Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa
File: 050f5b90-2bc6-3aa7-b968-699b132d1876.roa (raw, json)
Hash identifier: wnIYFLB4PLC0p77RpivJ/TiLjZQXVh7TjuDA6lWBps8=
Subject key identifier: FF:B2:A0:F8:73:54:09:A5:12:E0:00:12:83:A3:2B:60:14:50:1C:E1
Certificate issuer: /CN=aec61144-8dba-4096-a6cb-11d1d289ff0f
Certificate serial: 010D0C9F43285848A565F2BC80D25FA5BA3A7D00
Authority key identifier: 31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa
Signing time: Fri 24 Jan 2025 02:00:39 +0000
ROA not before: Fri 24 Jan 2025 02:00:39 +0000
ROA not after: Thu 24 Apr 2025 01:00:39 +0000
asID: 396967
IP address blocks: 23.171.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:65:f2:bc:80:d2:5f:a5:ba:3a:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec61144-8dba-4096-a6cb-11d1d289ff0f
Validity
Not Before: Jan 24 02:00:39 2025 GMT
Not After : Apr 24 01:00:39 2025 GMT
Subject: CN=97bbbb3d-0bfe-4bdd-9de5-a27645345e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:c2:84:85:5e:e0:92:0f:bf:9d:a0:16:b9:
2c:ba:50:24:0a:32:fe:97:86:53:c0:07:de:89:67:
f2:b2:8f:0a:45:fa:2f:b9:18:f0:0b:5b:6b:48:8a:
dc:21:ee:79:3e:ba:73:3c:f2:08:77:6f:ba:35:cf:
84:be:df:39:96:48:17:d7:18:5d:53:ad:54:c3:3d:
f0:1d:86:c4:df:4c:87:f1:bb:6c:b4:d6:d4:4d:fe:
da:8e:32:b0:a9:5c:ab:39:6b:fc:b0:ff:65:2a:9e:
18:e1:ba:0c:4b:e2:9d:f5:9d:36:83:bf:2d:af:9f:
86:76:a4:67:7a:b3:97:ff:d7:77:3e:c2:62:25:c7:
2d:44:7a:0a:dd:1c:f7:77:a4:e1:27:51:fb:3b:1d:
eb:c2:54:88:c7:a5:62:47:bb:3a:d5:92:9f:a8:18:
e6:63:2b:82:a4:4e:ae:61:17:ed:b6:31:f9:7f:a3:
73:b9:37:ed:4d:b5:ff:eb:77:51:ba:3f:bf:3b:21:
48:96:44:26:e4:ca:01:fb:41:e2:95:e3:2b:b4:58:
af:24:16:b8:76:93:ad:a9:64:87:bc:e9:f9:3c:ea:
c9:77:0e:0a:c6:89:06:ff:d5:61:00:4b:fa:11:4d:
64:03:c4:f1:7a:92:50:a5:e7:a7:42:50:01:cb:db:
9a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B2:A0:F8:73:54:09:A5:12:E0:00:12:83:A3:2B:60:14:50:1C:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.crl
X509v3 Authority Key Identifier:
keyid:31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8a:74:f7:ee:1e:c8:fc:70:07:89:3b:f2:52:34:3d:21:bb:
18:55:05:6e:09:44:db:25:c3:a9:35:df:b4:96:91:a1:b8:e3:
d3:3d:15:85:7a:d6:11:bb:12:71:3d:6b:c4:b9:fc:fa:45:06:
e3:1f:e9:7b:4f:7e:22:20:7b:67:90:73:c7:12:2c:d7:b6:91:
af:ad:11:a1:89:d3:9e:b3:a2:9b:90:7b:03:5d:fa:de:32:dc:
e2:57:ba:b9:f3:06:6e:aa:4b:8d:45:dd:89:e3:cb:99:bb:8c:
45:3b:13:74:84:95:41:db:48:a9:61:e1:34:d3:dc:17:2d:e9:
60:12:fe:07:d6:09:1a:cc:51:82:45:4c:b2:10:f8:74:cc:62:
6c:61:76:db:a5:6a:9a:58:15:19:a7:0d:33:4d:e1:b7:a5:43:
b4:52:fd:63:b7:14:50:17:9b:b4:12:66:35:ae:97:81:87:28:
90:ea:24:bc:96:0d:c4:92:12:92:aa:21:e3:a5:75:dd:6a:c6:
ab:7b:6e:6a:a3:38:3a:e1:fc:27:0f:15:bd:4e:8e:4a:3b:bd:
7a:71:48:a8:35:e2:f7:aa:89:68:40:61:2a:6f:5c:b5:8d:4f:
25:23:1a:68:a6:74:f2:d4:31:59:f3:74:c8:b1:8e:fd:8f:e8:
f0:6e:e1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:01 2025 by rpki-client