Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
File: 12e1d236-b7f8-37db-8d5d-f604225f8f77.roa (raw, json)
Hash identifier: sA5YDMuHy1tKSxERiGjreg0zhMlkVK2T8PswzzvAiV0=
Subject key identifier: 6D:34:DA:18:A4:05:AF:DD:63:6B:EA:7A:B4:55:DA:9D:65:99:E8:EF
Certificate issuer: /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Certificate serial: 010D0C9F432858494733F19C1B067021CE22BC80
Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 30006
IP address blocks: 23.191.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f1:9c:1b:06:70:21:ce:22:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=efacca6d-6395-4b5c-be74-21e49f13f750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:fc:ed:aa:31:59:c2:f9:25:14:98:6b:26:
ce:89:c1:ba:98:0d:b3:4d:71:a9:6a:97:05:4b:06:
61:bb:4f:86:c6:7c:ce:d8:09:67:8a:9f:33:79:fd:
73:12:63:a6:d1:8f:87:11:e5:35:d0:3d:44:92:a0:
e2:8b:ea:0b:d0:75:e5:ed:20:4b:d8:aa:d9:31:a7:
e8:7c:b7:c1:db:0b:34:14:0b:c4:ec:9c:14:83:f1:
b2:a7:cf:a9:5b:c4:36:cf:df:68:6b:f4:84:69:ef:
7b:1a:b4:2c:a2:c0:77:a6:32:79:84:ee:31:80:02:
ef:da:7f:5f:2a:11:4e:19:ef:b4:05:50:18:68:ef:
d4:05:8e:83:b7:4b:13:26:24:6a:56:d4:85:a4:e8:
ec:53:44:70:a5:17:bc:e0:ff:6b:3d:22:c1:bd:29:
28:00:e9:0c:87:bd:13:6e:2d:8d:25:fa:43:3c:c7:
3c:06:0f:88:51:05:0a:95:65:ec:d7:17:0e:73:3d:
de:9f:b7:3c:73:a1:23:88:c7:17:cc:66:60:6a:c3:
5c:8e:8c:f7:7e:81:82:84:da:00:fc:b3:6b:73:f8:
23:3d:c7:cb:05:58:bf:31:6e:97:a6:81:99:63:65:
a3:bd:0f:24:e1:7e:b2:40:62:58:25:d9:a0:a2:39:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:34:DA:18:A4:05:AF:DD:63:6B:EA:7A:B4:55:DA:9D:65:99:E8:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl
X509v3 Authority Key Identifier:
keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:4e:0c:f3:cb:fd:76:3e:34:38:ff:19:8d:17:b7:fd:3c:ab:
43:21:8b:b8:78:6c:d9:53:79:a6:21:58:ad:f6:8c:88:71:b6:
1f:33:32:28:43:4c:19:b0:26:d2:22:94:ba:41:4a:65:d6:cf:
f8:06:4c:94:e7:40:4a:9d:99:0d:03:40:f9:ce:8b:5c:64:7a:
4f:11:70:5e:a0:de:03:37:ce:fa:a0:22:4a:5c:3d:ef:a6:09:
c9:b7:bd:ec:4c:28:3c:4e:d0:0c:3a:34:d8:e8:67:da:0e:fe:
41:c3:1b:de:25:49:8f:03:e5:d6:f6:22:9f:80:97:6e:dd:ae:
f3:aa:07:91:90:f5:08:14:d3:21:e4:dd:32:da:8a:1d:d8:5a:
20:36:56:36:cb:91:49:d1:77:1a:cd:89:5a:b7:24:6d:6d:43:
98:16:ca:a1:e6:62:cb:40:d9:40:dd:e9:f6:3f:fb:62:d0:59:
da:a0:df:0e:ca:b9:f2:a0:4d:19:33:0a:9a:be:31:31:8f:45:
02:e3:db:9e:0d:b9:6e:ea:7d:36:f1:d7:5f:72:a4:e5:e4:93:
70:3d:f8:82:4d:1f:18:61:1f:3c:9f:99:1f:2d:49:53:c2:4c:
01:58:7e:a2:5b:58:da:99:de:d2:f3:28:33:26:b2:c9:f0:b7:
e4:60:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:05 2025 by rpki-client