Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/576211ec-d042-32c9-995d-1385a0d1ea5e.roa
File: 576211ec-d042-32c9-995d-1385a0d1ea5e.roa (raw, json)
Hash identifier: fx/YHOgBQ5TMtXdonywxNJMRPmZ+tK30cV0oHQbpYvo=
Subject key identifier: 7E:60:E2:32:38:AE:46:DC:ED:D6:D8:AC:9B:0F:26:E0:C8:A6:D6:C1
Certificate issuer: /CN=4d46d941-6831-4f0b-b6f2-cb7d573cacf2
Certificate serial: 010D0C9F43285849393E7ACB810E5843E09E2498
Authority key identifier: C2:4A:9C:95:C4:0D:0F:A8:68:30:8C:F6:9A:FD:DA:6C:B3:48:81:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/576211ec-d042-32c9-995d-1385a0d1ea5e.roa
Signing time: Tue 18 Mar 2025 01:00:38 +0000
ROA not before: Tue 18 Mar 2025 01:00:38 +0000
ROA not after: Mon 16 Jun 2025 01:00:38 +0000
asID: 63023
IP address blocks: 23.160.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:39:3e:7a:cb:81:0e:58:43:e0:9e:24:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d46d941-6831-4f0b-b6f2-cb7d573cacf2
Validity
Not Before: Mar 18 01:00:38 2025 GMT
Not After : Jun 16 01:00:38 2025 GMT
Subject: CN=201b13b5-793e-4c2d-91bf-1e3460c1cfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:dc:52:5c:22:1a:56:e0:b4:e0:68:43:65:
6f:02:f6:ea:af:0e:43:f9:3c:b4:98:6e:a5:f7:c1:
77:1c:e1:c8:d2:dc:1d:93:47:77:3c:90:0c:aa:07:
62:0c:90:a2:d4:81:f0:1f:cd:a4:b9:18:20:a5:23:
c0:a3:eb:3b:9f:5f:81:f4:ec:17:57:c4:c7:0d:a6:
9b:d9:63:92:e1:9a:0f:65:0d:62:93:a1:aa:c3:bf:
ab:6a:54:89:55:0d:99:c5:c8:6e:2c:5c:ab:df:6b:
83:98:ab:f5:22:1a:6f:ac:fc:2c:67:ef:82:47:50:
8b:d9:e8:ab:89:78:89:5f:4e:ad:d1:3b:31:3e:fb:
89:6e:f6:df:fa:24:17:af:8f:eb:0c:73:5c:ab:20:
e6:56:88:7b:b1:54:1e:ca:24:22:bc:37:bb:ee:9c:
1f:8e:96:74:2c:d5:19:55:41:67:76:34:90:25:94:
5e:56:1b:fe:af:ec:cc:12:d5:ed:d8:e5:f3:f0:c9:
a0:6b:04:19:87:65:f6:22:35:d5:33:90:7c:27:4f:
1d:88:21:c3:68:7a:42:2c:3b:a2:2b:39:05:9d:7d:
bc:6d:e1:a4:e7:d4:a1:1c:ff:5c:d8:7a:3f:91:64:
50:60:36:28:38:7f:d0:71:88:a4:42:a2:67:a0:c6:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:60:E2:32:38:AE:46:DC:ED:D6:D8:AC:9B:0F:26:E0:C8:A6:D6:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/576211ec-d042-32c9-995d-1385a0d1ea5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.crl
X509v3 Authority Key Identifier:
keyid:C2:4A:9C:95:C4:0D:0F:A8:68:30:8C:F6:9A:FD:DA:6C:B3:48:81:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d46d941-6831-4f0b-b6f2-cb7d573cacf2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:50:a8:d1:21:f2:0f:a5:0e:d5:0e:64:0b:56:b3:47:de:2a:
d1:0d:53:02:ce:6d:a3:d2:c9:d7:d2:19:fd:42:6a:d1:2e:be:
a8:fd:38:34:00:54:58:39:3d:d2:2e:72:f5:5b:1c:db:8a:a3:
59:0b:0d:ac:f2:af:44:da:3c:75:c6:5b:bd:06:f4:14:96:a4:
37:f7:69:8b:fe:fa:18:b6:42:40:79:1a:38:82:b0:2b:08:e4:
a7:79:dc:1a:e3:d2:91:c1:d8:2c:4b:5c:a4:fc:fe:06:6d:5e:
2d:37:34:69:f0:f5:5f:37:09:d7:ae:1e:ea:a7:90:c5:be:1e:
51:fb:52:69:80:92:ac:c8:2c:ef:1b:17:d0:f7:ea:1a:7c:bb:
b6:18:fb:b8:bb:9b:cf:3a:66:a8:6a:cc:bf:75:68:fb:19:14:
73:01:0d:51:67:19:f6:d4:49:54:c3:0c:d5:1a:94:ff:95:af:
ff:e2:73:aa:e2:4e:7c:d3:35:89:67:b5:03:d1:8a:86:41:b9:
17:fa:c0:5f:e8:58:8c:71:3f:2b:35:e5:c4:12:49:83:4b:ec:
05:87:8b:96:e2:78:19:7b:04:75:f6:2c:b8:6f:46:1a:f0:91:
4a:60:13:28:7b:84:d4:96:1b:d1:d7:ac:17:b4:0e:8b:0e:4d:
4d:18:1f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:37:35 2025 by rpki-client