Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/0aa9d058-8902-3e02-b25f-00a51d97f79c.roa
File: 0aa9d058-8902-3e02-b25f-00a51d97f79c.roa (raw, json)
Hash identifier: arro/OLGWEEaWtavyWQKNRh1XJdliOPv4A2GsXQD984=
Subject key identifier: 39:CB:1C:38:D8:AC:26:D3:C3:AA:B2:4A:FD:B6:A0:FE:5F:49:0C:65
Certificate issuer: /CN=1b03e342-d588-4239-8704-6688d01760d9
Certificate serial: 010D0C9F4328584940397A67481E0F973034BC80
Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/0aa9d058-8902-3e02-b25f-00a51d97f79c.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 397031
IP address blocks: 23.150.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:7a:67:48:1e:0f:97:30:34:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=2f1a1964-41e1-4b5c-8441-418477b174d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a5:28:c2:6d:e8:de:62:b9:6e:59:78:97:e4:
48:21:1a:45:0b:a5:4f:28:9d:df:f4:1b:98:c9:1c:
f7:c3:69:37:8f:b4:2a:0a:46:38:89:dc:9c:c6:d3:
dd:b0:03:99:f5:68:ec:b6:8e:d9:81:e5:43:56:e2:
cd:27:03:00:ae:ca:48:6b:b9:94:d9:b2:90:85:d9:
25:b0:01:10:42:b5:3c:ce:ed:44:9f:f5:77:c4:50:
98:e8:f4:bf:31:b5:09:c4:92:b8:23:c0:18:32:bd:
98:af:7c:06:a6:13:e5:bf:d8:75:2d:d9:54:d7:c3:
cb:4f:c9:c1:4f:d5:d0:ce:79:2e:86:27:6e:d7:07:
94:d5:07:97:f4:3a:99:85:53:22:4c:b6:0b:36:01:
0d:dc:fd:77:15:d5:dd:05:43:5a:2b:fd:33:a7:5c:
4e:48:2c:21:75:c1:e7:18:24:a0:f9:5a:c7:89:0f:
fd:50:40:2c:b0:96:cf:90:f8:99:1b:68:b5:5e:40:
e8:c7:d6:0e:88:d2:ce:ae:38:76:4e:93:1c:37:03:
92:ce:04:96:1f:5b:25:1f:3b:47:0b:fb:9d:58:d3:
50:12:33:b6:5b:f8:64:f0:bc:32:ac:b8:8c:73:6c:
64:c1:87:b0:9f:31:e3:c2:11:06:87:f4:f7:f4:a9:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CB:1C:38:D8:AC:26:D3:C3:AA:B2:4A:FD:B6:A0:FE:5F:49:0C:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/0aa9d058-8902-3e02-b25f-00a51d97f79c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl
X509v3 Authority Key Identifier:
keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:9b:fa:d2:97:95:cd:63:5b:3a:6a:16:cf:31:bf:2f:d8:47:
e6:c6:9b:9c:a1:99:7e:3c:db:5a:56:ee:36:26:b6:97:db:af:
09:0a:78:fc:08:f2:23:0c:d1:89:38:72:58:c6:14:a7:7e:e4:
6c:53:bf:53:7f:8a:90:ab:1f:17:3c:f9:fa:01:f1:f6:64:44:
0c:a0:b2:09:b5:d6:6c:2b:55:bd:d9:e4:2a:0d:b5:f1:cf:d2:
ba:b2:fd:1a:f6:10:87:80:7a:b0:9e:67:cd:25:29:1d:2d:5c:
29:2e:6f:39:6e:e8:27:6c:5e:8e:b3:e9:63:46:e2:57:66:ee:
1c:ef:7c:b2:50:c5:47:fe:57:06:00:2a:2c:2b:76:c4:50:8e:
dd:aa:52:d8:fe:80:8c:38:dd:da:1d:7c:44:f4:94:28:8e:2e:
77:5b:e0:05:97:26:e0:7f:1e:1d:13:12:56:b4:ca:b7:a8:35:
24:12:32:bf:6e:fd:05:a6:75:f1:2e:a6:1a:d7:44:e6:4b:ea:
e8:6f:de:1b:46:de:2a:9d:6b:ec:58:a9:22:d8:5a:33:c1:88:
96:b4:73:a2:e8:45:67:8f:01:c1:5f:5a:a4:cf:c7:b1:60:18:
cf:7d:e0:03:91:8c:08:23:39:29:cb:f3:d3:da:6b:67:32:6f:
08:a9:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:05:36 2025 by rpki-client