Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/d80eccf7-51c0-3bdd-be0c-3ce517b4826e.roa
File: d80eccf7-51c0-3bdd-be0c-3ce517b4826e.roa (raw, json)
Hash identifier: uBKnLXQmoKE0VDugdKHJAl9q2DH8AN3Cttde3PMm6vE=
Subject key identifier: 2C:3E:0B:A5:FA:E4:8B:07:0F:F6:81:6D:2F:3F:23:16:53:A6:0B:90
Certificate issuer: /CN=fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6
Certificate serial: 010D0C9F432858482C6313122529B1D6BDA30A80
Authority key identifier: 9F:E1:DB:03:7C:50:EB:C7:EC:37:7D:41:0B:4C:B0:D9:B9:A9:06:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/d80eccf7-51c0-3bdd-be0c-3ce517b4826e.roa
Signing time: Wed 11 Dec 2024 17:42:05 +0000
ROA not before: Wed 11 Dec 2024 17:42:05 +0000
ROA not after: Tue 11 Mar 2025 16:42:05 +0000
asID: 53397
IP address blocks: 23.158.112.0/24 maxlen: 24
2602:fd61::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:63:13:12:25:29:b1:d6:bd:a3:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6
Validity
Not Before: Dec 11 17:42:05 2024 GMT
Not After : Mar 11 16:42:05 2025 GMT
Subject: CN=345108d8-2c31-4a59-b1bc-6851a6489ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:20:9f:10:ac:dd:4f:76:f0:44:54:1b:d7:
82:32:ad:20:c4:8c:c6:5e:4d:ea:6a:0a:36:63:41:
6a:12:7c:f7:1e:af:c8:f5:41:6f:54:b3:60:04:d5:
96:ed:57:0b:7f:d9:8b:34:4f:a2:2c:0b:8f:15:6a:
3c:57:f9:92:58:a3:46:b0:50:0f:dd:b6:d1:81:94:
af:5d:59:e9:db:fa:6b:c8:f3:ed:4c:8b:c1:13:d3:
88:4d:5c:f6:e4:8c:9a:83:dd:5d:24:4d:d1:3e:c9:
ee:ac:4d:54:48:b9:cf:06:46:27:44:d6:b3:c9:d4:
7e:65:9a:21:48:a7:74:af:bb:31:76:44:e6:0b:50:
24:d0:cb:bf:c1:b0:44:3c:79:1b:56:ed:0a:be:39:
ae:db:01:40:d9:1b:04:fa:33:a7:69:eb:a4:fb:8c:
94:f3:5b:7f:4e:56:a5:66:27:63:00:3a:be:6a:4a:
57:aa:4e:07:5b:5d:a8:9c:d9:1b:e5:5c:5b:5b:23:
d4:22:73:bc:b3:c3:c9:1a:b8:a9:18:56:d7:78:53:
71:e0:89:93:6a:9f:2b:a1:97:73:eb:35:ec:29:8b:
9b:f1:de:17:c5:94:13:18:f3:eb:b0:21:1d:99:e4:
3f:5b:39:ee:28:1e:6a:ce:e6:c4:fe:af:51:e0:31:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3E:0B:A5:FA:E4:8B:07:0F:F6:81:6D:2F:3F:23:16:53:A6:0B:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/d80eccf7-51c0-3bdd-be0c-3ce517b4826e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.crl
X509v3 Authority Key Identifier:
keyid:9F:E1:DB:03:7C:50:EB:C7:EC:37:7D:41:0B:4C:B0:D9:B9:A9:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc7e5193-e8ef-4a8e-be1a-0bb6bce259d6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.112.0/24
IPv6:
2602:fd61::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b2:35:91:e0:8b:9f:d5:54:14:06:4a:15:68:46:f1:d6:03:
fd:09:87:bc:6c:04:11:eb:c8:c5:11:2a:8f:ec:9f:f6:5b:18:
77:99:7a:53:c8:4a:de:15:ae:0b:4b:bf:a6:06:0c:af:81:b5:
93:58:d8:53:b4:5c:6e:78:72:b9:9f:b0:3c:da:31:25:38:77:
fc:1e:03:b3:7b:07:c5:30:09:46:90:f3:70:15:83:c4:29:02:
78:40:40:51:a2:6e:9c:c8:cf:27:46:1b:00:6b:06:27:5b:7d:
d6:fa:c7:41:fb:f2:c5:f1:f4:da:ff:17:f9:ba:39:91:c1:19:
b3:24:3c:98:dd:c3:f8:73:d7:0a:53:52:de:2f:2e:d7:8f:d9:
a6:f9:c1:b1:d4:34:33:7b:67:63:d8:cc:75:96:fd:be:4e:87:
67:66:20:86:d9:62:80:61:80:94:ba:32:8d:0e:b4:a8:27:27:
72:48:6a:c7:12:b7:f3:45:23:a1:f8:04:98:a0:1f:c0:6d:ba:
5e:4e:f3:64:4e:17:ac:0e:d1:b6:3c:84:d6:4b:f5:0b:57:77:
bb:05:5d:78:4e:36:5a:88:a9:f0:bd:ce:5a:3a:96:99:ad:49:
c1:d9:8b:e9:45:60:50:a8:de:95:63:5a:c6:3d:97:1f:30:2b:
6e:2f:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:08:21 2025 by rpki-client