Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
File: 2f160a0e-a123-3a72-99e1-d669496bd1e0.roa (raw, json)
Hash identifier: 785B7wnxPfp+MMSmP0waMZfCkd6m5VbilqKHoA2BWE8=
Subject key identifier: C3:06:58:35:D5:1C:02:7C:45:27:2E:7A:7C:53:AF:55:28:B2:64:4B
Certificate issuer: /CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
Certificate serial: 010D0C9F43285848A400C0131F2D43DCCC593320
Authority key identifier: 32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 25944
IP address blocks: 23.157.168.0/24 maxlen: 24
2602:814:d000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c0:13:1f:2d:43:dc:cc:59:33:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=66d783ee-bfd8-42c5-9cab-eff1970e7450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6e:87:fc:1f:0f:91:da:24:b2:ff:92:b4:e2:
13:af:22:7f:27:b7:5f:e9:77:20:fe:fb:29:ed:51:
70:06:cf:a6:1d:1e:c8:e8:0c:58:58:7f:b1:b6:43:
e2:3b:50:87:01:e6:35:1e:88:0f:cc:59:54:b2:90:
0c:f8:05:ec:7d:43:d1:bd:1a:f7:ce:66:fc:78:d4:
fb:08:d6:87:c4:ba:dc:15:e6:69:fb:49:69:01:18:
3d:3f:b4:5e:e3:68:22:c7:9e:91:08:eb:5f:81:bb:
4f:60:95:f5:ac:4d:b9:89:51:ea:6e:e4:92:33:47:
61:6b:3b:77:2b:2f:fa:f6:73:e7:0c:85:0f:60:3d:
9d:47:f4:05:9f:22:d1:22:40:d0:6d:a6:1d:49:e2:
76:66:44:9e:2f:9a:ba:0d:d3:de:43:e0:e5:01:39:
fe:9f:ae:53:e2:f0:76:1b:60:b6:9c:10:7a:3c:76:
74:68:3a:1d:5d:e2:c7:18:65:ee:93:36:41:22:d0:
9f:27:81:19:ef:8a:97:c6:5a:b2:90:74:6d:bd:38:
18:42:02:45:20:6d:35:ed:da:be:d9:72:f4:42:ab:
4d:4a:05:ae:7e:7e:68:d8:f3:d0:bd:60:29:fe:dd:
46:98:17:fa:9c:33:f4:7c:81:72:ec:af:78:70:7e:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:06:58:35:D5:1C:02:7C:45:27:2E:7A:7C:53:AF:55:28:B2:64:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl
X509v3 Authority Key Identifier:
keyid:32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.168.0/24
IPv6:
2602:814:d000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:a6:76:ab:2b:70:64:8b:d6:4c:7f:63:fb:18:a1:82:43:09:
3a:bf:d6:30:e4:fa:df:93:d9:15:1e:49:aa:de:ab:2f:63:a5:
40:c1:d2:15:3e:1e:ea:f1:85:2f:9e:49:82:a2:98:ca:11:aa:
24:c6:b1:59:f3:26:2b:99:0f:99:87:ef:ce:8b:e2:eb:ee:b8:
89:cd:b2:f9:d2:bf:96:a0:3a:11:39:d8:fd:7b:68:93:68:b4:
c0:4e:2e:7c:45:25:f0:31:bc:c1:83:fa:90:0b:a5:dc:98:47:
fd:a6:96:cd:09:cd:e4:a6:38:26:d7:de:08:b3:b7:10:62:35:
31:79:f8:07:2d:62:de:1d:f1:ef:25:9a:fc:28:e1:86:a0:1e:
5c:70:4b:02:02:f4:40:fe:35:1b:d0:14:ca:d1:1f:73:18:58:
e3:76:95:6c:ed:cf:77:21:c4:5d:9a:85:f7:95:4e:5c:68:ce:
1f:a5:3c:45:02:e6:75:ee:c6:61:e9:be:64:11:c9:37:2c:2b:
ea:38:a1:95:02:a5:93:1b:cd:36:e7:94:49:2a:c5:84:e9:03:
cd:1d:76:93:39:a2:c2:39:a0:b5:9f:87:be:c0:13:0e:79:1a:
0c:86:af:f7:70:a4:0c:2a:44:9a:c2:02:9d:07:93:26:85:f2:
b0:18:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:31 2025 by rpki-client