Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d173a5-dc04-3628-8133-7496c3b4074f.roa
File: 61d173a5-dc04-3628-8133-7496c3b4074f.roa (raw, json)
Hash identifier: Rq99j+cWBIcs2vnOinXMOLHNRyOyDD8tj+AXyp2LCXY=
Subject key identifier: F8:5C:1F:71:27:D2:1F:2C:C7:26:84:07:2B:BF:3C:FF:06:AB:9E:97
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB76CC9CDBF9BCAC5EAE00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d173a5-dc04-3628-8133-7496c3b4074f.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 23.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:76:cc:9c:db:f9:bc:ac:5e:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=c4874ae8-c6ef-4341-ae68-2ad6b3c3313c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:97:ce:23:ca:39:5d:ec:ee:6a:d2:40:9f:
e2:98:df:c2:5d:4d:ef:c1:d3:18:31:19:c9:a6:e0:
5d:d4:90:c1:d5:81:e0:5e:93:95:42:8c:07:95:97:
1c:f8:a7:82:6d:8f:e4:e9:f0:41:04:c1:a2:04:3b:
1f:04:fa:f2:68:55:4b:e1:e5:5a:1f:e5:1f:7f:c1:
9e:41:f2:f2:85:26:81:f7:6f:aa:2d:b7:79:5e:64:
93:f3:1b:d4:9c:da:be:f8:a9:24:55:72:14:f8:a5:
b0:e3:26:2e:ab:c8:22:23:21:f7:93:5c:64:cc:cc:
db:24:5d:75:ed:dd:c4:34:22:25:a7:77:ce:37:32:
d6:f7:68:e9:11:c8:a9:df:8b:0d:e6:f1:9d:52:59:
33:e0:d0:f0:55:0e:e6:22:1d:ef:50:25:d0:7d:11:
ee:4d:4f:37:3c:a7:db:6a:4a:85:c0:d8:47:db:85:
48:05:cd:9e:d9:ab:57:39:2e:16:ee:1b:2e:64:63:
fb:f2:dc:ac:88:e5:21:d0:57:04:9e:0b:fe:27:f9:
46:1f:7c:8e:58:63:ee:99:d3:5b:6a:0f:f3:89:3e:
a5:28:0c:b5:67:79:34:1f:c5:71:21:a9:4f:cb:6c:
60:11:9e:92:38:a5:5d:d4:8e:09:75:ce:e6:47:7c:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5C:1F:71:27:D2:1F:2C:C7:26:84:07:2B:BF:3C:FF:06:AB:9E:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d173a5-dc04-3628-8133-7496c3b4074f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
23.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
f9:4e:f1:9a:00:77:3e:86:15:0a:fd:f3:df:17:c3:23:5e:02:
cd:60:a8:4a:c2:85:6f:ee:49:a0:10:43:90:de:9c:f9:17:96:
f9:d7:96:10:0c:73:c5:6d:ff:b7:25:89:e3:27:31:45:3e:5d:
bc:75:83:0e:5d:7e:74:b6:a2:e4:eb:db:19:6f:ef:5d:1a:f6:
46:6f:a5:aa:0b:95:8a:d9:35:eb:55:1b:1f:6e:a4:45:40:ed:
70:9b:77:24:c7:8b:45:3f:3f:49:71:e1:65:30:80:4b:b8:bc:
5c:d9:2d:19:fe:36:b6:db:74:ac:fd:87:ab:dc:f0:82:58:13:
f0:37:c2:7a:64:95:ca:63:c1:cf:99:68:31:91:4e:4c:32:44:
98:ee:bb:c8:29:62:ea:34:c4:ac:95:35:d2:fb:29:ad:16:86:
09:46:f4:f1:df:d5:86:2b:b0:84:0c:72:d6:11:59:2f:7c:b2:
3f:cf:fd:ed:2f:a2:3e:76:91:10:5b:33:b3:a9:91:28:aa:6f:
f4:d5:a6:d6:82:ef:ef:ce:31:c8:15:cb:2d:ab:9b:1e:2e:06:
c8:32:2e:7b:ae:05:79:7c:64:20:4b:4a:25:b3:d0:21:48:26:
4e:86:27:65:1b:3d:49:24:3e:3a:83:00:d4:51:a9:33:08:13:
8d:13:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:22 2025 by rpki-client