6:f7:9c:14:9c:2e:80:50:e5:cf:cf:f7:30:d4:f1:
f1:fe:9f:31:c1:ae:e4:86:07:9e:9f:69:00:80:cd:1d:84:60:
50:e8:ed:69:a9:19:3c:46:a4:81:f7:5d:ae:26:5c:ae:f6:b3:
a1:e4:9b:3c:72:61:d0:a2:42:90:18:53:fb:81:3c:f3:ae:c6:
20:52:ab:0d:88:8f:9e:61:6b:03:26:c6:9d:bf:8b:af:e4:26:
9f:13:30:ae:1e:57:78:55:16:3f:e6:22:22:4e:71:fd:d7:93:
80:ea:4d:7e:71:dc:0d:d8:bd:b2:fe:1f:76:8c:4c:4a:21:33:
35:45:6d:64:d7:2a:0a:28:d0:08:01:60:74:64:6d:76:11:fe:
5b:b8:05:67:6c:12:64:51:45:2b:80:e1:dc:f0:6d:4e:ab:d4:
fe:a8:0b:58:c7:e6:df:ff:fb:26:a8:0e:4e:a0:38:cc:9d:40:
ca:73:af:cd:8e:24:22:f7:67:02:b6:d7:f1:68:7b:fc:f2:26:
8e:9d:23:45:35:3c:76:3d:53:68:79:2e:e2:d1:89:c7:04:06:
ea:41:42:b0:f0:71:82:63:24:56:c9:03:6c:9d:e7:e4:64:d9:
62:64:39:4f:a6:87:7f:63:50:4d:80:95:1b:62:99:97:75:a5:
6e:c1:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:55 2025 by rpki-client