Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/97d7ce58-711a-38c9-b985-97340a2077d2.roa
File: 97d7ce58-711a-38c9-b985-97340a2077d2.roa (raw, json)
Hash identifier: LheZoMURmQLuamJarVMeudsKL9jG8J5WkecG9ucMGnE=
Subject key identifier: C9:DE:80:F6:97:23:9E:79:05:C9:40:CA:44:FC:3D:6B:CA:26:47:10
Certificate issuer: /CN=bf246bfa-4298-4264-af85-3fb2845207f8
Certificate serial: 010D0C9F4328584909E6A6178B5365BEAE858D80
Authority key identifier: 0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/97d7ce58-711a-38c9-b985-97340a2077d2.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 8796
IP address blocks: 23.135.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a6:17:8b:53:65:be:ae:85:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf246bfa-4298-4264-af85-3fb2845207f8
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=93c74f97-81c0-4fd5-ac4c-6a065f67d911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:fd:e6:57:40:50:f9:33:94:d7:4a:3c:d8:
60:34:d0:ee:cc:f7:02:33:24:2a:ad:18:42:c1:96:
cc:77:b7:38:5e:53:a9:2d:05:f6:55:b8:ab:14:59:
02:5a:0b:24:cc:8e:a2:07:f1:1e:06:bb:65:bd:c6:
b2:e8:b0:d4:f2:49:57:43:d1:52:c0:57:aa:27:3f:
c5:0b:34:3a:87:6d:af:6e:d0:d3:53:ae:4e:97:b1:
c4:e1:ad:b6:3f:9e:e3:14:93:1b:f2:89:10:cf:00:
c7:e3:01:1f:3d:4b:a9:34:cb:11:b9:63:d6:97:32:
34:0f:78:8a:3a:46:f7:f3:99:85:db:a6:bd:be:a5:
af:b7:3f:42:dc:c1:10:66:7e:90:ff:bd:26:fd:01:
a2:d0:c7:55:59:72:7c:c4:ff:be:0c:f7:29:d1:c6:
85:f1:e9:97:cf:16:db:ea:4b:ef:93:d3:3e:15:d4:
aa:fe:7e:ea:14:af:59:50:0b:b2:40:68:e8:16:06:
d8:f2:12:3e:65:92:19:4e:ba:9e:d9:9b:41:04:ed:
48:38:db:df:35:1f:80:ce:b6:b7:7c:1d:e4:96:a8:
b5:0b:0a:ba:d6:cd:d7:dc:a0:d0:3a:74:5f:d9:5c:
8c:68:94:4d:ec:dd:bf:a0:02:06:6b:c9:3e:b4:e2:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DE:80:F6:97:23:9E:79:05:C9:40:CA:44:FC:3D:6B:CA:26:47:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/97d7ce58-711a-38c9-b985-97340a2077d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl
X509v3 Authority Key Identifier:
keyid:0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:cd:cd:4b:61:ea:1d:f0:67:df:aa:b7:c4:7d:f4:6f:b0:a8:
17:15:fd:fb:6d:44:16:3e:11:62:1c:80:ae:f5:48:f7:4c:d4:
28:38:b2:45:84:0b:7d:cd:c1:ed:8f:3a:36:bd:80:e8:04:4f:
ca:b9:45:2b:c6:97:91:ff:85:fd:2b:15:eb:c0:1f:8a:64:b6:
df:0d:53:05:91:0e:db:49:4b:be:a6:e1:31:4a:e8:ef:ff:16:
53:79:10:62:06:81:4c:04:a7:e8:4e:d7:b0:5e:b6:2d:03:1e:
58:30:36:85:91:ff:1e:7e:8d:72:73:4f:77:16:9c:83:ba:f4:
9d:f3:ff:19:f5:d0:1d:db:32:6c:86:de:f7:f3:48:fe:97:63:
f7:ae:f0:76:1d:d6:e5:f2:cc:0d:82:d9:09:c8:44:6e:a2:55:
3c:58:9a:e9:2a:b0:1e:41:e1:d8:a3:cb:2b:78:cf:1a:17:95:
36:d5:1a:24:a8:41:5d:1e:1d:77:34:f2:41:df:7c:63:46:28:
a7:e1:25:2b:26:c8:b2:4d:bc:1b:21:dc:e6:55:75:3c:94:39:
34:c9:a5:77:cc:cf:f3:e4:6e:9f:34:e8:4f:2f:eb:fe:00:21:
ed:85:ae:97:0f:db:63:d8:a3:1e:5e:0f:cc:7f:8a:69:77:76:
08:07:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:35:49 2025 by rpki-client