Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
File: 11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa (raw, json)
Hash identifier: 3u2HubDMbCUuCsxM70Ba6sOO8tMy0JSAf2ZN0I+ISWE=
Subject key identifier: 57:DA:B3:E8:07:67:C6:89:16:B3:36:2A:E0:DD:07:AB:BF:E9:EF:7A
Certificate issuer: /CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
Certificate serial: 010D0C9F43285848D3765DC43300798D0927F580
Authority key identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 394760
IP address blocks: 23.140.8.0/24 maxlen: 24
2602:fb30::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:5d:c4:33:00:79:8d:09:27:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=e33aa2be-b6aa-4cf1-a349-efd8a9f7cd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:60:d0:02:94:49:63:96:a9:a1:9b:97:db:
56:d8:10:5f:2a:19:8e:4c:0a:ed:04:27:c1:5c:05:
98:5e:a5:8b:c3:db:4e:18:e0:e5:c6:26:8b:98:55:
a8:3c:f9:03:bb:23:c7:f1:02:5a:1a:bf:21:35:2f:
76:6a:b6:c9:bf:8e:59:0c:c2:e4:3b:77:a2:e2:93:
c7:5e:f6:0a:d8:e4:b8:3b:89:c6:05:3e:47:91:f1:
28:81:f5:8d:a2:8e:2f:73:b0:bb:90:85:d7:da:b9:
46:31:f2:b4:12:f2:f3:c9:ee:2a:da:a6:60:95:7d:
60:02:24:ee:fe:80:25:32:b4:b7:fb:77:a7:12:ee:
7a:5a:45:9f:38:dd:01:21:1a:31:73:67:37:9a:57:
47:52:62:ce:c8:d6:48:e8:c5:37:fe:de:a3:00:4c:
7d:00:70:54:34:69:eb:fe:c3:14:be:4e:54:e6:2c:
32:8f:fd:f0:27:da:18:11:03:1b:b5:09:dd:6b:f6:
a6:fe:b3:2f:40:ac:de:a5:8c:c9:0e:a2:04:bf:93:
bf:cf:da:13:13:30:ca:a7:0c:32:03:f2:bc:d7:b3:
7a:e7:b6:ff:58:a5:51:14:33:14:80:85:1a:cf:ef:
aa:9d:6c:6b:59:9a:0c:aa:f6:11:09:37:bb:0a:6a:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DA:B3:E8:07:67:C6:89:16:B3:36:2A:E0:DD:07:AB:BF:E9:EF:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl
X509v3 Authority Key Identifier:
keyid:FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.8.0/24
IPv6:
2602:fb30::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:66:e9:30:af:74:bb:7b:f4:b7:98:25:f3:5c:e0:e3:4d:96:
d4:60:51:27:d7:6a:cc:eb:ec:bf:46:1b:23:6c:c1:ac:40:dc:
01:fa:7c:5a:7f:36:4a:dd:fe:4f:10:9d:1c:85:a6:a0:2e:6d:
ba:7a:aa:ef:b4:bf:91:9d:de:6d:7c:bb:13:8c:0c:93:a0:2b:
dc:ed:ff:e9:d3:96:93:51:ff:16:a7:a6:6c:9f:96:f1:77:a7:
1a:07:5d:b6:26:b9:1c:49:d7:53:cf:bc:6f:ba:31:bf:b7:bb:
73:43:9d:a0:f9:93:79:51:97:a8:51:5b:88:fe:e3:11:d1:e6:
15:29:b1:fe:b1:1c:5d:86:be:c2:c5:f6:59:33:3b:41:cd:1a:
0d:d7:f2:15:43:59:ca:ab:3c:29:2a:85:64:25:49:90:da:ae:
f4:fc:21:3a:be:1d:0e:1f:a7:e5:f3:0f:a0:07:c4:e4:83:b3:
ca:4b:b3:ed:79:a9:7b:e3:69:cc:98:7f:d1:76:fd:34:d8:57:
3b:a4:08:a5:14:24:45:ca:c7:14:23:ee:d7:80:81:f4:04:eb:
e1:9a:d0:c1:b4:28:75:21:96:0f:fc:54:53:e9:ce:88:af:57:
07:65:5d:c8:66:f1:79:8d:a3:8d:71:53:55:07:3a:28:dc:64:
cf:70:6e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:43:35 2025 by rpki-client