Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa
File: c0888bfe-5f4f-3e00-83d8-b424d973531e.roa (raw, json)
Hash identifier: Jy5g5GOgHTkrHYWW56YDwK+psa3e7QyBs4k3eztH6w4=
Subject key identifier: C1:99:80:53:C7:17:2F:1B:02:96:52:94:35:E3:A0:70:26:3B:F6:6F
Certificate issuer: /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
Certificate serial: 010D0C9F43285848F9269C3F9204B978DA4C8680
Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 53758
IP address blocks: 23.128.96.0/24 maxlen: 24
2620:137:e000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:9c:3f:92:04:b9:78:da:4c:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=4f8a5107-6cf8-40d6-a005-1515a284d1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:ec:c8:64:35:61:f3:17:81:77:cf:c3:57:
7f:d6:85:f6:2d:3a:1e:cd:4c:fa:dc:3b:0f:80:19:
1e:a2:7d:9a:3e:4a:1d:47:26:3a:53:80:af:93:ae:
9a:de:fe:0a:5e:00:25:f8:87:ef:38:54:2e:da:8f:
b9:88:e9:a7:17:f2:f5:93:54:60:79:9d:b0:7f:5a:
b0:b2:c8:a4:09:27:09:a8:d9:3c:c9:cf:60:b0:d2:
ac:b2:62:fe:95:5b:0a:cf:be:7e:1b:91:5b:1f:fa:
ff:e4:69:5a:b2:bd:2d:78:0c:8c:c7:f9:61:28:08:
12:e4:a7:56:a3:9c:88:f7:ab:78:59:59:b4:69:a5:
26:e7:18:03:cb:3e:95:75:1f:8e:c1:b7:3b:29:d7:
b2:54:e4:8f:c6:bb:8b:a3:7f:7e:4b:cf:91:57:54:
01:86:e0:87:a1:a4:b2:57:a6:33:03:91:56:cf:bf:
99:77:07:41:e9:63:2b:30:07:f8:9c:0f:e9:3f:54:
a8:f5:67:ab:70:bf:d2:02:ee:c1:85:ac:6d:2d:91:
49:d4:49:26:59:a4:5c:74:5a:4f:2e:7c:37:b0:16:
f3:41:95:39:80:5a:7f:39:95:36:d2:31:04:c3:76:
7b:17:70:df:f0:4d:a3:95:e2:eb:e9:5c:05:4e:66:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:80:53:C7:17:2F:1B:02:96:52:94:35:E3:A0:70:26:3B:F6:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl
X509v3 Authority Key Identifier:
keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.96.0/24
IPv6:
2620:137:e000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:a3:f3:82:1b:02:ca:9d:8f:cb:a9:01:73:90:08:7c:ca:85:
cd:47:92:8d:ff:37:9c:3b:ac:60:1e:4b:1d:fc:b8:70:ea:61:
a6:a3:8a:be:95:b4:5f:ed:a0:85:82:08:c3:e2:4b:3f:e8:db:
5f:28:12:de:f3:52:5c:8e:df:a0:9a:f9:fb:b0:17:70:42:15:
b9:89:a4:37:bc:0d:98:6e:1e:87:d1:2b:16:3b:4a:66:ef:d4:
1a:b4:5b:cc:ff:4d:85:da:06:07:41:7c:0c:b6:4b:d7:ea:cd:
00:d1:57:cf:f1:6f:56:fd:a2:86:d5:18:cf:62:3d:33:2a:a2:
98:cb:00:2f:63:dc:76:3d:ad:40:5e:d3:6e:41:45:a2:b6:99:
fe:b5:86:52:97:29:a5:ee:97:c3:46:99:a1:28:53:10:97:9a:
f4:4d:c8:28:06:b4:8f:a5:26:f1:b9:e6:ca:12:76:31:f6:60:
7e:f2:1a:20:eb:1e:9c:27:db:7f:ae:8a:be:74:b3:8c:b6:3e:
c3:c2:82:54:d5:07:a9:73:b5:9b:81:a6:cc:78:b5:38:11:7c:
80:1f:a0:a1:ed:51:bd:15:6e:6e:a2:36:9a:bb:02:eb:9c:29:
d5:42:6b:0c:0d:ec:c1:50:bc:d4:5a:76:7f:79:41:04:d4:5a:
12:6b:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:43:58 2025 by rpki-client