Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa
File: fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa (raw, json)
Hash identifier: KMUKh7RlkbqLaFJC4wnpclBG+Lw0rMfO2sT+8RbqHCY=
Subject key identifier: 55:C1:70:D6:4F:BF:6F:05:B8:E5:87:2C:47:2F:70:44:82:F5:46:EF
Certificate issuer: /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
Certificate serial: 010D0C9F43285848960B52F44AAE64CB28E46130
Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 393224
IP address blocks: 23.128.98.0/24 maxlen: 24
2620:137:e001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:52:f4:4a:ae:64:cb:28:e4:61:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=4f6e0e54-6561-4b61-91ea-6a288e066503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:11:04:c0:c8:07:d5:9f:a1:d2:e1:13:36:
80:5e:0d:d9:98:2e:6c:68:98:8e:f0:15:7c:0b:c0:
9e:ac:5f:b0:56:4f:5c:a4:18:58:30:da:5e:36:fc:
8d:59:1c:df:0e:6e:a3:fa:0e:96:99:6f:be:ec:55:
7c:78:2a:03:e4:c9:4b:8f:42:87:6e:d8:c4:44:9b:
7c:40:cb:0d:8a:d3:68:cd:25:e1:03:56:93:28:60:
d8:29:57:5f:ba:f4:18:1e:98:25:54:4a:7e:96:5f:
a1:c4:fa:bc:85:ec:a2:d3:e0:60:2b:8b:e4:e2:71:
e4:56:e7:4a:f8:a2:c1:7c:6e:9b:30:01:81:e4:71:
0e:c7:c8:63:61:04:ee:f7:99:49:f6:9f:f9:b8:08:
8b:55:ba:a1:32:79:49:53:30:71:5f:48:7c:4b:ab:
ea:97:57:7f:4f:1e:a6:8f:f7:16:d1:bd:0b:45:44:
4f:5e:90:36:ad:2c:fa:cf:0d:3b:61:d3:e1:b0:c5:
6e:95:dd:e3:83:04:ab:46:22:cc:f9:d3:78:3b:27:
8f:a1:7a:c4:b6:ca:bf:8c:1b:e5:3e:92:30:f7:4e:
bf:7d:19:5d:47:6a:f0:e0:a0:40:5c:81:9b:22:a0:
a7:c3:e8:af:80:a4:2c:e4:3f:b2:8d:35:16:93:5f:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C1:70:D6:4F:BF:6F:05:B8:E5:87:2C:47:2F:70:44:82:F5:46:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl
X509v3 Authority Key Identifier:
keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.98.0/24
IPv6:
2620:137:e001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:a9:04:f7:a3:64:5d:2a:8e:f0:94:b3:b5:13:b0:af:db:84:
49:fb:1d:40:5e:2c:cf:97:9b:13:31:10:7c:19:12:70:6a:2b:
0a:8f:2c:1b:30:5d:40:f8:57:f8:0c:aa:56:14:ff:79:b4:82:
6c:bb:9c:7d:6f:e0:ae:93:f2:22:2d:43:e8:76:9b:ee:d6:bd:
95:e7:70:b4:ef:44:4a:a9:fe:65:79:dc:e5:e0:c5:7b:94:07:
c8:72:45:5c:92:83:e1:64:18:7d:f4:d5:f6:e8:a8:07:50:ca:
f7:ea:c6:b4:cf:ae:1a:58:bd:01:ee:a5:14:dd:43:b5:db:f0:
a4:04:f7:e5:eb:1e:40:b9:71:17:02:5f:20:f6:24:bd:ba:7d:
85:03:54:c3:9e:44:14:c7:ff:81:9e:2c:45:5c:b9:92:6b:b5:
72:8c:01:0c:68:44:bd:57:82:05:03:6f:f5:f4:c5:e3:95:9c:
57:64:14:9d:24:3e:c3:3e:4f:5d:e5:a0:2a:13:ee:4b:a3:c1:
34:b9:91:98:00:31:15:47:86:53:28:f7:93:54:9a:b1:e7:0b:
aa:ce:35:5c:24:0c:6f:24:79:53:d2:9a:c7:8d:d9:35:e8:4c:
db:4c:97:ff:6c:07:2b:14:af:7c:94:1d:7e:b8:bc:1f:78:f0:
f6:c2:1c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:30 2025 by rpki-client