Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/273c7059-3aa2-3179-abe5-d96978ef5884.roa
File: 273c7059-3aa2-3179-abe5-d96978ef5884.roa (raw, json)
Hash identifier: ynGlHiiqY/WE/9ogkuiyHSsTnvI//utiMTp18P+QD84=
Subject key identifier: 99:BB:52:44:E0:D5:72:AF:82:6A:DC:42:95:5D:A9:58:01:46:3F:25
Certificate issuer: /CN=dccc1cf8-24d6-4e7f-b009-a8dc514ae85f
Certificate serial: 010D0C9F43285848F4F6A12BDD66601DAF926C00
Authority key identifier: C9:60:67:14:BD:DA:EC:DC:0E:B0:EA:AA:E1:BA:7C:8C:2C:AF:64:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/273c7059-3aa2-3179-abe5-d96978ef5884.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 17243
IP address blocks: 23.159.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a1:2b:dd:66:60:1d:af:92:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccc1cf8-24d6-4e7f-b009-a8dc514ae85f
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=c6b62095-96b7-447a-8cff-ae2dc1c04866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:52:7d:84:e8:07:a1:a7:8a:5e:bf:7f:5f:
ac:2b:d8:20:26:a3:b0:d9:35:42:3d:d6:4e:8f:95:
06:a2:7d:d8:cf:fd:a3:4f:98:f7:d4:16:bd:ba:51:
8c:88:9b:4b:94:37:70:84:4d:11:ea:38:8c:d7:b6:
ee:e5:2d:4d:02:cd:71:60:b0:de:97:ef:bf:ee:2a:
dc:f1:8b:96:f7:30:2e:c4:f8:8c:fb:07:44:9d:cb:
05:ab:b1:b7:ae:03:23:7f:84:e7:34:10:21:a0:0d:
2d:a0:63:d0:7a:39:9f:95:46:aa:2c:c3:ca:71:21:
ba:0d:6d:8f:1c:7f:02:b8:8c:88:2c:8d:23:c8:a8:
af:7c:a3:56:50:de:6b:be:2c:60:df:49:56:7c:c1:
a4:d1:12:e2:6a:39:1b:1f:9c:20:37:7a:e4:e4:1c:
70:73:19:5e:f6:60:49:b8:ca:e0:95:d7:04:06:20:
60:51:af:5e:a4:94:55:fb:91:a1:56:e4:64:4d:84:
e1:68:9b:bf:88:94:d9:a5:f9:9a:9d:5d:00:fb:e5:
59:c0:0b:d4:91:0c:12:bb:8d:c3:2a:c8:83:25:b5:
24:53:e5:72:a0:a6:ef:82:e5:dc:b2:1b:ed:a5:f3:
b0:a6:7a:bd:8c:e4:37:c2:11:a2:72:98:6c:19:20:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BB:52:44:E0:D5:72:AF:82:6A:DC:42:95:5D:A9:58:01:46:3F:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/273c7059-3aa2-3179-abe5-d96978ef5884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.crl
X509v3 Authority Key Identifier:
keyid:C9:60:67:14:BD:DA:EC:DC:0E:B0:EA:AA:E1:BA:7C:8C:2C:AF:64:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dccc1cf8-24d6-4e7f-b009-a8dc514ae85f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:47:f6:83:83:df:91:d9:0c:af:e4:87:0c:6f:ca:33:17:ce:
90:fd:82:2a:72:10:18:72:5d:75:db:b1:32:0a:42:62:eb:7f:
b0:76:67:9a:8f:b1:62:09:f6:b7:75:f0:3d:c8:eb:7a:06:71:
49:1a:13:fe:88:51:1d:62:1d:3e:0f:81:91:05:68:5b:d9:50:
c6:6e:e1:86:e0:9c:2b:3c:57:d5:b5:d2:01:76:31:21:f8:8a:
44:37:2c:c6:94:6d:2a:06:88:b9:35:4b:c3:fb:e1:fb:9e:bd:
45:1c:15:d9:08:b4:be:51:76:ea:59:55:cd:78:f1:26:09:bd:
1b:1b:05:fb:be:23:bd:4a:e0:88:12:61:83:38:40:4f:ae:ee:
1e:e3:6f:70:f9:73:aa:b3:d3:c5:b8:c2:58:0d:36:d3:0e:15:
93:9b:89:86:1d:5f:a9:33:b9:64:9f:37:9a:48:83:ce:9a:93:
71:0e:29:c6:c7:92:1a:e2:8d:40:97:06:b8:c3:1a:0d:be:6a:
2a:b2:b8:de:d4:c4:c0:6b:f8:c9:00:f8:76:81:31:56:da:cb:
df:aa:8d:ba:f8:bf:6a:01:5b:a2:6c:ca:86:39:31:62:27:da:
9e:01:ba:a1:a9:29:72:35:35:af:a0:1c:f8:4b:59:38:cb:2f:
f7:ec:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:42:55 2025 by rpki-client