Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/25d151f0-5c0f-3146-948d-00e1c8dc139b.roa
File: 25d151f0-5c0f-3146-948d-00e1c8dc139b.roa (raw, json)
Hash identifier: UODwYA3xcumTx52IaZPAvVANViI7Lr6NEdHP4Qt5L5A=
Subject key identifier: A3:40:A1:D6:CD:DD:45:D3:F3:EB:B0:8E:EF:B7:81:72:E6:11:E3:EA
Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial: 010D0C9F432858494469378E4A3FD4080EE34B00
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/25d151f0-5c0f-3146-948d-00e1c8dc139b.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 14445
IP address blocks: 23.137.136.0/24 maxlen: 24
23.137.137.0/24 maxlen: 24
23.137.138.0/24 maxlen: 24
23.137.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:37:8e:4a:3f:d4:08:0e:e3:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=9693f524-63dd-482b-8fff-839647aca5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6c:99:7b:08:62:24:89:71:ab:7a:e0:f9:d0:
2c:77:ce:8e:8a:7a:d3:4a:bb:79:fb:d4:e7:28:40:
ad:92:a2:82:c0:3c:fb:56:13:69:20:4d:8e:21:aa:
1f:bb:94:9d:e9:79:13:e8:66:5a:bf:d4:ce:a0:61:
93:05:30:56:84:88:fd:5f:83:9a:fa:90:31:e1:56:
89:3e:9f:66:d5:49:ab:4b:7b:de:88:f3:1f:ac:a8:
33:74:bb:bf:2c:66:70:93:40:ad:a1:20:56:1b:3f:
c9:8d:4a:3b:1b:58:ca:0f:f5:12:a2:56:6a:8d:24:
2b:b6:b0:71:78:f5:e9:e9:0e:50:49:95:6a:1c:48:
a4:f0:87:69:5d:30:76:ab:62:dc:95:38:ac:70:c6:
54:14:59:88:49:22:1f:5f:c5:89:1c:74:62:e5:6c:
fd:4c:ce:d5:f8:ce:f9:24:a6:4a:89:3c:e8:77:a0:
d6:de:4f:ee:b5:16:8e:cd:76:79:ce:15:ee:13:f9:
3d:b2:d3:8f:ca:e4:7c:32:f8:37:2c:2b:5b:41:5c:
c3:05:ed:18:f3:e6:ef:b4:5c:38:d3:f9:2a:8a:6e:
54:4e:98:62:78:73:8c:0e:52:4f:5d:95:09:44:08:
09:b7:42:fa:ef:59:1d:d1:35:48:d9:90:5f:c5:ef:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:40:A1:D6:CD:DD:45:D3:F3:EB:B0:8E:EF:B7:81:72:E6:11:E3:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/25d151f0-5c0f-3146-948d-00e1c8dc139b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
X509v3 Authority Key Identifier:
keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:a1:89:c4:7f:7b:58:89:8a:18:e6:46:0c:d2:5b:fa:95:b0:
3d:2d:a0:ba:1a:3e:c6:e5:bd:5f:ca:a1:c6:e2:f3:e5:78:8c:
42:28:4c:07:c1:2f:a2:a3:e9:04:bc:11:de:5d:bd:b4:dc:20:
24:d0:13:91:e1:79:e7:6f:29:4b:b5:f5:a6:db:e8:1b:f1:e8:
ce:bf:e9:5f:6f:93:91:52:3b:4d:66:67:c6:f0:55:2a:88:30:
25:22:9f:36:6b:27:82:00:a3:f0:81:a5:a2:6a:ae:14:e7:61:
19:b4:02:11:93:8b:95:a5:60:ab:6e:a9:92:80:62:ee:e4:72:
bc:6e:8e:a3:94:e3:bb:81:47:c9:e2:5a:62:d5:7e:1f:5f:2d:
20:b4:82:88:76:a0:67:4b:28:10:60:10:45:cb:f3:e9:cc:b3:
10:c7:c5:1f:4f:f2:a9:05:c6:2a:a3:f7:20:16:b8:32:f4:05:
eb:22:c8:57:47:12:1c:54:89:71:2f:ee:8c:aa:7d:d4:4c:6a:
bb:58:e7:a7:59:b0:18:1d:3e:32:06:13:f4:0b:25:a7:42:bf:
bf:e2:76:b9:6c:cc:c7:27:7f:2d:4c:9c:a0:ce:78:83:16:13:
36:64:f0:75:15:6b:cd:7b:72:0c:5c:ae:e9:a8:af:16:2a:f3:
c0:4f:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:48 2025 by rpki-client