Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/dfa172db-5791-39a6-a67b-4ca4350a1685.roa
File: dfa172db-5791-39a6-a67b-4ca4350a1685.roa (raw, json)
Hash identifier: POGr3TtEb8MioCDdjvQw2v3R74zo+Us9AQ47Y/Cwn9w=
Subject key identifier: 44:30:00:6C:A4:D3:90:C2:32:0F:3D:19:9D:38:00:6F:73:52:CA:07
Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial: 010D0C9F432858491AA6ACBD7F9797AFC02F8D80
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/dfa172db-5791-39a6-a67b-4ca4350a1685.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 13847
IP address blocks: 23.128.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:ac:bd:7f:97:97:af:c0:2f:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=4546d604-3eeb-4c60-adb4-3b939514ce86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f6:97:f5:83:41:71:5d:a3:84:db:97:e7:c0:
97:9d:f8:e1:b9:2a:d9:4b:71:51:73:ce:fd:75:34:
4d:02:83:08:97:72:fb:62:ee:36:5e:2c:e8:21:eb:
a9:84:9d:b4:c3:dd:c7:bb:c7:5c:34:b8:01:6f:ca:
59:7c:c6:18:9c:e1:f7:1e:f4:84:8f:4e:3c:b8:ec:
30:83:0d:90:bb:43:92:1c:42:b7:47:63:55:00:43:
6e:cb:ec:ed:59:52:8e:89:da:f7:ab:c6:b5:34:70:
7e:47:96:d2:6e:24:ed:33:39:4d:98:f1:3b:98:37:
02:38:12:f6:c4:37:0d:d9:24:a6:2a:e8:79:ef:89:
87:4c:1e:77:47:94:bf:8c:0d:aa:62:8b:81:04:c8:
54:02:de:e3:ea:29:2a:3a:d0:27:3a:b2:34:7d:24:
ef:1c:cf:4b:cf:a5:0f:5a:5a:99:7c:f1:e3:33:c0:
56:6f:d1:48:a3:8e:36:ae:46:98:f4:91:b3:22:8f:
f4:01:73:d9:41:d7:3d:2b:0c:ad:38:1b:1e:6d:e3:
ea:7d:e8:fb:2c:68:18:28:cc:43:10:34:4b:99:ee:
bb:8f:e9:8c:58:bc:8a:ad:7b:7e:83:d0:53:79:fd:
29:2a:97:ac:a3:b4:72:26:57:23:4a:47:eb:2d:f1:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:30:00:6C:A4:D3:90:C2:32:0F:3D:19:9D:38:00:6F:73:52:CA:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/dfa172db-5791-39a6-a67b-4ca4350a1685.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
X509v3 Authority Key Identifier:
keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:41:d5:f5:e7:df:84:be:17:30:c9:96:82:59:aa:65:b0:b7:
a1:22:4a:62:83:f5:e2:ad:4a:fe:4a:37:d0:4b:c7:14:1a:fb:
6f:40:fb:af:fe:1d:9c:15:38:c9:1f:da:66:c4:e8:75:f4:37:
51:d6:ad:cc:cd:81:b9:34:94:2f:24:90:50:c0:f1:b8:7c:19:
fa:76:52:4e:c3:46:bd:ba:fc:58:7d:79:58:e3:65:6b:c1:0e:
60:5c:bc:01:c4:9b:9f:78:7f:06:e2:f6:1d:1b:42:f5:53:fb:
a5:7b:10:eb:ec:ee:43:34:d5:ed:02:83:f5:9e:22:33:c8:78:
91:a6:4d:5a:4b:84:7b:40:d5:5f:bb:09:a8:ba:13:c8:1c:f2:
a2:21:37:e0:91:53:43:04:98:ea:d0:a1:06:c5:78:3a:9b:99:
82:f1:6c:85:3e:fe:bf:bb:cc:b9:71:9c:89:8a:ae:73:64:b7:
88:bd:a4:04:25:a9:94:48:74:17:49:10:15:10:ab:ae:d1:c3:
e3:18:74:13:91:4e:bf:4b:2b:7c:9a:ce:28:d6:aa:14:cc:98:
80:d6:e1:0e:6c:82:15:94:c3:68:87:a2:0b:e5:d1:9c:b8:94:
51:74:02:30:9f:47:00:4a:bc:fa:7c:41:af:4d:be:63:b9:c1:
e1:39:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:08 2025 by rpki-client