Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/32f509b5-ec84-3e3b-9012-347864df541a.roa
File: 32f509b5-ec84-3e3b-9012-347864df541a.roa (raw, json)
Hash identifier: 6mjUeZFkPRoDisEPBFsxyOXvsAMoiUOrbcklUNW0zP0=
Subject key identifier: 61:45:48:C0:89:53:39:0F:58:15:63:5E:E3:98:26:ED:FB:49:76:6F
Certificate issuer: /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial: 010D0C9F43285848BCCBA32B9CCE314D1C822E40
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/32f509b5-ec84-3e3b-9012-347864df541a.roa
Signing time: Sat 01 Feb 2025 11:09:10 +0000
ROA not before: Sat 01 Feb 2025 11:09:10 +0000
ROA not after: Fri 02 May 2025 10:09:10 +0000
asID: 150766
IP address blocks: 23.129.68.0/24 maxlen: 24
2602:f7a7::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bc:cb:a3:2b:9c:ce:31:4d:1c:82:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Validity
Not Before: Feb 1 11:09:10 2025 GMT
Not After : May 2 10:09:10 2025 GMT
Subject: CN=51af31cb-6007-435c-b5d4-a4535bdcefac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:2f:7b:e7:02:04:e2:00:ba:09:56:eb:76:
82:b1:ff:3a:b0:1a:2b:e8:31:b1:f0:d4:38:a9:58:
65:08:5f:34:81:08:e6:84:b1:0c:01:74:2a:47:fb:
b9:53:f3:ed:51:82:93:bb:66:b8:e6:47:26:6a:d8:
c1:4a:0c:27:bb:c9:45:0c:8c:c5:3d:fb:52:03:2e:
c4:79:ed:31:fb:bd:dd:a0:ec:55:ae:1e:a5:3d:68:
a6:3b:49:7c:94:95:1c:54:e0:3e:ed:11:6e:cc:13:
a6:2e:49:9d:b3:bd:df:c5:5f:fe:04:22:85:de:42:
82:e2:27:7e:b0:d6:ec:c2:07:ca:df:34:cd:cf:84:
98:ab:af:37:0b:2a:de:4a:64:8e:6e:f5:c2:a2:c5:
e6:04:37:c8:c9:8b:33:aa:2a:30:2d:9e:9b:bc:62:
fb:56:08:e8:25:6a:32:10:85:cc:0b:c3:7c:bc:6a:
16:b2:81:03:f8:b4:0b:93:65:f9:00:67:45:17:93:
9e:85:49:2e:37:96:d6:bb:09:49:13:22:b4:22:8e:
38:97:cc:69:dc:e8:7d:97:c5:b6:db:e9:5b:01:a4:
f2:01:6a:2e:fb:bc:9e:10:2b:74:51:73:4b:ff:ec:
ef:40:b6:25:88:41:b4:5c:21:79:05:a1:77:71:b2:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:45:48:C0:89:53:39:0F:58:15:63:5E:E3:98:26:ED:FB:49:76:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/32f509b5-ec84-3e3b-9012-347864df541a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
X509v3 Authority Key Identifier:
keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.68.0/24
IPv6:
2602:f7a7::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:d5:6a:bd:ed:89:f5:42:76:5d:ba:6f:5f:00:7e:ca:11:9e:
50:b3:02:1c:8c:16:03:29:2a:86:69:6d:e3:5e:af:ca:7f:ad:
31:c7:7c:7b:7b:e4:5f:50:32:86:e9:0b:75:6d:25:cb:56:35:
db:6e:38:3b:78:30:8f:b7:92:bf:31:69:f8:c2:cf:e2:96:e9:
b7:14:2d:37:e1:87:b8:93:50:b3:17:9e:ec:d0:69:e0:1f:88:
9e:a0:7a:4c:db:84:2a:47:fa:96:ed:8d:3b:aa:41:69:35:d9:
cf:86:d5:36:e7:b9:cb:ef:53:bf:b0:a4:35:1e:c5:70:ab:b6:
11:42:87:73:79:a8:40:36:6a:ee:5f:0e:43:63:be:a8:27:ba:
96:2a:a8:d4:7e:16:bc:27:0b:94:88:79:dd:1f:1d:45:cf:85:
59:92:a7:90:6a:4c:15:84:99:09:4e:7d:ec:13:ca:10:5e:ac:
07:6f:0c:b0:d5:07:9a:57:5b:04:14:bd:d6:1b:79:1b:f1:3e:
0f:0c:e8:de:d2:f0:a1:e9:1d:8e:b2:a9:ec:f2:a6:6c:23:e9:
17:b2:5d:d2:9d:4a:ef:1b:79:99:9c:d2:5e:22:a4:dc:75:6b:
d1:fa:3f:d0:e2:85:88:5a:bb:05:0b:6a:de:75:3b:6f:eb:1f:
27:74:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:17 2025 by rpki-client