Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa
File: 2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa (raw, json)
Hash identifier: lHs4alZal8yZjAa3SAOiW6AL+r739gzIw76eiOoSImM=
Subject key identifier: BB:C7:5E:64:B8:4D:76:09:8C:8F:19:8B:9E:DC:80:9E:24:A8:2C:64
Certificate issuer: /CN=5039f611-54f3-4a44-9153-55949e05704b
Certificate serial: 010D0C9F43285848B090B4AB0957295CF11287F8
Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 11004
IP address blocks: 23.161.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:b4:ab:09:57:29:5c:f1:12:87:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=cca07c17-b4c6-4711-b504-49bb7051ea65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:05:a8:e8:20:2f:9d:5c:05:55:95:2e:6a:
2b:5c:36:e3:57:30:e1:87:b8:c9:23:20:16:b9:41:
4c:db:04:26:32:e1:0f:af:90:48:85:a7:c1:b4:b1:
29:0a:95:c7:20:03:01:75:6b:a7:19:4f:77:00:82:
82:6c:b2:b0:a7:68:db:0b:41:8c:a7:66:18:54:77:
a2:37:78:79:d1:ef:79:6c:de:9e:d2:f4:75:05:a6:
8b:1a:87:3a:ed:c4:d7:74:11:fd:3f:d6:d3:68:06:
f8:dc:34:c7:03:68:85:41:23:1f:84:e3:fc:e9:a8:
6e:99:29:1e:d7:d6:37:de:b4:b5:f4:44:30:df:91:
50:f0:7b:cc:7c:6e:c4:33:d2:70:9b:44:fb:d3:d6:
5b:d2:95:6c:93:f2:bf:3e:ad:fa:c0:c5:93:c3:34:
eb:2a:ae:0d:ac:b6:05:dc:34:a4:6c:8c:74:a9:11:
d3:48:a3:7d:ae:d9:0e:dd:af:57:8d:23:55:0f:5b:
20:ed:3a:e6:6f:f2:c0:5f:34:93:91:ed:b0:58:b3:
d7:72:bd:70:49:f6:b7:a5:1b:7d:a2:75:71:c0:bd:
9c:d8:87:90:b8:ee:31:d2:b0:d4:b0:a0:a9:fd:6e:
56:09:55:2b:13:de:55:ce:47:2f:d4:8a:b4:a7:ba:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C7:5E:64:B8:4D:76:09:8C:8F:19:8B:9E:DC:80:9E:24:A8:2C:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl
X509v3 Authority Key Identifier:
keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:6b:02:24:3a:bb:6e:ff:e1:15:ed:10:69:e7:8f:f4:77:a3:
67:bc:f3:91:53:87:a9:42:9e:4a:7b:d8:07:fb:24:ec:5c:ae:
9f:1f:66:5f:9c:d0:e2:04:e8:fa:d0:2a:5e:ea:05:d9:37:d8:
77:b3:6e:59:39:cf:50:f6:b2:5b:e8:2c:9a:2f:ea:72:14:20:
37:cd:fa:6b:90:a8:4c:1e:ca:27:e6:32:14:03:15:39:34:e9:
91:08:09:67:94:7a:4c:07:33:b4:a1:94:e4:ae:9b:cf:77:65:
80:68:b3:ea:4b:b4:f7:46:e1:08:da:c0:4f:7a:5c:6f:c5:f2:
45:2d:e7:cf:b5:5b:40:a6:e2:20:6c:c6:71:13:ab:ec:55:34:
09:4b:58:80:37:59:ba:1b:f4:84:e6:57:ba:d8:8c:a6:ff:97:
53:aa:09:1b:21:f6:fe:84:e4:e3:82:8e:31:82:cd:03:d3:09:
6d:17:45:7b:b8:d1:99:91:48:50:dd:7f:6a:48:f9:69:29:98:
35:d8:ca:55:82:36:c5:2b:15:c9:11:f6:e8:45:9b:8b:f6:66:
bb:fa:71:7f:f2:8b:10:12:0a:be:01:41:c4:ef:ce:5c:92:a5:
8a:8d:e0:8f:48:02:48:1f:a1:c4:bb:86:a1:4a:af:23:18:6a:
98:2c:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:17:02 2025 by rpki-client