Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/0e61dcdc-c849-360c-90c9-548fab2dd626.roa
File: 0e61dcdc-c849-360c-90c9-548fab2dd626.roa (raw, json)
Hash identifier: grfimXvRZE8YoGfzdsUWM+vsYUsZWEqHyWZgeTyr2f0=
Subject key identifier: 2D:2A:F3:AD:3C:1E:71:D6:C4:59:48:98:7A:C3:BA:B5:56:A1:9B:F4
Certificate issuer: /CN=fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6
Certificate serial: 010D0C9F432858482C62C745A8B36566C4C7DD00
Authority key identifier: 9F:E1:DB:03:7C:50:EB:C7:EC:37:7D:41:0B:4C:B0:D9:B9:A9:06:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/0e61dcdc-c849-360c-90c9-548fab2dd626.roa
Signing time: Wed 11 Dec 2024 17:41:29 +0000
ROA not before: Wed 11 Dec 2024 17:41:29 +0000
ROA not after: Tue 11 Mar 2025 16:41:29 +0000
asID: 11611
IP address blocks: 23.158.112.0/24 maxlen: 24
2602:fd61::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:62:c7:45:a8:b3:65:66:c4:c7:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6
Validity
Not Before: Dec 11 17:41:29 2024 GMT
Not After : Mar 11 16:41:29 2025 GMT
Subject: CN=781e8059-08f8-415d-b5d1-ced0c484e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:5f:50:15:17:32:74:0d:f9:3a:68:df:3a:
aa:f9:34:99:be:ac:de:fa:e1:bf:b7:fc:8c:73:3b:
d1:c2:16:54:78:7d:6e:b6:f2:fe:85:ad:e0:02:93:
d3:04:62:ae:91:60:53:fa:07:2a:ed:1d:f5:b2:9d:
86:4c:cb:e2:43:4c:93:46:a4:c1:b5:c7:03:b2:ae:
f9:ff:6e:e2:5f:52:0c:3e:e7:1f:51:6f:81:b5:06:
e5:53:2f:b7:82:f5:88:ca:cb:4b:aa:57:fd:c5:c9:
da:e4:b4:1e:c9:3d:48:30:88:04:b8:d9:83:86:96:
bf:2f:e6:d4:f9:fb:a8:62:ff:e6:40:cf:16:55:3b:
94:df:c0:d0:b1:45:40:86:96:d3:9e:2c:57:71:07:
73:29:3d:fa:5e:77:f4:60:3b:71:90:1c:d4:5d:c3:
1c:b8:2d:38:45:e4:07:0c:02:18:97:7a:70:d7:42:
2a:5f:b8:5f:d4:68:88:e1:6c:56:1c:28:4a:9f:75:
21:aa:7f:7a:83:e9:ba:88:cb:ac:5e:02:40:b5:57:
e5:d5:42:dc:5c:65:ec:31:41:24:10:61:63:6e:41:
8c:58:15:10:85:0a:7f:fd:e1:b6:7c:73:32:0b:9c:
71:f8:3c:59:f5:93:f2:c3:5d:8d:f2:36:e2:72:f1:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:F3:AD:3C:1E:71:D6:C4:59:48:98:7A:C3:BA:B5:56:A1:9B:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/0e61dcdc-c849-360c-90c9-548fab2dd626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.crl
X509v3 Authority Key Identifier:
keyid:9F:E1:DB:03:7C:50:EB:C7:EC:37:7D:41:0B:4C:B0:D9:B9:A9:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.112.0/24
IPv6:
2602:fd61::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:0c:8e:b9:29:55:fd:b3:da:a2:e4:0a:3f:25:62:8a:b4:7d:
af:53:b6:85:5c:37:3c:10:92:fc:a1:a5:e5:36:bc:b7:36:de:
cb:73:0c:80:5d:34:7f:4e:98:83:c4:cf:49:95:cb:ef:9a:fd:
fc:0c:bc:e3:67:2f:32:6f:e0:dd:1b:a5:6b:be:2e:d2:55:d2:
42:a7:d1:20:25:92:17:91:a2:4f:b8:40:a1:50:c9:5b:6d:89:
96:97:7f:ba:01:a9:3d:66:c4:58:7f:ba:c8:5d:ec:aa:04:a3:
0d:a6:d1:bc:81:93:67:f5:dc:ab:54:83:e9:9c:b4:f6:7d:38:
dd:bc:48:a4:22:1a:89:0d:22:1c:37:69:4b:03:b5:3a:30:d6:
24:80:88:55:ca:1e:38:3e:21:a2:c3:b9:75:2f:23:47:44:7b:
d1:57:af:8e:3b:24:88:67:78:a7:ec:b2:87:fc:4e:5b:ae:6d:
da:55:b6:ca:d0:97:2c:d6:a7:73:35:86:4a:c6:fc:4f:ad:c7:
44:15:75:eb:90:03:46:e9:cc:81:84:17:f2:3d:3e:43:29:76:
20:6f:40:48:99:f4:8a:7d:4c:0b:b7:8b:b8:47:f0:5c:fe:0a:
1f:f8:9b:ed:ce:c3:72:21:74:52:46:3e:30:78:36:65:cb:08:
fa:6e:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:10:39 2025 by rpki-client