Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa
File: 91e1a3cc-e019-3754-b8b6-315f387f30d2.roa (raw, json)
Hash identifier: flOluh83kMlDxQlKIZad/i04/sKmnrQ0ExuWVNzuauA=
Subject key identifier: 14:FE:66:BC:E5:0C:B2:B8:A0:11:CC:98:39:A4:DA:A7:9B:21:F0:D7
Certificate issuer: /CN=478a0a21-d101-464c-8706-25bb157545c8
Certificate serial: 010D0C9F43285848E16BC4FF70BDD890B16CDB00
Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 401457
IP address blocks: 23.128.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:c4:ff:70:bd:d8:90:b1:6c:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=114f864b-451d-4805-8aba-7d0543703c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:6e:95:ff:ac:3c:2e:08:20:9b:35:e6:d5:
56:35:8a:d6:20:9a:64:fb:f7:5d:f2:ed:91:e3:cc:
cd:37:3b:89:6f:56:20:34:18:59:cd:8f:2f:80:e5:
9e:64:e2:db:80:76:6f:21:43:26:40:d7:df:d6:81:
71:64:42:72:e3:2a:ff:1b:82:30:38:47:00:bc:52:
61:ee:e2:be:32:dc:75:f9:21:6f:17:35:85:f6:dd:
ac:17:52:d8:97:6c:8b:64:2b:38:cb:35:49:20:08:
49:3a:62:a6:37:37:35:fc:e5:e2:dd:2e:86:7e:0c:
de:11:89:5a:4d:2d:7e:a8:75:4f:3d:70:01:ce:35:
65:08:be:d5:03:b6:db:c4:1c:78:09:1c:1a:66:69:
25:64:d3:3a:22:27:6b:69:0b:1a:a1:e8:52:c1:b1:
f1:4b:f3:ee:d0:08:8b:7e:d9:47:36:5f:0d:be:cd:
0d:70:8d:20:ed:6e:17:81:ec:1f:26:dd:d8:d7:e5:
b8:60:60:37:94:50:aa:72:cf:5d:4d:f1:95:d6:bb:
cc:c5:70:a1:e3:f0:f9:4b:86:4c:e3:05:4d:32:da:
81:6b:67:05:9c:f4:b3:b7:30:aa:0a:6c:a5:b0:00:
4a:d8:32:e5:d1:e3:c5:73:fb:1f:25:ac:57:e7:db:
ca:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FE:66:BC:E5:0C:B2:B8:A0:11:CC:98:39:A4:DA:A7:9B:21:F0:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/91e1a3cc-e019-3754-b8b6-315f387f30d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl
X509v3 Authority Key Identifier:
keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:01:b4:cb:ce:d3:34:65:7a:2c:f2:5d:a4:3d:6c:21:e8:b7:
75:2e:e7:dd:95:a9:ad:46:f3:c5:4a:47:c9:a7:54:f9:89:ca:
76:00:0f:97:c7:64:80:48:11:58:f3:8b:cd:17:cc:de:c7:32:
8b:f2:3f:af:b3:d3:d2:9a:21:b7:2d:88:be:fa:0a:57:85:a4:
d8:c3:9d:84:0d:fc:f4:46:ac:a4:31:98:cf:d7:20:6e:41:43:
6a:86:c2:ec:3a:cf:5a:98:ec:d2:54:60:0b:50:5d:16:7b:18:
e6:b2:58:6b:06:bf:e0:60:a7:25:9f:a2:d1:3e:fb:85:94:47:
34:db:12:e1:44:13:23:9e:ab:0f:0c:ed:56:79:e8:d3:ff:64:
1e:18:17:81:ed:03:f5:16:30:bd:25:1e:37:ae:9e:9f:6b:14:
0d:58:5e:c1:ca:22:ea:a0:87:a0:82:88:24:6a:f3:c6:55:01:
9d:6c:3a:1e:f8:2a:9c:58:ab:9f:9c:1f:78:0d:f8:67:e4:42:
2c:f4:59:b2:78:2c:7e:f8:00:7a:74:17:6e:bb:29:e2:83:88:
d2:23:e5:23:99:16:cd:c9:65:0c:1a:cd:25:cd:60:80:76:d3:
a1:15:2a:fb:fe:c8:41:51:8f:96:2b:2c:da:43:38:3b:1c:51:
c7:7a:30:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:59 2025 by rpki-client