Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3bcf8fa6-ec78-394c-813c-f941b803fc26.roa
File: 3bcf8fa6-ec78-394c-813c-f941b803fc26.roa (raw, json)
Hash identifier: jVzW7BrR93qIcy3rMqho943exeTKQoQ5bsXXjmvgwbs=
Subject key identifier: 28:E5:95:9E:9A:9E:E0:EE:9B:12:27:1C:26:46:DF:49:EC:DD:EC:0B
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F4328584909E69594BED617E8A4504A68
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3bcf8fa6-ec78-394c-813c-f941b803fc26.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 0
IP address blocks: 169.145.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:95:94:be:d6:17:e8:a4:50:4a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=f37f2f6d-cf4b-4b77-9c85-de9f8ba6f0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3c:25:71:17:c7:b0:7d:61:2b:5e:45:0e:0c:
26:d8:c5:9d:1f:4e:d0:36:0e:5a:c6:ee:1b:7d:09:
7a:8f:ea:ef:ad:54:64:63:f4:fe:71:6a:58:11:36:
30:d7:7c:b4:fd:47:ec:13:4e:8f:d1:6e:66:0f:b5:
89:b6:7a:91:0d:ce:f0:7b:41:0b:b8:8f:10:3e:e9:
5b:25:00:be:c4:e2:62:ce:66:ae:5d:6f:55:03:b2:
a7:c0:dc:37:a9:61:af:a7:47:01:38:62:85:74:e5:
b7:80:3f:ff:2c:b4:55:99:7c:3e:9c:09:b1:6c:39:
a8:8a:9e:dd:94:c8:3a:ee:05:dc:f8:d6:85:cc:3b:
44:0f:39:14:e8:18:8c:07:0b:c8:c5:48:94:26:0f:
e8:c0:87:0a:8b:56:da:9f:97:e3:a4:3d:d6:ab:f2:
f6:0f:d7:4b:bd:f9:98:93:a8:ad:3d:58:8c:48:f0:
1f:7f:62:ac:91:e5:dd:cf:10:75:4e:c7:ad:18:c1:
90:d3:a0:77:f4:2e:4b:04:2f:cc:f1:8a:6c:d5:05:
fd:a7:d4:d3:91:9a:78:6e:ac:83:e3:75:68:1c:de:
ce:35:3a:27:0f:4e:78:ad:d5:8a:5d:8a:a0:3f:2a:
38:70:ea:0f:5d:01:f8:0c:c0:9e:4e:74:e6:c3:00:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E5:95:9E:9A:9E:E0:EE:9B:12:27:1C:26:46:DF:49:EC:DD:EC:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3bcf8fa6-ec78-394c-813c-f941b803fc26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:3d:0c:43:96:c7:8d:6c:d6:c2:79:da:1d:6b:8f:29:a7:7c:
6f:6b:c5:1c:00:76:b7:8d:84:0b:f4:0e:7b:7e:ae:ef:80:e3:
6a:c2:95:1c:61:b4:90:cc:e1:69:2e:0c:46:7f:2c:36:1b:1d:
36:bb:57:24:ed:2c:75:39:96:a4:ab:fe:4e:f4:17:f1:67:70:
a0:02:13:be:2f:64:ba:44:50:09:4a:43:a1:e3:c9:74:cc:25:
ed:e7:80:53:a0:db:8f:4a:50:14:3e:6a:e2:fb:f0:db:10:34:
39:07:06:9f:13:7f:22:82:df:34:6f:56:7b:c8:a0:78:aa:f0:
e6:cb:49:cc:3d:cc:58:4d:38:1f:d7:bd:96:b7:8a:a4:7e:70:
9d:e3:cb:4a:ee:ba:b1:b1:01:06:22:75:45:97:4b:cf:8f:d9:
57:e0:15:8e:0a:77:32:bc:6b:48:10:82:09:6c:2c:6c:16:0f:
d4:f7:b9:c5:ca:1d:ee:6b:1a:86:9b:73:81:f7:ae:00:87:77:
b5:31:4f:98:a4:9c:17:20:ee:be:c1:db:d0:a8:80:14:d7:0a:
60:69:fa:ca:cb:b4:5d:54:82:17:80:17:fa:0a:40:ae:98:50:
e1:0a:5b:64:ee:4b:b9:10:a2:1d:51:83:f1:19:df:f5:2a:54:
0f:98:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:10 2025 by rpki-client