Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa
File: 431ff5e4-1113-3827-ae60-a56d271454c4.roa (raw, json)
Hash identifier: fgqVhSdz1w5PN3fqg9pDJfj57wC9hf5vDdNFotx2j7I=
Subject key identifier: 12:90:54:5F:29:D9:3E:AD:F2:77:A1:CE:FF:13:D0:27:7B:CB:3F:BE
Certificate issuer: /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial: 010D0C9F43285848960B5ACA1361429395228240
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 36530
IP address blocks: 23.185.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5a:ca:13:61:42:93:95:22:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=a61dfd91-b5c3-43e4-9925-576a7588153c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:1d:c7:49:f4:ac:5b:54:71:14:48:65:45:
96:7b:25:77:e4:f7:94:c2:7e:a3:0a:32:83:dc:5d:
1a:35:0e:1e:2d:be:69:e8:52:a0:09:2d:b5:bc:12:
8e:96:ff:ae:ae:27:40:cd:21:b4:b8:86:52:7e:81:
b8:b2:6a:4f:c0:41:2f:1f:37:cb:30:c8:fe:b4:04:
cd:4d:21:b9:43:b9:78:35:82:72:b4:d8:3f:af:e2:
ce:7f:f4:8d:d4:3d:02:17:71:af:68:32:43:75:d4:
5f:a1:57:30:5a:dc:c7:3c:6b:64:c5:b2:22:09:1e:
bf:0e:c7:cb:13:b9:84:45:56:b5:ff:f7:b4:fb:7e:
70:9d:f0:9f:9b:76:94:3d:b8:bd:5a:85:7c:0d:fa:
d3:b8:c9:84:e9:d4:7b:39:70:e4:d2:ca:e3:11:fd:
b7:ff:1f:ea:fb:9f:e3:5b:fd:a6:d1:b7:0b:8f:43:
04:79:fc:37:a0:d6:cf:62:ac:c8:a2:ed:b2:16:f2:
16:60:27:17:08:20:98:b1:f3:9a:11:b6:53:cd:cf:
4c:60:9e:bb:94:ee:cb:68:ac:b4:b7:68:d5:fe:cc:
46:59:98:d8:34:c3:da:22:19:4e:74:b9:cb:88:de:
49:bd:9a:b8:7e:a3:51:9d:e8:df:b7:4f:92:7c:ee:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:54:5F:29:D9:3E:AD:F2:77:A1:CE:FF:13:D0:27:7B:CB:3F:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/431ff5e4-1113-3827-ae60-a56d271454c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl
X509v3 Authority Key Identifier:
keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
sbgp-ipAddrBlock: critical
IPv4:
23.185.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:aa:8c:2e:58:49:32:3d:6a:1a:e9:82:a4:b5:cd:af:ab:c2:
33:3c:99:d1:23:13:24:70:19:73:e3:30:c4:c8:dc:44:11:b6:
fd:2b:e6:f0:47:40:8a:72:b5:ca:cf:aa:1a:04:da:56:d6:6f:
85:bd:b7:d3:d2:a7:22:0f:a3:31:e3:ad:3a:00:d1:70:53:c1:
56:bf:50:3a:d2:cd:79:50:82:33:0f:61:f7:bd:19:e2:7d:c5:
a0:13:2a:17:c7:84:b7:03:b7:92:64:18:ce:b6:e9:78:e6:bb:
c0:65:42:bb:50:87:44:e4:bf:b8:60:78:c2:bf:f6:85:fa:05:
43:55:4d:51:4a:04:e0:f6:9b:fe:0b:e5:65:1b:5c:f8:d6:18:
1f:71:76:5f:22:63:7f:96:3d:7e:1b:8f:1c:c8:b4:c0:0f:d9:
3b:19:2f:fa:aa:e5:63:06:ca:be:01:96:2e:25:e5:15:c2:d3:
b5:ce:81:a1:21:54:3f:e9:3c:f8:43:5f:fd:ca:97:00:2a:98:
64:c1:42:9e:d9:88:8b:55:ea:ff:6c:90:ea:96:fa:e4:c9:c0:
85:83:3b:db:72:fa:fd:8b:6d:52:63:e7:55:73:13:63:a7:3b:
4b:23:29:c8:a8:5a:bc:f8:91:93:b0:8d:cf:1e:75:df:4b:64:
d8:c7:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:53 2025 by rpki-client