Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/45eb4fc1-29b3-3c59-bde6-a622758970c1.roa
File: 45eb4fc1-29b3-3c59-bde6-a622758970c1.roa (raw, json)
Hash identifier: qxvQL8zIRuD+DMOyTW+tzRQxc5mtlWSYV5VVM5DYMxI=
Subject key identifier: 69:F9:78:13:DD:30:44:D4:63:7B:82:CD:FD:2D:2E:6E:FF:64:D3:33
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285848C5817540D56459AA57FA3800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/45eb4fc1-29b3-3c59-bde6-a622758970c1.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 23.251.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:75:40:d5:64:59:aa:57:fa:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=743b0974-b1ea-4256-bba2-6bc49951c641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:6c:7f:fe:a4:f7:0f:12:71:f6:7c:bb:cb:
55:d9:15:51:51:02:3e:1a:2b:7d:e9:29:2e:8b:8c:
c5:6e:e0:bc:2f:54:e4:78:96:f0:fb:75:e9:db:f8:
cf:0b:e8:63:90:3d:7e:a9:ce:0f:c7:2e:e6:a4:5b:
a6:40:30:84:91:64:72:7a:1c:d4:90:e9:7c:25:d7:
b0:25:fe:34:4a:9f:6d:65:e0:bd:92:ac:24:49:e3:
da:5d:8d:4f:3b:2f:97:bb:cb:d4:7d:6d:31:6f:67:
b0:8e:97:81:58:84:1a:8c:21:02:7b:36:ff:5c:1a:
fe:41:7a:a6:4c:f4:99:ee:cd:a7:5d:d0:e4:03:b1:
7b:2f:a4:43:c6:83:2f:01:fc:33:8d:55:10:a4:73:
88:d9:ef:90:42:87:00:7c:4d:a2:95:86:9d:22:c5:
68:05:bb:92:0e:4e:82:75:a8:4c:24:13:18:2a:11:
52:f4:27:21:e7:d8:16:9e:78:15:7a:79:10:e9:fc:
ca:06:f8:bc:fd:10:6a:3e:d6:35:66:e4:fc:ef:ff:
5f:ae:e9:df:19:c5:92:14:b0:67:90:ae:84:4a:95:
cc:28:53:58:db:19:97:ba:d9:fe:33:c5:6e:0e:41:
25:11:3c:76:77:e0:82:a5:06:87:53:da:e0:60:3f:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:78:13:DD:30:44:D4:63:7B:82:CD:FD:2D:2E:6E:FF:64:D3:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/45eb4fc1-29b3-3c59-bde6-a622758970c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:69:9f:9d:4c:f8:c2:10:17:9b:cc:b8:49:fe:96:c5:bf:b6:
a2:0d:b1:e4:d2:31:50:c1:51:99:8b:81:bf:80:9d:3c:83:f1:
7d:d9:55:78:1e:c2:3a:27:cd:ec:bf:3c:4b:49:fc:8e:5d:4a:
d6:4b:eb:34:c0:59:28:87:65:51:b8:4c:f9:5b:a8:b9:60:87:
9b:27:2c:6e:7a:e2:6b:53:bc:48:ea:3c:cd:15:8c:34:33:09:
ad:d0:69:bb:3e:ac:65:0b:e3:27:02:01:9e:ea:52:0c:6a:c6:
16:81:fe:54:3e:a5:c6:54:0d:5d:30:9e:fd:23:1f:1c:97:2b:
5b:b7:89:da:f2:8c:15:a4:d1:a6:d2:25:82:aa:04:a1:eb:a0:
c5:0a:fe:9b:3d:fb:1e:28:55:7d:41:c6:15:85:dd:c7:76:86:
0e:f6:8e:37:9e:1a:68:69:4c:81:35:a2:f1:00:41:89:83:65:
a1:d9:3a:7b:5c:b2:4f:b2:47:2d:cb:b8:f9:46:99:ae:fd:46:
16:88:a8:4f:10:39:88:ed:6f:6a:3e:d3:ca:33:38:85:0b:1b:
fa:a5:6a:7e:82:72:f6:36:18:f8:df:fa:dd:87:da:3a:4e:78:
c0:7c:71:22:ec:de:16:03:8a:98:d6:70:81:9c:25:74:f8:08:
93:3a:b8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:15:51 2025 by rpki-client