Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/c94cc673-123f-3658-9faf-ceb1370310f2.roa
File: c94cc673-123f-3658-9faf-ceb1370310f2.roa (raw, json)
Hash identifier: ru9aNQnHZvTP7d41S1Hbalp/gc4JT3AeTrkktQHXeQY=
Subject key identifier: 26:7E:F5:63:63:5E:53:5D:85:7B:48:0C:B5:C1:D3:86:5A:D0:E1:E2
Certificate issuer: /CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a
Certificate serial: 010D0C9F43285848E16BEE6AEC754F961B6CE500
Authority key identifier: 5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/c94cc673-123f-3658-9faf-ceb1370310f2.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 401147
IP address blocks: 23.182.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:ee:6a:ec:75:4f:96:1b:6c:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=01640c00-e416-4fb9-bd0e-b08f6807f8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:25:39:28:d2:c1:8b:23:7d:bf:3f:56:55:
b9:3b:c7:97:de:ee:09:0f:bd:76:c6:04:ee:af:53:
44:c7:e3:90:3d:d5:a8:79:48:d2:dd:67:9f:db:34:
79:58:f1:0b:a8:dc:a4:e9:36:d3:4e:3a:be:f7:9a:
86:0c:65:85:27:9f:53:10:08:fb:de:69:3a:c2:11:
ae:f5:43:f5:28:54:4f:26:a2:41:55:44:90:0c:88:
71:1f:62:64:c4:6e:c4:45:9e:7d:9d:80:d8:e5:e2:
8e:64:9e:4b:c1:f6:26:bf:0e:7f:71:9d:4a:ab:ed:
9f:93:ba:c7:4d:f4:a2:1b:78:0b:6f:13:fc:bb:e6:
8d:77:29:2a:78:1a:7e:6b:97:9b:c3:55:c5:95:09:
43:d3:95:05:96:1c:0d:bc:08:44:0b:ee:f3:63:88:
9d:29:d7:87:19:67:95:82:fd:b5:07:bd:62:5b:d8:
f1:38:78:3a:23:03:af:30:e6:fb:7d:9b:a6:84:5d:
dd:e0:60:72:5c:92:fe:80:47:61:41:90:45:71:37:
f7:fc:11:36:c9:bd:59:7e:e8:f2:45:e7:6e:57:6e:
59:16:1f:c6:d3:b6:71:8e:9c:1a:29:e1:17:92:8c:
ef:5e:b1:07:09:d8:54:eb:e7:a6:ef:38:63:2d:33:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7E:F5:63:63:5E:53:5D:85:7B:48:0C:B5:C1:D3:86:5A:D0:E1:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/c94cc673-123f-3658-9faf-ceb1370310f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.crl
X509v3 Authority Key Identifier:
keyid:5E:87:0B:B5:65:AC:44:E9:2C:ED:8B:5C:3C:07:B5:99:5B:10:21:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/bb79cd8c-bea1-45b0-bb53-9c4e976e1c1a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.182.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:79:a5:86:2e:d4:40:4b:e9:9c:61:9f:61:db:88:38:4c:97:
f1:67:f0:c7:64:58:47:82:66:88:45:0e:d8:b2:e8:d0:e0:e2:
57:3f:40:6e:d8:9a:69:e8:a8:fb:65:7d:41:f5:7d:7e:66:92:
af:ad:fc:5f:8f:99:a4:ed:12:90:86:35:16:30:97:9d:5d:d3:
10:4c:ca:1d:d8:f0:ce:70:bb:44:33:a4:88:ca:c8:fd:e3:ca:
1a:94:18:d1:e5:0a:81:bc:ee:56:50:96:08:c5:04:55:84:9c:
bc:26:d7:40:79:f9:02:c6:97:3a:8a:ee:2f:1d:a2:7d:76:14:
88:ed:01:ef:f8:2a:45:52:83:60:be:3e:0d:79:7e:66:09:12:
86:3b:f9:57:85:b1:5e:9c:d8:01:e5:a8:f6:c6:8a:65:76:51:
ee:17:bc:2d:bf:2a:ea:b8:0e:77:4e:0b:08:53:e6:dc:6e:72:
c8:a4:7f:4b:de:53:6d:39:4b:80:e3:91:3e:4a:57:3e:b3:6a:
0e:f8:2c:73:70:9e:a3:4c:c5:3a:6c:6e:82:67:e0:d8:37:4c:
bd:82:81:da:5b:43:77:50:25:65:9e:48:60:dd:bb:59:04:c2:
bf:ad:92:c7:29:ff:dc:63:1e:6d:0f:a4:d9:f1:23:ce:c1:c5:
65:a9:a7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:31 2025 by rpki-client