Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
File: 5805723c-746c-3198-a633-1c5ff07a902b.roa (raw, json)
Hash identifier: XeJRM7/jdCUyDQbUve8mhKxvKDLVD5nGGU5qHX5W42Q=
Subject key identifier: 31:75:D1:3A:EF:77:52:25:4F:B7:F4:A2:93:B1:82:98:3F:DD:67:59
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848F65BD743F3C41A782B7D5D80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 4766
IP address blocks: 23.248.160.0/24 maxlen: 24
23.248.161.0/24 maxlen: 24
107.155.28.0/24 maxlen: 24
128.1.36.0/24 maxlen: 24
128.1.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d7:43:f3:c4:1a:78:2b:7d:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=4d1775aa-fb4b-4d55-b254-2229bc286051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:f9:93:c0:37:fb:0c:2d:4e:98:b3:48:2e:
fe:b3:67:1f:08:bc:8c:4e:45:aa:5f:a0:b1:37:ba:
8e:31:58:37:30:e9:07:fc:10:1e:4e:77:b3:6f:31:
2b:c0:ee:1d:41:b1:1a:01:a4:45:1f:1e:7b:80:f3:
6b:e1:56:b8:53:f4:a8:a7:c2:47:81:f7:71:ca:12:
27:0f:d4:f1:39:e3:28:65:43:50:81:a9:1d:cd:7e:
fd:a7:d0:95:8e:94:12:14:7d:45:04:df:02:b4:80:
bd:d8:70:dc:03:8c:bc:1a:58:58:01:58:ea:65:97:
14:b9:db:38:70:f8:3c:a9:cb:0e:ab:e4:0d:50:a7:
ed:9b:53:ff:34:60:87:95:7a:c5:db:de:69:4e:33:
fc:30:f9:bd:ad:5d:cd:34:94:26:d7:89:e8:d2:a1:
63:13:63:49:08:4d:78:82:cf:7e:0a:f9:37:1d:28:
f2:6d:20:39:7d:ea:74:d2:12:44:50:85:6c:19:c4:
bd:15:39:9a:09:94:66:6e:1c:40:37:44:1a:1a:76:
63:73:53:21:b3:73:35:86:51:c5:77:b5:6d:79:2e:
86:e2:70:b1:00:98:1a:22:60:90:20:f6:77:7f:5c:
eb:8e:48:59:74:7f:ec:bc:3b:b7:12:c1:9e:8c:65:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:75:D1:3A:EF:77:52:25:4F:B7:F4:A2:93:B1:82:98:3F:DD:67:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.248.160.0/23
107.155.28.0/24
128.1.36.0/24
128.1.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:09:df:e7:69:b0:67:f9:5a:9e:a5:57:e8:d7:d1:a5:79:49:
df:52:58:9f:bf:0f:b8:8a:85:35:67:c7:c9:19:fa:00:92:47:
4a:04:2b:1e:ad:42:59:a9:93:17:ae:41:8a:b9:65:02:49:f0:
0b:a3:10:59:75:c1:8b:07:5f:bc:51:44:4c:1a:f4:94:87:c6:
b9:68:67:b5:f9:ce:00:ba:15:ce:3f:90:8f:1d:d6:5b:5b:dd:
72:7b:01:44:fe:42:5a:fa:b8:93:9a:ac:74:b9:02:70:6e:a1:
f9:06:2d:7b:79:96:63:5c:fa:41:a7:ee:42:fb:8c:4c:8d:57:
2f:30:a7:33:fb:44:c1:2b:d7:d3:36:72:3f:6a:b5:9e:32:20:
c4:aa:d2:ab:d5:fd:af:9a:02:66:10:ab:05:7c:92:3f:b3:26:
f8:f4:f2:b5:fc:75:2b:b8:e0:44:34:e8:a7:9e:67:49:ad:b9:
8a:8f:76:fb:82:3c:da:c0:75:1b:88:d5:8a:3f:97:e4:c5:aa:
95:68:9f:1d:86:f1:af:d0:26:59:f3:51:f5:c0:91:a5:6a:30:
54:96:89:ae:33:4b:44:bb:49:de:4b:e1:e4:6a:27:6a:97:7a:
d1:75:1a:5c:54:bf:39:ea:72:8c:e0:6a:47:a5:17:c3:55:db:
77:e1:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:06 2025 by rpki-client